last executing test programs: 49m15.847711516s ago: executing program 32 (id=950): syz_emit_ethernet(0x74, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0xf8, 0x0, {0x12, 0x4, 0x1, 0x0, 0x4, 0x67, 0xf392, 0xff, 0x6, 0x6, @remote, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x20, 0x0, 0x2, [0xd, 0xffffff31, 0x5, 0x3, 0x9, 0x3]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x9, [0x4, 0x4]}]}}, "f38d"}}}}}, 0x0) 37m46.090350221s ago: executing program 33 (id=3311): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) close(0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0xe, 0x5, @mcast1, 0x4}, {0xa, 0x4e24, 0x7, @mcast1, 0x2618e427}, 0xffffffffffffffff, {[0x48, 0x7f, 0xfffffffe, 0xb42, 0x21, 0x1, 0xd, 0x6]}}, 0x5c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140)=0x1000000, 0x4) 33m32.95349447s ago: executing program 34 (id=3771): unshare(0x2a020400) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000400)={0x1, 0x48574653, 0x2, @stepwise={0x2, 0x6, 0x6, 0xbd67, 0x5, 0x4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8241, 0x0) unshare(0x20000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) unshare(0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="3b78e06493f915907745187894bb376082357926309c987fe9e1f8e00b18f48b538fdc329397cb8a47a7f25cdb521bf578c4f1331a0b509e0351aaa86461641c63e18382c0dafa3b89f82e0e", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000080)={0x8000000, 0x1000, 0xd}}) getpgrp(0x0) 30m52.251934472s ago: executing program 35 (id=4018): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80040, 0x110) syz_open_dev$vbi(&(0x7f0000000480), 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6d0e}, [@map_fd={0x18, 0x9, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffff8, 0xf6, &(0x7f00000004c0)=""/246, 0x40f00, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xd, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x80000041, 0x0, 0x0) 19m43.44921859s ago: executing program 4 (id=6759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000006c0)={0x0, "04dd765c89e6c29e7537bc561f309bff"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000016c0)={r1, 0x7, 0x0, [0x6, 0x3, 0x100, 0x2, 0x3], [0x1, 0x3, 0xd8, 0x3, 0x8f, 0x8ef, 0x5, 0xbd4d, 0x8000, 0x9, 0xd0d, 0x11, 0x80000000, 0x1, 0x8000000000000000, 0xfffffffffffff800, 0x34, 0x7, 0x6, 0x8, 0x7fffffff, 0x8000, 0x3, 0x2, 0xdd3, 0xd, 0xfffffffffffffbde, 0x8000000000000000, 0x0, 0xfffffffffffffd79, 0xfffffffffffffffb, 0x8, 0x9, 0xb2, 0xffff, 0x1, 0x54b5857e, 0x5, 0x10001, 0x101, 0x1, 0x1, 0xfff, 0xffff, 0x8, 0x3, 0xb57, 0x8000, 0x101, 0x8000, 0xb, 0xf, 0x0, 0x7, 0x8, 0x8, 0x6, 0x860, 0x39d8, 0x400, 0x4, 0xff, 0xe9000000000000, 0x0, 0x1, 0x5, 0x8, 0x3, 0x2, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffff, 0x5, 0x80, 0x6, 0x4, 0x8, 0x1, 0x21e, 0xd39b, 0x4, 0x1, 0x3, 0x9, 0xe746, 0x6, 0x8, 0x8, 0x6, 0x4, 0x1, 0x3, 0x3, 0x8000, 0x1, 0xffffffffffffff72, 0x9, 0x40a, 0x1, 0xfff, 0x8007, 0x7, 0x3, 0x9, 0x0, 0xfffffffffffeffff, 0x2, 0x5, 0x3bc, 0x2, 0x2, 0xffffffffffffffff, 0x4, 0xfffffffffffffff7, 0x8, 0x3, 0x8, 0x1, 0x10000, 0x7fff]}) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000800000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 19m42.706734438s ago: executing program 4 (id=6761): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES16, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRES16], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x7]}}) 19m40.605211926s ago: executing program 4 (id=6767): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can={0x1d, 0x0, 0xc8}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000004c0)="ffd10de4d2edffe8711eb781ab0a1d8f14e5859b4b9682eeece6bad038380e40d6c4052d42fe6d7cd70704d84261be59e9104e1e3932946a7464ee4be26f6930a44eba69da2f2b061b7d44cf6b6a4a6ac0b484aed27d2e35956678d41c0b21139416aef9ea59e42d1c369a5b4d41cace4460bdf9aaf8100d76f1aef2fdf1c53b69b0d1ef982e0b7c1baed9799865d197ab65a1a2828524d0600ac44bfbe32a30b39e3ab68aff361e00f236ff879dd2a3f57be94480a2c7d6e4abad92a48a5348735dfdd840e9567a12449e0ff34ae4e7edd94a544c4c62278eaad680b9718a", 0xdf}, {&(0x7f0000000680)="740a661ddefdd833db87fea3221f325d477ba3298cf58dcdff71a1ccb4cfeec7668ac43209cfbbadb9db73917af02c0e0cbbebbf39999060775003a65e8a49c62a3d7b7bff284dc74b2b3d82592263643ac5e6fc087ff4b61fd8da6b29b0cb0d47bcd8a07056b4862c63c9773e18d36fa6e5b44a8a5243d7367d33ce065607418b5eeff581e073af852aac04c68e089b970571ad5a1ff7d7bbb5b8aceb261254c6408d2079ec1b71433972ec8f41d2b7456af0cc3ab953cddf976d43c112ba28387c921b266b0102ab317e4aca3b155f9d3004fdb7faa57b01e883955d7690af86fc411f4c80db449e1c10e5bc192fed59dbbb6516fa69b8ee", 0xf9}, {&(0x7f0000000780)="cb2e86e6eda2a775bafcf81efc0fa194b9d94e558ff271f01f3bd3c0df4a1238f5fd5b12d9d04ec1cd518121a95a66d649ce9011ba40b8f378dcf22f705bb12cfaf3a9d8f966a46ba6d8f82b0a33feb30554a3562ef6a38f3ad07f6c5a9db7c789b12c0dd5c903d32d", 0x69}, {&(0x7f0000000980)="e678602b4c8336e4ca5672904b573eeae05378d2b433fb70fa58e188515d1a3b8ddcd6f471e46ec62d80be62bb449c530ec8d903df2a3127fbaffd177605d4376172ff72218aed5109bd25a8db1d338f8c2120991cd25637989c4a02b7ae82c63ed70bf9c150bcd17ad7c73da05d5f52c458888ae92bd43140d74e2a4e64a2d64da931f5512dc37189379c0dd62126ca01dcf20ac6e131a8433286d0f907769428886f28cb461a07bd6af7f3cbc46c77880c19f1a70e202e09c067e7e5dcea79455759721697b2fd2eb44ee4b91fbc2c8d", 0xd1}, {&(0x7f0000000180)="0e6e8b20913e64a69513e7ccf42c45b206933583ceabc3a589e7fa4e18609413818d13035bf45941da", 0x29}, {&(0x7f0000000240)="748879f28fc9bad9bcdc8236e1ac3d", 0xf}, {&(0x7f0000000a80)="3c92341b3ee49ea5ca030a3b834cf79c3f380c4dc45ce84b5c88e6dba7e066ca5852f49a31351159be40bcdda8008dd4afd60b5e1ee846d38a684127d1e27f1e4aa0e3783f737d6c879de7f4f0a33572d56a246f162e6d15d018080db6c3519cc6007ba1c36b57a583cb032e66fb", 0x6e}, {&(0x7f0000000b00)="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", 0x33b}], 0x8}}], 0x1, 0x881) 19m40.53279724s ago: executing program 4 (id=6769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x8, 0x1004, 0x9, 0xc595, 0x409, 0x8, 0xfffffffffffffffe, 0x8, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x10c, &(0x7f0000000040)=0x5, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19m39.298306408s ago: executing program 4 (id=6770): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x27, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0xea, 0xf, 0x4, 0x8, 0x7, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4d, 0x7, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xe, 0x1}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xfb, 0x8, 0x8, 0x8, 0x1}, 0xce, &(0x7f0000000280)={0x5, 0xf, 0xce, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "855bc3fb6a85d7f4faf545a102a2a1cc"}, @generic={0x76, 0x10, 0x1, "9068e34394e38cfdf143e3ac69304728b783ea43ec9a3c1bc70cf5c8205355ef0652b7eb5b0c17747cb95f3670f34ad063220fead8f000f02e4f2b9722ba0facab15aa010f99c0397982ca48ec6d9584894ec6eb0c3aaa895247960f3fdabb9b8f0fdbd0eafa847b4207e6f9a48ca1f5823f9b"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd7f7c1356f02617b7a28da888d52a22"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "f284360d46faf4ebb25bc781d9a4d9fe"}, @ss_container_id={0x14, 0x10, 0x4, 0xd5, "e2c83f6d13f24e91090df73412c002d5"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x416}}, {0x92, &(0x7f0000000380)=@string={0x92, 0x3, "a4a86f777538288bed82df05171f2bea3eb6d477347a017688ead67674c7de923f4284b8b71549bbf13a3e0b8e6ef844944fff1e82477fef9af7d6cce95e9b4585e137ce55be0df8c69afafd21869ca856150938a7682b324bd16e7732a861d4c57f8ae8f2faa5245609b81edd57666eec940c94d0011f5d14a74afbfb9580c4de99fc2fdb7deee07c305bd2e74cf806"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1863}}, {0x89, &(0x7f0000000440)=@string={0x89, 0x3, "e3d102499a967c6ef8830a977f9f417b9d958e26f170d082dde21a7773c07771710533d043985f997a2161db803d54cac0aa209abbd05c1eaa2e9da3d158be8d5977a4d1aba890c8cfb43c6c48e53432856a6b37de610e284626ed022d952c8c0155a7839277425dd2ac504aceefddcc613bfa4b0c54b1ce51c9387066b513985d714c84d9f31b"}}, {0x8b, &(0x7f0000000500)=@string={0x8b, 0x3, "3591613bb023e5304e08f1197e737de8ec27dc09ca9396e214a7a78cce86cf6787831595c77a56be5681b020f18187c514afbadd1444560dfbcf0c37aa468b014edf209c277f0162b2296a571ae389caf665fe1749ecc8a81d5faf8d1147a36ce6d1231113e8cfd990dcb2f9fa4d39541a6b5ed40f00ca9b2701cb4895ffab3637a43ea66dfb467f03"}}]}) syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone3(&(0x7f0000001cc0)={0x18000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x80000000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x6, 0xf34, 0x4, 0x7}) 19m35.491590541s ago: executing program 4 (id=6776): socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x500000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xbf}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = msgget$private(0x0, 0x220) msgctl$IPC_RMID(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffff7f, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 19m19.12539755s ago: executing program 36 (id=6776): socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x500000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb0, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xbf}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = msgget$private(0x0, 0x220) msgctl$IPC_RMID(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffff7f, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 10m11.455710755s ago: executing program 8 (id=9235): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendto(r1, &(0x7f00000001c0)="8d99fb0c8d3ea518bfe2dcfcaa6a9b90", 0x10, 0x8000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 10m11.350857286s ago: executing program 8 (id=9236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 10m11.316767406s ago: executing program 5 (id=9237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x388) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e24, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25030117800c00160006ac0f00000000001400010000000000000000000000ffff0000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r5, &(0x7f0000001640)=[{0x0}, {&(0x7f0000001100)="1ed510d111e636511e361bbc26131cc057c20143a7e7957c3ff845e9bada7082e4a54221d1a7171c273552d3de1d0b2e1a3ce9333964b08227b3944d22388272c7f4f43cc85810f4db86abcd82a835fb96e34eca383f8ebcf6df8fb310843474663daec934f421272a30a856dc9298ee6da4cc9dd6c9007c9a8b2d", 0x7b}, {&(0x7f0000001180)="efa68c98e7ed0c75342494564e5edc263faa5be65d94f879046219d8e983ef3ec0c4f65000211db849bf8c43bcb9ce7d9584fd4955ec1605c7b3317021c484ffc68d20b2ec7e604fa3bf76253bdaf9cba663e37a959b2aa102260f2a73fc289a0c8c4255f01b3953f62c", 0x6a}, {&(0x7f0000001200)="7d26c5a78abb9cbc885564efec735954dd4d9abaa637fe944eb8ca07507364ab8dccb9988347a65ca68ef8404f1fce130e92c53bbae42754d42e4e1409e3a6b7dd3deb5f924e6363438782cf4677f0ed85975906b9fa00dfc1adcf5b93cde3d3f6f39fa0397a628fbaad9f6c416f0e0c1162f2a689e51b98a1c24303c5d23941f14c646cdf8fc040843c13c3580d5a4ca7378b347dae5909fb99ca13dc7ef77793cd829f7d2893f0a9f682e69a204c3febc3de255142", 0xb6}, {&(0x7f00000013c0)="2b5330ea8e602e2ac442ba4fba97", 0xe}, {&(0x7f0000001400)="13459acc4ff567721dcfb8010776c220cc19c294f8dabc34903d5f1d5e30f90ce0a969d9d1a64b34fa387a9b74cb51e48717016becddd8ac606b400e0a705b89ea8aaea63f4bcefd5aa1bc7a32a7240d94cc8026373e4efe4aa9b5dd99dd9be1192433753ba19f531fdddc8a911905970c6a1cfba9e60a66b43517a74e21109b60dc81d67be24db5ff201f8e6e8bf5", 0x8f}, {&(0x7f00000014c0)="373c437c25b896840dbb2957e29f288aebbe3a4b9b464ec5df51192bf53a5c8394f143509f0acab29e1f80a6f93918cfdd7cd642b7d877920994094c3d5326c70f6ef73d63656c30c199e03310598b995df860399725a1bb8c8e9d60a3e975f560e72b4f35b4e8156994fa99", 0x6c}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="913a6ec2645932ec0d99c63080b145f8c6bce5bd0a67b27ad9cff93f0b684cdd9f5a9c2c2718df550165041fa31f25", 0x2f}], 0x9) socket$nl_route(0x10, 0x3, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) 10m9.874591522s ago: executing program 9 (id=9239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r8, 0x47f6, 0x880e, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 10m9.778549692s ago: executing program 5 (id=9240): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003296fb608229084d488ff01020301090233"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x1a00, 0x5411, 0x90, &(0x7f00000001c0)="70bad6d6134eb9c3fea3e1fdacfdddded02438edb6917ed837d79450af8618ef9949a85f1ef0e9ef94b3b9f6031edb897532fb8233e274df8bf706ad240402a166ec5c8045659c0377fce1d2f8daee9876a77928c19abfc9c93f1855b69870e8bfad51661c612c79b600ffea6e05b54ebb00153fc447b5403d43d145e1b51b4789910fe2eea45985fae0dffddaa102c2"}], 0x1}) 10m9.529568808s ago: executing program 8 (id=9241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 10m9.354835771s ago: executing program 8 (id=9242): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="9803", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r5}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x74]}, 0x8, 0x800) fsopen(&(0x7f0000000000)='udf\x00', 0x1) 10m9.204924558s ago: executing program 8 (id=9243): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f6, 0x880e, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x7e64}}, 0x18) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 10m9.091757157s ago: executing program 9 (id=9245): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendto(r1, &(0x7f00000001c0)="8d99fb0c8d3ea518bfe2dcfcaa6a9b90", 0x10, 0x8000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 10m9.024515697s ago: executing program 3 (id=9246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000004"], 0x6c}}, 0x0) 10m9.02383185s ago: executing program 9 (id=9247): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000107d1e383100000000000109022400010000400309040008010300000009210400000122050009058103ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r2, 0x0, 0x0, 0x0, 0x80800}) listen(r2, 0x5) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20e205000081f724c94e1aae93311160536f8c1b050100a220a089fa4eb0595108f6f4006e34c3f8ff217a5aa29e372ed8c5291c2c7dde53ce128d897c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10m8.952385567s ago: executing program 3 (id=9248): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52167448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000600)="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", 0x14a}, {0x0}], 0x4}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10m8.89813008s ago: executing program 3 (id=9249): prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/188) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x10004}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff05, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x57) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtaction={0x90, 0x30, 0xffff, 0x3, 0x0, {}, [{0x7c, 0x1, [@m_police={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x0, 0x0, 0x6, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x90}}, 0x10) 10m8.421107551s ago: executing program 5 (id=9250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000040)='.\\\\,%@-+\xf7\x00', 0x40, 0x8c, 0x0) setresuid(0xee01, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) unshare(0x8040600) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) setresuid(0x0, r1, 0x0) 10m8.285448818s ago: executing program 5 (id=9251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 10m8.284625135s ago: executing program 8 (id=9252): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="980300", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r5}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x74]}, 0x8, 0x800) fsopen(&(0x7f0000000000)='udf\x00', 0x1) 10m8.182695561s ago: executing program 5 (id=9253): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x70, 0xdd, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x8, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x22, 0x1, 0x10, 0x72}, 0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="050f3e000514fa0304816a25bee62bed832793dcbc74899c99221003000d00010a03000a100302040007720070000a1003020500b60a0c0007100203990900ef188958978e5a7ea6ad6228948237d74b0850283aca992dbb7b7db59c9ae3a5bef38ed6316c2aaa1bbbe138ac92abb1fc639ec2510376e65a66331519787e9b245cbeddea6d9a596194b1b9ecc9bb17d57e1cf60a82549bfbb57a3dddd6aa72bdaca2092b51cbb646ec5a90174a944eff1b66919bf394b0c283ce2663c2c79c5f79a0b1b7e8"]}) ioctl$I2C_SMBUS(r0, 0x720, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x200204) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x200204) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000140)=[{0x63, 0xa000, 0x0, 0x0}], 0x1}) 10m7.948114204s ago: executing program 3 (id=9254): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m7.671969034s ago: executing program 3 (id=9255): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000040)="13b8bd00f80c5756d7c74605097e06b11507b8b098c1a997c6e788849fc26e4278a4501c21", 0x25}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000080)="0355e723af4ba191a9daf8cb00ac657564228734bf74319928112962c76bc7116278ddbeb3d61e992bfbd1edaa3a5bb9f57aa19d1fd300735ac7a6162cd834f6f665aaa8014eb8c833b206e0a6a6af92cce5a2d3357f31c1c43a54a6439a2d1d90b5784f9562cc13cb7896c19c075b89fdd371c453a85e974d9166e1704926c52811ef170f67137f0c113478460eccff65a0ca20467f25df676fac4572b60c9e16b00397919b7a799cafa4cc73eaa51d743090f36635019582a6785c7f270c99c0dda0c3c79f334eedd3e95f793f80ec", 0xd0}, {&(0x7f0000000180)="2ae05f24be1727578dc551a07be9f545275addc2071de9af3b63cdbf2f6fa7f9b1105bcb7af52dbf20613a0ed59615ae39b768f92dcbf4", 0x37}, {&(0x7f00000001c0)="1e7e29f53505a5225e4f1d4af0858a4ed94b2ee1deddd3037cb26181460e3d2c45c05ba68a3dbb98da9288aeb5bcfee13c3efdb69a454f1634721ae1dfbdf1b2621fb14a3386370a64751175d5e646faf671b0701ed4c1af51ae79d902dada4c6401103e080953f41b9802fc15d9a482e3d100d51780a11f1131d3a08f9db4fc8450a52cbcd93e86baafb2315bf7f09ab63023f0bd5f2eecd75e04ae445633bd9b07a227e3b5b783db68e585f840f7e0faa4a86781df38", 0xb7}, {&(0x7f0000000280)="41661819de83c176bb2ef6a004326914a1ed78f5c6a4e729ff9369cd3e4e4142949e76f2aca09e8249b0ce5850a0fe36a793912b306d930ea35cff2d75d257e1364f6675f2e63419f7e78df1966758b6125936947f50e76dac7cd2e0c48c0b", 0x5f}, {&(0x7f0000001440)="c701c58210faac582d9071524e2f83d292fce4686b3852bda12a81cca6be0fdcbaaa4bc45515b09289816b63491b4a19864142f82f32220731573682acf61eec6da0e6f35f6cd5d2f8529436e0ead68b0364a146137664881bc6bd2912b5c3fdce0384dedd9cc67a76b49f7420848c9b47a6c98c307b470ad765da8d3e82e265373b9d974949fd09929095ad1d98223f03eb99ceeab997589f334b1950ee345d1cb9dcff3c84a17bd84533e1fa84add2ccf98927a9879fcc1d0db06c45e920b221f03bd471e78fa05e8914bd7320aa044abb6462ad3d98f9b466eaeb1b78d357385e9f1a13b083d3ecf293abd4ed63dcc7c3f51a", 0xf4}, {&(0x7f0000001540)="d48751b9369aa6a4e642950dbfd1d4ef97b4fcc123b0c9fc194b55c717228ce4a29d55eb4e14564d6d82cd5fb2289ba8f9b7523bdd9721b33c9bda0c86d22aacc641c338d35c77e63fed72f960765828570cd77994d1ca400e71f8eec03e8e4db4b0cb5610e8416c1d9a4190e7066f1ceec6d75f97bc9b6478bacde4c01ddb5361c0c6cbd4e63b666b5838582babe1c57b910e6f3e0250f8b74b7e369408f9b91bde543fe65b97722519de37fecffbf7a061f32766b152eb4937c03cbfd03d59b8fb79654413ce243d6f80f60e784fb35ba55c946a1cf81a7c", 0xd9}, {&(0x7f0000001640)="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", 0xbe5}], 0x9) 10m7.494787378s ago: executing program 3 (id=9256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r8, 0x47f6, 0x880e, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 10m7.081665309s ago: executing program 9 (id=9257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c000000000401"], 0x6c}}, 0x0) 10m6.975263869s ago: executing program 9 (id=9258): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendto(r1, &(0x7f00000001c0)="8d99fb0c8d3ea518bfe2dcfcaa6a9b90", 0x10, 0x8000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 10m6.861820747s ago: executing program 9 (id=9259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc000000020000000002"], 0x0) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) lseek(r10, 0x7fffffffffffffff, 0x1) getsockname$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 10m6.772242628s ago: executing program 5 (id=9260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc000000020000000002"], 0x0) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) lseek(r10, 0x7fffffffffffffff, 0x1) getsockname$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 9m49.854755426s ago: executing program 37 (id=9252): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="980300", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r5}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x74]}, 0x8, 0x800) fsopen(&(0x7f0000000000)='udf\x00', 0x1) 9m48.741597513s ago: executing program 38 (id=9256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r8, 0x47f6, 0x880e, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 9m47.958088599s ago: executing program 39 (id=9260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc000000020000000002"], 0x0) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) lseek(r10, 0x7fffffffffffffff, 0x1) getsockname$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 9m47.757980026s ago: executing program 40 (id=9259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc000000020000000002"], 0x0) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) lseek(r10, 0x7fffffffffffffff, 0x1) getsockname$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 2m54.248561644s ago: executing program 0 (id=10167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000000) 2m53.552078818s ago: executing program 0 (id=10169): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x12}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0xfffffffffffffdcc, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 2m53.206938475s ago: executing program 0 (id=10173): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "c34fd6", 0x0, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote}}}}, 0x0) (fail_nth: 5) 2m52.41890207s ago: executing program 0 (id=10175): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) timer_create(0x1, 0x0, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080), &(0x7f00000001c0)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = syz_io_uring_setup(0x388b, &(0x7f0000000100)={0x0, 0x6a30, 0x200, 0x1, 0x382}, &(0x7f0000000180), &(0x7f00000001c0)) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x73bf, 0x8001, 0x7, 0x20002f7, 0x0, r2}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m52.221242662s ago: executing program 0 (id=10177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @loopback}]}, 0x1c}}, 0xea5bc50b6199d7fe) 2m52.02589768s ago: executing program 0 (id=10181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESHEX=r3, @ANYRESHEX=r1], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x4, 0x0, 0x0, 0xf7, &(0x7f0000000340)="ae5cee35a184b5667a2f01af016f0cded6325e876b9a62e364f897885e32c232eb4b3a1c92f3b8a1f0535e2e48eb0f9b1171c53c06ca57c7c347992b35bb6aacf3b1e5ff699170e3d46bcec94da23e3d4d77e8381ce6b6a0356cbc3acd40e4fda24f6c424b4d2219b8eebf535d872434c61b0f4c5781c9779e52188fa14172b699bad9a96023ef1c9841bce74ab377f7ffd6b83504d593c119567779fa838a56997192358db6eea95fc5f54bca209face7beec2604b81a3ec2e11119a18f45cb3126f5e7a185aaff3f55d64776c8f68a06737cb793917341dd66929d7edcfc67b68e6a75d79913e98a268819ae162bc7c0bdef7ccc9fdd"}) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2m35.787272004s ago: executing program 41 (id=10181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESHEX=r3, @ANYRESHEX=r1], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x4, 0x0, 0x0, 0xf7, &(0x7f0000000340)="ae5cee35a184b5667a2f01af016f0cded6325e876b9a62e364f897885e32c232eb4b3a1c92f3b8a1f0535e2e48eb0f9b1171c53c06ca57c7c347992b35bb6aacf3b1e5ff699170e3d46bcec94da23e3d4d77e8381ce6b6a0356cbc3acd40e4fda24f6c424b4d2219b8eebf535d872434c61b0f4c5781c9779e52188fa14172b699bad9a96023ef1c9841bce74ab377f7ffd6b83504d593c119567779fa838a56997192358db6eea95fc5f54bca209face7beec2604b81a3ec2e11119a18f45cb3126f5e7a185aaff3f55d64776c8f68a06737cb793917341dd66929d7edcfc67b68e6a75d79913e98a268819ae162bc7c0bdef7ccc9fdd"}) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2m33.265994099s ago: executing program 7 (id=10204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlink(0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x6, "2313"}, @main=@item_012={0x2, 0x0, 0x8, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 2m32.584997812s ago: executing program 7 (id=10208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 2m30.541116357s ago: executing program 7 (id=10211): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051) 2m29.696155978s ago: executing program 7 (id=10214): pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x7, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x4, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x6, 0x9, 0x10000, 0xfffff7f8]}) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xa86a1000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x29) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{0xfffffffffffffffe}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x402) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) 2m29.098768273s ago: executing program 7 (id=10217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlink(0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x6, "2313"}, @main=@item_012={0x2, 0x0, 0x8, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 2m28.679595057s ago: executing program 7 (id=10218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000000)={{0xdddd0000, 0xdddd1000, 0x0, 0x5, 0x8, 0x24, 0x2, 0xba, 0x6, 0x2, 0x1, 0x8}, {0x5000, 0x1, 0xe, 0x8d, 0x2, 0x4c, 0x5, 0x8, 0x3, 0x3, 0x0, 0x4}, {0x8000000, 0xe6e40000, 0xe, 0x4, 0x1, 0x0, 0x8c, 0xf8, 0xfa, 0x3, 0x7f, 0x7}, {0x0, 0x8080000, 0xf, 0x0, 0x8, 0x2, 0x8, 0x1, 0x6, 0x3, 0x7, 0x30}, {0x1000, 0x4000, 0xa, 0xfd, 0x4, 0x5, 0x7, 0xfe, 0xf1, 0xd, 0x2, 0x5}, {0xeeee8000, 0xf000, 0x3, 0x7f, 0xfd, 0x0, 0xd, 0x3a, 0x5, 0xf7, 0x1, 0x1}, {0x4, 0x4cf29d2b07b7f2e9, 0x10, 0x9, 0x9, 0x9, 0x9, 0x98, 0x3, 0x3a, 0x2, 0x1}, {0x100000, 0x8000000, 0xf, 0xff, 0xa5, 0x0, 0x6, 0xd4, 0x9, 0x7f, 0x1, 0x5}, {0xe2e40000, 0xff}, {0x5000, 0x6}, 0x40010004, 0x0, 0x2000, 0x18, 0x4, 0x400, 0x1000, [0x8000000000000003, 0x1ff, 0x0, 0x7fffffff]}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xd76}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103df252400000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450e00280066000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50956071907800ffff2cb51639171ce31a73e15e5a41a65cbfa578433dcf7585956ce11e1d22a4703718989a15f6900114bea4825f3b301e45bed9b23f4c42f177142ca4586e7a60fabe1c1d7f9582a71d54e5d5abddaf5cdcffc4b1157cd649"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450e00280066000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50956071907800ffff2cb51639171ce31a73e15e5a41a65cbfa578433dcf7585956ce11e1d22a4703718989a15f6900114bea4825f3b301e45bed9b23f4c42f177142ca4586e7a60fabe1c1d7f9582a71d54e5d5abddaf5cdcffc4b1157cd649"], 0x0) socket(0x10, 0x6, 0xd) (async) r8 = socket(0x10, 0x6, 0xd) connect$netlink(r8, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc0000001900010000000000fcdbdf25e0000002000000000000000000000000fe88000000000000000000000000010100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000024000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000ff07000000000000000000000000000000000000000020000008000000000000000300000000000000010001020008000004000500afff"], 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 2m12.180576234s ago: executing program 42 (id=10218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000000)={{0xdddd0000, 0xdddd1000, 0x0, 0x5, 0x8, 0x24, 0x2, 0xba, 0x6, 0x2, 0x1, 0x8}, {0x5000, 0x1, 0xe, 0x8d, 0x2, 0x4c, 0x5, 0x8, 0x3, 0x3, 0x0, 0x4}, {0x8000000, 0xe6e40000, 0xe, 0x4, 0x1, 0x0, 0x8c, 0xf8, 0xfa, 0x3, 0x7f, 0x7}, {0x0, 0x8080000, 0xf, 0x0, 0x8, 0x2, 0x8, 0x1, 0x6, 0x3, 0x7, 0x30}, {0x1000, 0x4000, 0xa, 0xfd, 0x4, 0x5, 0x7, 0xfe, 0xf1, 0xd, 0x2, 0x5}, {0xeeee8000, 0xf000, 0x3, 0x7f, 0xfd, 0x0, 0xd, 0x3a, 0x5, 0xf7, 0x1, 0x1}, {0x4, 0x4cf29d2b07b7f2e9, 0x10, 0x9, 0x9, 0x9, 0x9, 0x98, 0x3, 0x3a, 0x2, 0x1}, {0x100000, 0x8000000, 0xf, 0xff, 0xa5, 0x0, 0x6, 0xd4, 0x9, 0x7f, 0x1, 0x5}, {0xe2e40000, 0xff}, {0x5000, 0x6}, 0x40010004, 0x0, 0x2000, 0x18, 0x4, 0x400, 0x1000, [0x8000000000000003, 0x1ff, 0x0, 0x7fffffff]}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xd76}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103df252400000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450e00280066000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50956071907800ffff2cb51639171ce31a73e15e5a41a65cbfa578433dcf7585956ce11e1d22a4703718989a15f6900114bea4825f3b301e45bed9b23f4c42f177142ca4586e7a60fabe1c1d7f9582a71d54e5d5abddaf5cdcffc4b1157cd649"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450e00280066000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50956071907800ffff2cb51639171ce31a73e15e5a41a65cbfa578433dcf7585956ce11e1d22a4703718989a15f6900114bea4825f3b301e45bed9b23f4c42f177142ca4586e7a60fabe1c1d7f9582a71d54e5d5abddaf5cdcffc4b1157cd649"], 0x0) socket(0x10, 0x6, 0xd) (async) r8 = socket(0x10, 0x6, 0xd) connect$netlink(r8, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc0000001900010000000000fcdbdf25e0000002000000000000000000000000fe88000000000000000000000000010100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000024000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000ff07000000000000000000000000000000000000000020000008000000000000000300000000000000010001020008000004000500afff"], 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 1m57.079199581s ago: executing program 6 (id=10262): getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a00010000000000000000000a0101010000000000000000000000007f0000010000000000000000000000010000000000c97700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003c000000fe8000000000000000000000000000bb00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0002fd2c0000000000000014000e00ffffffff00"], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m55.775300396s ago: executing program 6 (id=10266): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf2ffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x280201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000300)=0x4) 1m55.163500682s ago: executing program 6 (id=10268): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)="bf5bf7", 0x3}], 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="eeffffff0000e3ffc497000007000000ee2e33a8939d82646de5b9a17f82e8a186478c92e62f9d06969bc3f970a4f6c30eae64722dd913ea1df384e80ec68003907230a7abebbc44807993b201822af72d13d3"], 0x10}}], 0x1, 0x4008040) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$smackfs_ipv6host(r5, &(0x7f00000002c0)=@l2={{0x1, 0x3a, 0x8, 0x3a, 0x928f, 0x3a, 0x5, 0x3a, 0x1, 0x3a, 0x3, 0x3a, 0x9, 0x3a, 0x2}, 0x2f, 0x8, 0x20, '@!@'}, 0xb1) 1m54.060554268s ago: executing program 6 (id=10270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlink(0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x6, "2313"}, @main=@item_012={0x2, 0x0, 0x8, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1m50.476168782s ago: executing program 6 (id=10274): getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a00010000000000000000000a0101010000000000000000000000007f0000010000000000000000000000010000000000c9770000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003c000000fe8000000000000000000000000000bb00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0002fd2c0000000000000014000e00ffffffff00"], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m49.029981752s ago: executing program 6 (id=10277): r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f00000005c0)={0x20000085}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_delete(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x537dfd97270ae306, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @gre={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x7}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3e00}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0xffffffff}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 1m30.591301156s ago: executing program 43 (id=10277): r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f00000005c0)={0x20000085}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_delete(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x537dfd97270ae306, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @gre={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x7}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3e00}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0xffffffff}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 1m11.885994239s ago: executing program 1 (id=10297): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usbip_server_init(0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000001100)=0x0) timer_gettime(r1, &(0x7f0000001140)) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) socket(0x2, 0x2, 0x1) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 1m8.236109927s ago: executing program 1 (id=10299): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xc6c01) 1m0.60885093s ago: executing program 1 (id=10302): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb, 0x1512}}, 0x440002) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r3, 0x81) r4 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000600)={0x19980330}, &(0x7f0000001080)={0x200000, 0x200000, 0xa72, 0x0, 0x10001}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r2, 0x1) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r5, r5, 0x0, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000080)="f80c1cc217c55868460312e68c48682fa33cdf4bebc1818d5330472ad5fc38059c1d8a6dc6a53f288c7bb6060040b4872184135cb444c4a900fe8d53075db4024033cf04a6a4ec405e0f503ddae9e1586f07ab80c6710c572c78df6d17323c5e13366ca1dd359c258d0f31b38bc99e22200e796cc7fdcfb2cc3eb0a27e57832c1751db91aa01ed5fbb34939230251843", 0x90, 0x44890, 0x0, 0x0) 58.006522598s ago: executing program 1 (id=10303): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf2ffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000300)=0x4) 55.825318479s ago: executing program 1 (id=10306): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) epoll_create1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 52.7001817s ago: executing program 1 (id=10307): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x618103, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"]) r7 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf079, 0x400, 0x1, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) r10 = accept4(r4, &(0x7f00000000c0)=@can, &(0x7f0000000180)=0x80, 0x80000) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{0x0}, {0x0}], 0x2, 0x1d}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x1, 0x70bd25, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback={0x700}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x6e6bb5, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x0, 0x70bd2b}}, 0x128}}, 0x0) io_uring_enter(r7, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) r13 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x41) ioctl$NBD_DISCONNECT(r13, 0xab08) ioctl$NBD_SET_BLKSIZE(r13, 0xab01, 0xff) 50.563357899s ago: executing program 2 (id=10308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = syz_io_uring_setup(0x1642, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x0, 0x227}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) syz_usb_connect$cdc_ecm(0x6, 0xcd, &(0x7f0000000440)={{0x12, 0x1, 0x340, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0x7, 0x40, 0x80, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x88, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xee56, 0x0, 0x7f}, [@country_functional={0x12, 0x24, 0x7, 0x5, 0x6, [0x7ff, 0x200, 0x400, 0x4, 0x4, 0x7]}, @mdlm_detail={0x5d, 0x24, 0x13, 0xf9, "ba4c4c20e509b8ec99c731ff5055ed76fcf8a28a0e3c80918e3583b4d889f129dc1c625c88ef1136357ec65eb4620bf030699d30ae138b18d0e8e36a4205bbbe0083b574a94c173d2aac18c8bec693518a2d618a59baeb922c"}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x5, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xea, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9f, 0x9, 0x5}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x50, 0x4, 0x8, 0x8, 0x20, 0x8}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x416}}, {0x2d, &(0x7f0000000140)=@string={0x2d, 0x3, "c3cdd64a50e04fb00e6c1d483a8295fda4f56e51f239dbfda310dc33517ff26637571d7e381d1bde6020df"}}]}) syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0xa) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 46.038367181s ago: executing program 2 (id=10309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x2, 0xd, 0x59, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x7, 0x9, 0x1}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201100300000010ef0e0c7240000102030109022400010108800d0904000302030102f8092102000301229458090581034000070802cfef47e78511e3ce92730e7adf74ca75cd18b0cbeafffddd98372ad3bde5498dac4ea8d9af496afa33147d7f15a3b2f40962f4f40e2c1ad444dd2a38c0c294801003dd43fa82ef36692fdd47298cf06258e4f07b306e6fa9fca29afd866a9c0fd1dbe1b277c7bff63041dbebd196a81bbc07c97028024cced28eea09d057b5e471ea0da93124fb3eecb1ecff72ee3d57de05a0404605c80718137c572559691a106b18729b48217070716c3f1652d5c9f60890573b7d3a644246f312b004a3ebd06f0b0ffa39e24a585215d9f2"], &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000004880)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000004980)=@lang_id={0x4, 0x3, 0x809}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r1, &(0x7f0000000000)=""/83, 0x53) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$setpipe(r3, 0x407, 0x9) read$FUSE(r2, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz0\x00', {0xa9, 0xc, 0x8000, 0xeed}, 0x4, [0x8, 0x8000, 0x7fffffff, 0x10000, 0x8, 0x6, 0x10, 0x8, 0x7f, 0x6, 0x8, 0xd, 0xff, 0xe81, 0x2, 0x6, 0x5, 0x9, 0x5, 0xb, 0x0, 0x91, 0xc, 0xffffffff, 0xfffffffb, 0x0, 0x14, 0x481, 0x4, 0x3afc, 0x4, 0x6, 0x8001, 0x8, 0x9, 0x9, 0x8, 0x9, 0xff, 0x53, 0x29, 0xe, 0x4, 0x200, 0xffffff90, 0x97c, 0x7, 0x1, 0xe059, 0x1, 0x56, 0x6, 0x8, 0xf, 0x5, 0x8, 0x0, 0x29, 0x7, 0xf, 0x2, 0x7fff, 0x8], [0x800000, 0x3ff, 0xff, 0x4, 0xdc90f38, 0x7, 0xb4ca, 0xffff7f9d, 0x100, 0x2, 0x4, 0x4, 0x9, 0x0, 0x1000, 0x719, 0xa, 0x6, 0xc, 0x9, 0x0, 0x20006, 0xfffffff8, 0x7fff, 0x2, 0x7, 0x1, 0x5, 0x400, 0xeaf, 0x7, 0x80, 0xd, 0x2, 0x3, 0x9, 0x9, 0x5, 0x200, 0x200, 0x3, 0x9, 0xffe00000, 0x4f5f, 0x1d, 0x7, 0xb2, 0x58e, 0x10, 0x8001, 0x2, 0x46f, 0x0, 0xffffffff, 0x8264, 0xe20b, 0x101, 0x6, 0x40, 0x9, 0x7f17, 0x3, 0x3, 0x6], [0x5, 0xc62, 0x10001, 0x10, 0xb2, 0x7fffffff, 0x810000, 0x3, 0x9, 0x3, 0x7, 0xbd2, 0x4, 0x7, 0x7, 0x4, 0x7ff, 0x1000, 0x57, 0xd54, 0x7, 0x80000000, 0x7fffffff, 0x6, 0xe57, 0x100, 0x7, 0x7, 0x3, 0x7, 0xfffffffd, 0xb995, 0x1ff, 0x5, 0x9, 0x59, 0x0, 0x30, 0xb15, 0x200, 0x7, 0xf, 0xd, 0x6, 0x9, 0x74c, 0x6, 0x8001, 0x0, 0x7, 0x4, 0x2, 0x80, 0x0, 0x7, 0x4, 0x7, 0x101, 0x9, 0xc, 0x0, 0x8, 0x3a76, 0x4], [0x1, 0x4, 0xe, 0x200, 0x5, 0x5, 0x2, 0x81, 0x7, 0x9c, 0x3, 0x1, 0x8, 0x5d, 0x0, 0x5, 0xaa, 0x4, 0x7, 0xcc7, 0x4, 0x6, 0x9, 0x4, 0xfffffffa, 0x1, 0x76, 0x5, 0x8, 0x7, 0x2, 0x6, 0x3, 0xa, 0x7, 0x1, 0xe144, 0x40, 0x2c6, 0x10, 0x2d5, 0x1, 0xd44, 0x0, 0x4, 0x4, 0x63dd, 0x7, 0x7, 0x6, 0x10001, 0x3, 0x10, 0x1, 0xf, 0x80000001, 0x8, 0x8, 0x65, 0xf16, 0x4, 0xa, 0xaecd, 0x87]}, 0x45c) 42.486593812s ago: executing program 2 (id=10310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x5, 0x5, 0x7]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x8, 0x1000, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0xff, {0x7, 0x25, 0x1, 0x2, 0xff, 0xc5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1f, 0xff, 0x0, 0x2}, @as_header={0x7, 0x24, 0x1, 0x9, 0xc, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc, 0x0, 0x0, {0x2, 0x25, 0x1, 0x80, 0x2, 0x81}}}}}}}]}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r4) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000e40)={0x0, 0x9, 0x4}, &(0x7f0000000e80)=0x8) listen(0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x7, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(r6, &(0x7f0000000040)={0x38}, 0x38, 0x0) 36.05036289s ago: executing program 44 (id=10307): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x618103, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"]) r7 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf079, 0x400, 0x1, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) r10 = accept4(r4, &(0x7f00000000c0)=@can, &(0x7f0000000180)=0x80, 0x80000) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{0x0}, {0x0}], 0x2, 0x1d}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x1, 0x70bd25, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback={0x700}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x6e6bb5, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x0, 0x70bd2b}}, 0x128}}, 0x0) io_uring_enter(r7, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) r13 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x41) ioctl$NBD_DISCONNECT(r13, 0xab08) ioctl$NBD_SET_BLKSIZE(r13, 0xab01, 0xff) 29.505149966s ago: executing program 2 (id=10312): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x200000000000000, {0x1, 0x9, 0x9}}, 0x28) 23.74078757s ago: executing program 2 (id=10313): r0 = socket$inet6(0xa, 0x5, 0x0) setuid(0xee01) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x1fe, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 18.372818968s ago: executing program 2 (id=10314): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x80927000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r0, 0xffffe000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents64(r1, &(0x7f0000000240)=""/108, 0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='m', 0xffffff4c}]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x10040) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x84, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack={0x5, 0x1a, [0x8, 0x3, 0x72, 0x8, 0x7, 0x9]}, @timestamp={0x8, 0xa, 0x7, 0x8a}, @fastopen={0x22, 0x3, "e2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @fastopen={0x22, 0x8, "da0647316a11"}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x1, 0x40, 0x1}]}}}}}}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 0s ago: executing program 45 (id=10314): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x80927000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r0, 0xffffe000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents64(r1, &(0x7f0000000240)=""/108, 0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='m', 0xffffff4c}]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x10040) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x84, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack={0x5, 0x1a, [0x8, 0x3, 0x72, 0x8, 0x7, 0x9]}, @timestamp={0x8, 0xa, 0x7, 0x8a}, @fastopen={0x22, 0x3, "e2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @fastopen={0x22, 0x8, "da0647316a11"}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x1, 0x40, 0x1}]}}}}}}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): fx___x64_sys_sendmsg+0x10/0x10 [ 3149.649142][T12933] ? __pfx_ksys_write+0x10/0x10 [ 3149.649170][T12933] ? do_syscall_64+0xbe/0xfa0 [ 3149.649198][T12933] do_syscall_64+0xfa/0xfa0 [ 3149.649220][T12933] ? lockdep_hardirqs_on+0x9c/0x150 [ 3149.649243][T12933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3149.649263][T12933] ? clear_bhb_loop+0x60/0xb0 [ 3149.649286][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3149.649305][T12933] RIP: 0033:0x7fe7ea5eefc9 [ 3149.649322][T12933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3149.649340][T12933] RSP: 002b:00007fe7e8856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3149.649360][T12933] RAX: ffffffffffffffda RBX: 00007fe7ea845fa0 RCX: 00007fe7ea5eefc9 [ 3149.649373][T12933] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3149.649386][T12933] RBP: 00007fe7e8856090 R08: 0000000000000000 R09: 0000000000000000 [ 3149.649397][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3149.649409][T12933] R13: 00007fe7ea846038 R14: 00007fe7ea845fa0 R15: 00007ffd3b42cf38 [ 3149.649440][T12933] [ 3149.732450][T12947] FAULT_INJECTION: forcing a failure. [ 3149.732450][T12947] name failslab, interval 1, probability 0, space 0, times 0 [ 3149.732482][T12947] CPU: 1 UID: 0 PID: 12947 Comm: syz.1.10041 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3149.732504][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3149.732516][T12947] Call Trace: [ 3149.732523][T12947] [ 3149.732532][T12947] dump_stack_lvl+0x189/0x250 [ 3149.732563][T12947] ? __pfx____ratelimit+0x10/0x10 [ 3149.732588][T12947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3149.732614][T12947] ? __pfx__printk+0x10/0x10 [ 3149.732657][T12947] ? __pfx___might_resched+0x10/0x10 [ 3149.732682][T12947] should_fail_ex+0x46c/0x600 [ 3149.732710][T12947] ? fuse_get_req+0x7b9/0x10c0 [ 3149.732734][T12947] should_failslab+0xa8/0x100 [ 3149.732760][T12947] ? fuse_get_req+0x7b9/0x10c0 [ 3149.732782][T12947] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 3149.732813][T12947] fuse_get_req+0x7b9/0x10c0 [ 3149.732849][T12947] ? __pfx_fuse_get_req+0x10/0x10 [ 3149.732875][T12947] ? is_bpf_text_address+0x26/0x2b0 [ 3149.732909][T12947] ? __lock_acquire+0xab9/0xd20 [ 3149.732936][T12947] __fuse_simple_request+0x2bb/0x1bb0 [ 3149.732968][T12947] ? __lock_acquire+0xab9/0xd20 [ 3149.732993][T12947] ? __pfx___fuse_simple_request+0x10/0x10 [ 3149.733044][T12947] ? try_to_take_rt_mutex+0x840/0xb00 [ 3149.733076][T12947] fuse_do_getattr+0x33e/0x620 [ 3149.733103][T12947] ? __pfx_fuse_do_getattr+0x10/0x10 [ 3149.733170][T12947] fuse_permission+0x4ee/0xdc0 [ 3149.733200][T12947] ? __pfx_fuse_permission+0x10/0x10 [ 3149.733221][T12947] ? __pfx_mntput_no_expire+0x10/0x10 [ 3149.733242][T12947] ? dput+0x37/0x2b0 [ 3149.733266][T12947] ? step_into+0x3f7/0xf20 [ 3149.733292][T12947] ? __asan_memcpy+0x40/0x70 [ 3149.733314][T12947] ? step_into+0x3f7/0xf20 [ 3149.733339][T12947] ? __d_lookup+0x66/0x780 [ 3149.733359][T12947] ? __d_lookup+0x66/0x780 [ 3149.733385][T12947] inode_permission+0x285/0x470 [ 3149.733410][T12947] ? __pfx_fuse_permission+0x10/0x10 [ 3149.733434][T12947] may_open+0x325/0x4c0 [ 3149.733457][T12947] path_openat+0x2d9d/0x3840 [ 3149.733481][T12947] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 3149.733513][T12947] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 3149.733537][T12947] ? lockdep_hardirqs_on+0x9c/0x150 [ 3149.733561][T12947] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 3149.733585][T12947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3149.733616][T12947] ? __pfx_path_openat+0x10/0x10 [ 3149.733637][T12947] ? kfence_guarded_alloc+0x8bc/0xc70 [ 3149.733669][T12947] ? __pfx_kfence_guarded_alloc+0x10/0x10 [ 3149.733690][T12947] ? stack_trace_save+0x9c/0xe0 [ 3149.733710][T12947] ? __pfx_stack_trace_save+0x10/0x10 [ 3149.733740][T12947] do_filp_open+0x1fa/0x410 [ 3149.733762][T12947] ? __pfx_do_filp_open+0x10/0x10 [ 3149.733813][T12947] ? do_open_execat+0x93/0x560 [ 3149.733839][T12947] do_open_execat+0x135/0x560 [ 3149.733858][T12947] ? __pfx_do_open_execat+0x10/0x10 [ 3149.733894][T12947] alloc_bprm+0x28/0x5c0 [ 3149.733919][T12947] do_execveat_common+0x1b3/0x6a0 [ 3149.733952][T12947] __x64_sys_execveat+0xc4/0xe0 [ 3149.733978][T12947] do_syscall_64+0xfa/0xfa0 [ 3149.734000][T12947] ? lockdep_hardirqs_on+0x9c/0x150 [ 3149.734028][T12947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3149.734047][T12947] ? clear_bhb_loop+0x60/0xb0 [ 3149.734069][T12947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3149.734087][T12947] RIP: 0033:0x7f5b0d0befc9 [ 3149.734104][T12947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3149.734120][T12947] RSP: 002b:00007f5b0b305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3149.734140][T12947] RAX: ffffffffffffffda RBX: 00007f5b0d316090 RCX: 00007f5b0d0befc9 [ 3149.734155][T12947] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 3149.734168][T12947] RBP: 00007f5b0b305090 R08: 0000000000000000 R09: 0000000000000000 [ 3149.734180][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3149.734192][T12947] R13: 00007f5b0d316128 R14: 00007f5b0d316090 R15: 00007ffcba990528 [ 3149.734223][T12947] [ 3149.769891][T12919] sctp: [Deprecated]: syz.6.10038 (pid 12919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3149.769891][T12919] Use struct sctp_sack_info instead [ 3149.779149][T30040] r8152-cfgselector 7-1: USB disconnect, device number 115 [ 3149.845447][T12946] nullb0: [POWERTEC] p1 [ 3149.855767][T12946] nullb0: p1 size 809004142 extends beyond EOD, truncated [ 3150.151182][ T37] audit: type=1326 audit(3062.113:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.155650][ T37] audit: type=1326 audit(3062.113:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.161337][ T37] audit: type=1326 audit(3062.123:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.165009][T12971] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 3150.166454][ T37] audit: type=1326 audit(3062.123:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.167798][ T37] audit: type=1326 audit(3062.123:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.168322][ T37] audit: type=1326 audit(3062.123:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.169696][ T37] audit: type=1326 audit(3062.123:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.169847][ T37] audit: type=1326 audit(3062.123:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.180755][ T37] audit: type=1326 audit(3062.132:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.180806][ T37] audit: type=1326 audit(3062.132:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12968 comm="syz.7.10045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3150.415940][T12976] fuse: Unknown parameter 'fd0x0000000000000003' [ 3150.983478][ C1] vkms_vblank_simulate: vblank timer overrun [ 3152.658361][ C1] vkms_vblank_simulate: vblank timer overrun [ 3152.856155][ C1] vkms_vblank_simulate: vblank timer overrun [ 3153.366056][ C1] vkms_vblank_simulate: vblank timer overrun [ 3153.367170][T30040] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3153.548121][T30040] usb 3-1: Using ep0 maxpacket: 16 [ 3153.550268][T30040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3153.550302][T30040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3153.550327][T30040] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3153.550369][T30040] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3153.550396][T30040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3153.556439][T30040] usb 3-1: config 0 descriptor?? [ 3154.475222][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3154.768423][ C1] vkms_vblank_simulate: vblank timer overrun [ 3154.771074][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.186553][T30040] usbhid 3-1:0.0: can't add hid device: -71 [ 3155.186682][T30040] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3155.216759][T30040] usb 3-1: USB disconnect, device number 121 [ 3155.392863][ C1] vkms_vblank_simulate: vblank timer overrun [ 3155.461135][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.462509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.558050][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.950650][ C1] vkms_vblank_simulate: vblank timer overrun [ 3156.246668][ T37] kauditd_printk_skb: 59 callbacks suppressed [ 3156.246684][ T37] audit: type=1400 audit(3067.810:4851): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13066 comm="syz.2.10065" dest=20001 [ 3156.283297][ C1] vkms_vblank_simulate: vblank timer overrun [ 3156.523540][ C1] vkms_vblank_simulate: vblank timer overrun [ 3157.063637][ C1] vkms_vblank_simulate: vblank timer overrun [ 3157.318467][ C1] vkms_vblank_simulate: vblank timer overrun [ 3157.496935][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3157.529195][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3157.769484][ C1] vkms_vblank_simulate: vblank timer overrun [ 3158.072078][ C1] vkms_vblank_simulate: vblank timer overrun [ 3159.089904][ C1] vkms_vblank_simulate: vblank timer overrun [ 3159.112317][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3159.239940][ C1] vkms_vblank_simulate: vblank timer overrun [ 3159.444363][ T37] audit: type=1400 audit(3070.804:4852): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13099 comm="syz.2.10071" dest=20001 [ 3160.068738][ C1] vkms_vblank_simulate: vblank timer overrun [ 3160.080699][T10795] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 3160.315569][T10795] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3160.315666][T10795] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3160.315992][T10795] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3160.316067][T10795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.463583][T13114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3160.614816][T10795] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3160.977285][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3160.979944][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.123622][T10795] usb 2-1: USB disconnect, device number 54 [ 3161.775698][ C1] vkms_vblank_simulate: vblank timer overrun [ 3161.920981][T13174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10087'. [ 3161.927553][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10087'. [ 3162.067438][ T37] audit: type=1326 audit(3073.152:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.1.10087" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b0d0befc9 code=0x0 [ 3162.069433][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3162.777368][ C1] vkms_vblank_simulate: vblank timer overrun [ 3163.169330][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3163.435052][T13200] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10095'. [ 3163.589587][ C1] vkms_vblank_simulate: vblank timer overrun [ 3163.591388][ T37] audit: type=1400 audit(3074.676:4854): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13198 comm="syz.7.10095" daddr=::ffff:172.20.20.170 dest=20128 [ 3163.813257][ C1] vkms_vblank_simulate: vblank timer overrun [ 3164.328818][ C1] vkms_vblank_simulate: vblank timer overrun [ 3164.511048][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.511782][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.965547][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.313178][ C1] vkms_vblank_simulate: vblank timer overrun [ 3165.444212][ C1] vkms_vblank_simulate: vblank timer overrun [ 3165.671331][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.673073][T29080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.707811][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3166.734669][T29188] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 3166.756806][T13254] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 3166.846703][T10795] net_ratelimit: 2 callbacks suppressed [ 3166.846724][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3166.889272][T29188] usb 7-1: Using ep0 maxpacket: 32 [ 3166.892142][T29188] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3166.892182][T29188] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3166.892219][T29188] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 3166.892245][T29188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3166.898429][T29188] usb 7-1: config 0 descriptor?? [ 3167.690356][T29188] sigmamicro 0003:1C4F:0059.005A: unknown main item tag 0x0 [ 3167.695468][T29188] sigmamicro 0003:1C4F:0059.005A: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.6-1/input0 [ 3167.787896][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3167.959837][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3168.288996][ C1] vkms_vblank_simulate: vblank timer overrun [ 3168.450313][ C1] vkms_vblank_simulate: vblank timer overrun [ 3168.795806][T10795] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3169.028912][T10795] usb 2-1: Using ep0 maxpacket: 16 [ 3169.172475][ C1] vkms_vblank_simulate: vblank timer overrun [ 3169.176450][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3169.202420][T10795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3169.202455][T10795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3169.202478][T10795] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3169.202521][T10795] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3169.202544][T10795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3169.208294][T10795] usb 2-1: config 0 descriptor?? [ 3169.598215][ C1] vkms_vblank_simulate: vblank timer overrun [ 3169.688390][ C1] vkms_vblank_simulate: vblank timer overrun [ 3169.796699][ C1] vkms_vblank_simulate: vblank timer overrun [ 3170.647957][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3170.650331][T13316] Can't find ip_set type hash:ne [ 3170.705986][ C1] vkms_vblank_simulate: vblank timer overrun [ 3170.938575][T13321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10118'. [ 3170.938660][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10118'. [ 3170.949828][T15413] usb 7-1: USB disconnect, device number 116 [ 3171.037712][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.141013][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.507390][T27936] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 3171.617434][T13345] FAULT_INJECTION: forcing a failure. [ 3171.617434][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3171.617457][T13345] CPU: 0 UID: 0 PID: 13345 Comm: syz.7.10123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3171.617470][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3171.617477][T13345] Call Trace: [ 3171.617482][T13345] [ 3171.617489][T13345] dump_stack_lvl+0x189/0x250 [ 3171.617521][T13345] ? __pfx____ratelimit+0x10/0x10 [ 3171.617546][T13345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3171.617572][T13345] ? __pfx__printk+0x10/0x10 [ 3171.617596][T13345] ? __might_fault+0xb0/0x130 [ 3171.617621][T13345] should_fail_ex+0x46c/0x600 [ 3171.617639][T13345] _copy_from_user+0x2d/0xb0 [ 3171.617652][T13345] btf_new_fd+0x33a/0xcf0 [ 3171.617676][T13345] ? safesetid_security_capable+0xa9/0x1a0 [ 3171.617704][T13345] ? __pfx_btf_new_fd+0x10/0x10 [ 3171.617730][T13345] ? bpf_token_put+0x143/0x160 [ 3171.617757][T13345] ? bpf_btf_load+0x126/0x190 [ 3171.617780][T13345] __sys_bpf+0x3ed/0x860 [ 3171.617796][T13345] ? __pfx___sys_bpf+0x10/0x10 [ 3171.617808][T13345] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 3171.617837][T13345] ? ksys_write+0x230/0x260 [ 3171.617863][T13345] ? __pfx_ksys_write+0x10/0x10 [ 3171.617892][T13345] __x64_sys_bpf+0x7c/0x90 [ 3171.617916][T13345] do_syscall_64+0xfa/0xfa0 [ 3171.617938][T13345] ? lockdep_hardirqs_on+0x9c/0x150 [ 3171.617952][T13345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3171.617963][T13345] ? clear_bhb_loop+0x60/0xb0 [ 3171.617976][T13345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3171.617987][T13345] RIP: 0033:0x7fe7ea5eefc9 [ 3171.618004][T13345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3171.618024][T13345] RSP: 002b:00007fe7e8856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3171.618045][T13345] RAX: ffffffffffffffda RBX: 00007fe7ea845fa0 RCX: 00007fe7ea5eefc9 [ 3171.618061][T13345] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 3171.618074][T13345] RBP: 00007fe7e8856090 R08: 0000000000000000 R09: 0000000000000000 [ 3171.618087][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3171.618099][T13345] R13: 00007fe7ea846038 R14: 00007fe7ea845fa0 R15: 00007ffd3b42cf38 [ 3171.618120][T13345] [ 3171.689865][T27936] usb 7-1: Using ep0 maxpacket: 32 [ 3171.873110][T10795] usbhid 2-1:0.0: can't add hid device: -71 [ 3171.873238][T10795] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3171.896470][T27936] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3171.897772][T27936] usb 7-1: config 7 has an invalid interface number: 128 but max is 0 [ 3171.897796][T27936] usb 7-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 3171.897817][T27936] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 3171.897836][T27936] usb 7-1: config 7 has no interface number 0 [ 3171.897883][T27936] usb 7-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 3171.897911][T27936] usb 7-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 3171.897936][T27936] usb 7-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 3171.897963][T27936] usb 7-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 3171.897990][T27936] usb 7-1: config 7 interface 128 has no altsetting 0 [ 3171.935671][T27936] usb 7-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 3171.935700][T27936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3171.935721][T27936] usb 7-1: Product: syz [ 3171.935738][T27936] usb 7-1: Manufacturer: syz [ 3171.935762][T27936] usb 7-1: SerialNumber: syz [ 3172.036425][T10795] usb 2-1: USB disconnect, device number 55 [ 3172.050879][T13333] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 3172.074915][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3172.409770][ C1] vkms_vblank_simulate: vblank timer overrun [ 3172.715847][ C1] vkms_vblank_simulate: vblank timer overrun [ 3173.668862][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3173.700269][ C1] vkms_vblank_simulate: vblank timer overrun [ 3173.742929][T27936] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3173.742987][T27936] usb 7-1: MIDIStreaming interface descriptor not found [ 3173.885613][ C1] vkms_vblank_simulate: vblank timer overrun [ 3173.940379][T27936] usb 7-1: USB disconnect, device number 117 [ 3174.439775][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3174.590101][ C1] vkms_vblank_simulate: vblank timer overrun [ 3174.971937][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3175.358667][ C1] vkms_vblank_simulate: vblank timer overrun [ 3175.457263][ T37] audit: type=1400 audit(3085.780:4855): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13442 comm="syz.6.10139" daddr=::ffff:0.0.0.0 dest=20002 [ 3175.458308][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3175.852855][T13456] FAULT_INJECTION: forcing a failure. [ 3175.852855][T13456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3175.852889][T13456] CPU: 1 UID: 0 PID: 13456 Comm: syz.7.10144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3175.852911][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3175.852924][T13456] Call Trace: [ 3175.852932][T13456] [ 3175.852941][T13456] dump_stack_lvl+0x189/0x250 [ 3175.852972][T13456] ? __pfx____ratelimit+0x10/0x10 [ 3175.852996][T13456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3175.853023][T13456] ? __pfx__printk+0x10/0x10 [ 3175.853061][T13456] should_fail_ex+0x46c/0x600 [ 3175.853092][T13456] _copy_to_user+0x31/0xb0 [ 3175.853116][T13456] simple_read_from_buffer+0xe1/0x170 [ 3175.853147][T13456] proc_fail_nth_read+0x1b6/0x220 [ 3175.853172][T13456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3175.853196][T13456] ? rw_verify_area+0x2ac/0x4e0 [ 3175.853219][T13456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3175.853242][T13456] vfs_read+0x206/0xa30 [ 3175.853274][T13456] ? __pfx_vfs_read+0x10/0x10 [ 3175.853293][T13456] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 3175.853323][T13456] ? mutex_lock_nested+0x154/0x1d0 [ 3175.853342][T13456] ? fdget_pos+0x253/0x320 [ 3175.853377][T13456] ksys_read+0x14b/0x260 [ 3175.853402][T13456] ? __pfx_ksys_read+0x10/0x10 [ 3175.853429][T13456] ? do_syscall_64+0xbe/0xfa0 [ 3175.853456][T13456] do_syscall_64+0xfa/0xfa0 [ 3175.853478][T13456] ? lockdep_hardirqs_on+0x9c/0x150 [ 3175.853502][T13456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3175.853522][T13456] ? clear_bhb_loop+0x60/0xb0 [ 3175.853547][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3175.853571][T13456] RIP: 0033:0x7fe7ea5ed9dc [ 3175.853589][T13456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3175.853607][T13456] RSP: 002b:00007fe7e8856030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3175.853628][T13456] RAX: ffffffffffffffda RBX: 00007fe7ea845fa0 RCX: 00007fe7ea5ed9dc [ 3175.853643][T13456] RDX: 000000000000000f RSI: 00007fe7e88560a0 RDI: 0000000000000004 [ 3175.853657][T13456] RBP: 00007fe7e8856090 R08: 0000000000000000 R09: 0000000000000000 [ 3175.853669][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3175.853682][T13456] R13: 00007fe7ea846038 R14: 00007fe7ea845fa0 R15: 00007ffd3b42cf38 [ 3175.853716][T13456] [ 3175.912115][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3175.941463][T13457] netlink: 'syz.1.10141': attribute type 11 has an invalid length. [ 3176.087513][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3176.524171][ C1] vkms_vblank_simulate: vblank timer overrun [ 3176.600569][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 3176.795218][T13469] FAULT_INJECTION: forcing a failure. [ 3176.795218][T13469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3176.795251][T13469] CPU: 0 UID: 0 PID: 13469 Comm: syz.2.10148 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3176.795274][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3176.795286][T13469] Call Trace: [ 3176.795294][T13469] [ 3176.795304][T13469] dump_stack_lvl+0x189/0x250 [ 3176.795335][T13469] ? __pfx____ratelimit+0x10/0x10 [ 3176.795359][T13469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3176.795386][T13469] ? __pfx__printk+0x10/0x10 [ 3176.795410][T13469] ? __might_fault+0xb0/0x130 [ 3176.795446][T13469] should_fail_ex+0x46c/0x600 [ 3176.795477][T13469] _copy_from_user+0x2d/0xb0 [ 3176.795499][T13469] ___sys_sendmsg+0x158/0x2a0 [ 3176.795532][T13469] ? __pfx____sys_sendmsg+0x10/0x10 [ 3176.795592][T13469] ? __fget_files+0x2a/0x420 [ 3176.795616][T13469] ? __fget_files+0x3a6/0x420 [ 3176.795650][T13469] __x64_sys_sendmsg+0x1a1/0x260 [ 3176.795676][T13469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3176.795708][T13469] ? __pfx_ksys_write+0x10/0x10 [ 3176.795735][T13469] ? do_syscall_64+0xbe/0xfa0 [ 3176.795763][T13469] do_syscall_64+0xfa/0xfa0 [ 3176.795785][T13469] ? lockdep_hardirqs_on+0x9c/0x150 [ 3176.795809][T13469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3176.795828][T13469] ? clear_bhb_loop+0x60/0xb0 [ 3176.795852][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3176.795870][T13469] RIP: 0033:0x7f44ec6eefc9 [ 3176.795888][T13469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3176.795906][T13469] RSP: 002b:00007f44ea956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3176.795926][T13469] RAX: ffffffffffffffda RBX: 00007f44ec945fa0 RCX: 00007f44ec6eefc9 [ 3176.795940][T13469] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 3176.795954][T13469] RBP: 00007f44ea956090 R08: 0000000000000000 R09: 0000000000000000 [ 3176.795967][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3176.795979][T13469] R13: 00007f44ec946038 R14: 00007f44ec945fa0 R15: 00007fffb22428c8 [ 3176.796012][T13469] [ 3177.119558][T15415] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3177.286497][T15415] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3177.286558][T15415] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3177.286585][T15415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3177.303604][T15415] usb 3-1: config 0 descriptor?? [ 3177.341675][T15415] pwc: Askey VC010 type 2 USB webcam detected. [ 3177.531056][ C1] vkms_vblank_simulate: vblank timer overrun [ 3177.552223][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3177.569252][T15413] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 3177.707870][T15413] usb 7-1: device descriptor read/64, error -71 [ 3177.708394][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3177.839140][ C1] vkms_vblank_simulate: vblank timer overrun [ 3177.943172][T15415] pwc: recv_control_msg error -71 req 02 val 2b00 [ 3177.944004][T15415] pwc: recv_control_msg error -71 req 02 val 2700 [ 3177.953766][T15415] pwc: recv_control_msg error -71 req 02 val 2c00 [ 3177.954267][T15415] pwc: recv_control_msg error -71 req 04 val 1000 [ 3177.954812][T15415] pwc: recv_control_msg error -71 req 04 val 1300 [ 3177.955278][T15415] pwc: recv_control_msg error -71 req 04 val 1400 [ 3177.955752][T15415] pwc: recv_control_msg error -71 req 02 val 2000 [ 3177.956214][T15415] pwc: recv_control_msg error -71 req 02 val 2100 [ 3177.956688][T15415] pwc: recv_control_msg error -71 req 04 val 1500 [ 3177.957148][T15415] pwc: recv_control_msg error -71 req 02 val 2500 [ 3177.957662][T15415] pwc: recv_control_msg error -71 req 02 val 2400 [ 3177.958151][T15415] pwc: recv_control_msg error -71 req 02 val 2600 [ 3177.958620][T15415] pwc: recv_control_msg error -71 req 02 val 2900 [ 3177.959100][T15415] pwc: recv_control_msg error -71 req 02 val 2800 [ 3177.959788][T15415] pwc: recv_control_msg error -71 req 04 val 1100 [ 3177.960262][T15415] pwc: recv_control_msg error -71 req 04 val 1200 [ 3177.963037][T15415] pwc: Registered as video103. [ 3177.969594][ C1] vkms_vblank_simulate: vblank timer overrun [ 3177.972257][T15415] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input128 [ 3177.985593][T15415] usb 3-1: USB disconnect, device number 122 [ 3178.006889][T15413] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 3179.415386][ C1] vkms_vblank_simulate: vblank timer overrun [ 3179.419924][T15413] usb 7-1: device descriptor read/64, error -71 [ 3179.578009][T15413] usb usb7-port1: attempt power cycle [ 3179.734156][ C1] vkms_vblank_simulate: vblank timer overrun [ 3179.781324][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3179.929333][ C1] vkms_vblank_simulate: vblank timer overrun [ 3180.502093][ C1] vkms_vblank_simulate: vblank timer overrun [ 3180.671088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.743849][T15413] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 3180.867853][ C1] vkms_vblank_simulate: vblank timer overrun [ 3180.877445][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.903379][T13534] FAULT_INJECTION: forcing a failure. [ 3180.903379][T13534] name failslab, interval 1, probability 0, space 0, times 0 [ 3180.903411][T13534] CPU: 1 UID: 0 PID: 13534 Comm: syz.6.10159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3180.903434][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3180.903446][T13534] Call Trace: [ 3180.903455][T13534] [ 3180.903464][T13534] dump_stack_lvl+0x189/0x250 [ 3180.903495][T13534] ? __pfx____ratelimit+0x10/0x10 [ 3180.903519][T13534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3180.903546][T13534] ? __pfx__printk+0x10/0x10 [ 3180.903575][T13534] ? __pfx___might_resched+0x10/0x10 [ 3180.903600][T13534] ? fs_reclaim_acquire+0x7d/0x100 [ 3180.903629][T13534] should_fail_ex+0x46c/0x600 [ 3180.903657][T13534] ? alloc_empty_file+0x55/0x1d0 [ 3180.903674][T13534] should_failslab+0xa8/0x100 [ 3180.903700][T13534] ? alloc_empty_file+0x55/0x1d0 [ 3180.903715][T13534] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 3180.903737][T13534] ? rt_spin_unlock+0x150/0x200 [ 3180.903763][T13534] alloc_empty_file+0x55/0x1d0 [ 3180.903782][T13534] alloc_file_pseudo+0x13d/0x210 [ 3180.903804][T13534] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 3180.903846][T13534] anon_inode_getfile+0xc5/0x1a0 [ 3180.903867][T13534] ? bpf_link_prime+0x47/0x270 [ 3180.903890][T13534] bpf_link_prime+0x125/0x270 [ 3180.903914][T13534] bpf_raw_tp_link_attach+0x499/0x640 [ 3180.903941][T13534] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 3180.903973][T13534] ? __fget_files+0x2a/0x420 [ 3180.904007][T13534] bpf_raw_tracepoint_open+0x1b8/0x220 [ 3180.904036][T13534] __sys_bpf+0x73e/0x860 [ 3180.904062][T13534] ? __pfx___sys_bpf+0x10/0x10 [ 3180.904119][T13534] __x64_sys_bpf+0x7c/0x90 [ 3180.904143][T13534] do_syscall_64+0xfa/0xfa0 [ 3180.904166][T13534] ? lockdep_hardirqs_on+0x9c/0x150 [ 3180.904190][T13534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3180.904209][T13534] ? clear_bhb_loop+0x60/0xb0 [ 3180.904232][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3180.904250][T13534] RIP: 0033:0x7f6dc733efc9 [ 3180.904268][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3180.904284][T13534] RSP: 002b:00007f6dc559e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3180.904305][T13534] RAX: ffffffffffffffda RBX: 00007f6dc7595fa0 RCX: 00007f6dc733efc9 [ 3180.904319][T13534] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 3180.904332][T13534] RBP: 00007f6dc559e090 R08: 0000000000000000 R09: 0000000000000000 [ 3180.904345][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3180.904357][T13534] R13: 00007f6dc7596038 R14: 00007f6dc7595fa0 R15: 00007fff895427c8 [ 3180.904390][T13534] [ 3180.967890][T15413] usb 7-1: device not accepting address 120, error -71 [ 3181.000852][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3181.425437][ C1] vkms_vblank_simulate: vblank timer overrun [ 3181.986362][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3182.084289][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3182.157786][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3182.316190][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3182.376384][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3182.592538][T13574] FAULT_INJECTION: forcing a failure. [ 3182.592538][T13574] name failslab, interval 1, probability 0, space 0, times 0 [ 3182.592574][T13574] CPU: 0 UID: 0 PID: 13574 Comm: syz.0.10173 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3182.592597][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3182.592609][T13574] Call Trace: [ 3182.592617][T13574] [ 3182.592627][T13574] dump_stack_lvl+0x189/0x250 [ 3182.592669][T13574] ? __pfx____ratelimit+0x10/0x10 [ 3182.592693][T13574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3182.592720][T13574] ? __pfx__printk+0x10/0x10 [ 3182.592749][T13574] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 3182.592781][T13574] should_fail_ex+0x46c/0x600 [ 3182.592809][T13574] ? dst_alloc+0x105/0x170 [ 3182.592828][T13574] should_failslab+0xa8/0x100 [ 3182.592852][T13574] ? __pfx_ip6_dst_gc+0x10/0x10 [ 3182.592874][T13574] ? dst_alloc+0x105/0x170 [ 3182.592891][T13574] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 3182.592911][T13574] ? ip6_pol_route+0x162/0x1180 [ 3182.592940][T13574] ? __pfx_ip6_dst_gc+0x10/0x10 [ 3182.592966][T13574] dst_alloc+0x105/0x170 [ 3182.592993][T13574] ip6_pol_route+0xa21/0x1180 [ 3182.593017][T13574] ? ip6_pol_route+0x162/0x1180 [ 3182.593047][T13574] ? __pfx_ip6_pol_route+0x10/0x10 [ 3182.593083][T13574] ? fib_rules_lookup+0x96/0xe90 [ 3182.593108][T13574] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 3182.593133][T13574] fib6_rule_action+0x674/0x7d0 [ 3182.593155][T13574] ? __pfx_fib6_rule_action+0x10/0x10 [ 3182.593177][T13574] fib_rules_lookup+0x767/0xe90 [ 3182.593210][T13574] ? fib_rules_lookup+0x96/0xe90 [ 3182.593233][T13574] ? __pfx_fib_rules_lookup+0x10/0x10 [ 3182.593254][T13574] ? l3mdev_update_flow+0x29/0x640 [ 3182.593282][T13574] ? l3mdev_update_flow+0x4d1/0x640 [ 3182.593315][T13574] fib6_rule_lookup+0x18e/0x6f0 [ 3182.593336][T13574] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 3182.593364][T13574] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 3182.593391][T13574] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 3182.593423][T13574] ? sock_def_readable+0xbe/0x560 [ 3182.593460][T13574] ip6_route_input+0x6de/0xad0 [ 3182.593496][T13574] ? __pfx_ip6_route_input+0x10/0x10 [ 3182.593560][T13574] ? ip6_rcv_finish_core+0x222/0x420 [ 3182.593587][T13574] ip6_rcv_finish+0x141/0x2e0 [ 3182.593613][T13574] NF_HOOK+0x30c/0x3a0 [ 3182.593633][T13574] ? skb_orphan+0x4f/0xd0 [ 3182.593656][T13574] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 3182.593686][T13574] ? NF_HOOK+0x9a/0x3a0 [ 3182.593707][T13574] ? __pfx_NF_HOOK+0x10/0x10 [ 3182.593732][T13574] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 3182.593769][T13574] __netif_receive_skb+0xd3/0x380 [ 3182.593795][T13574] ? __put_user_8+0x16/0x20 [ 3182.593815][T13574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3182.593840][T13574] ? netif_receive_skb+0x115/0x790 [ 3182.593866][T13574] netif_receive_skb+0x1cb/0x790 [ 3182.593895][T13574] ? __pfx_netif_receive_skb+0x10/0x10 [ 3182.593926][T13574] ? __local_bh_enable+0x28c/0x410 [ 3182.593949][T13574] ? tun_rx_batched+0x166/0x730 [ 3182.593976][T13574] tun_rx_batched+0x1bf/0x730 [ 3182.594008][T13574] ? __pfx_tun_rx_batched+0x10/0x10 [ 3182.594031][T13574] ? __lock_acquire+0xab9/0xd20 [ 3182.594072][T13574] ? tun_get_user+0x272f/0x3ec0 [ 3182.594113][T13574] tun_get_user+0x2b7a/0x3ec0 [ 3182.594147][T13574] ? tun_get_user+0x6f6/0x3ec0 [ 3182.594172][T13574] ? tun_get_user+0x272f/0x3ec0 [ 3182.594202][T13574] ? __might_fault+0xb0/0x130 [ 3182.594228][T13574] ? __pfx_tun_get_user+0x10/0x10 [ 3182.594266][T13574] ? __lock_acquire+0xab9/0xd20 [ 3182.594299][T13574] ? ref_tracker_alloc+0x2fe/0x450 [ 3182.594322][T13574] ? __lock_acquire+0xab9/0xd20 [ 3182.594349][T13574] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 3182.594383][T13574] ? tun_get+0x1c/0x2f0 [ 3182.594415][T13574] ? tun_get+0x1c/0x2f0 [ 3182.594437][T13574] ? tun_get+0x1c/0x2f0 [ 3182.594467][T13574] tun_chr_write_iter+0x119/0x200 [ 3182.594495][T13574] vfs_write+0x5d5/0xb40 [ 3182.594525][T13574] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 3182.594550][T13574] ? __pfx_vfs_write+0x10/0x10 [ 3182.594588][T13574] ? __fget_files+0x2a/0x420 [ 3182.594626][T13574] ksys_write+0x14b/0x260 [ 3182.594653][T13574] ? __pfx_ksys_write+0x10/0x10 [ 3182.594688][T13574] ? do_syscall_64+0xbe/0xfa0 [ 3182.594717][T13574] do_syscall_64+0xfa/0xfa0 [ 3182.594739][T13574] ? lockdep_hardirqs_on+0x9c/0x150 [ 3182.594763][T13574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3182.594782][T13574] ? clear_bhb_loop+0x60/0xb0 [ 3182.594806][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3182.594825][T13574] RIP: 0033:0x7eff51e1da7f [ 3182.594844][T13574] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 3182.594860][T13574] RSP: 002b:00007eff5007e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3182.594882][T13574] RAX: ffffffffffffffda RBX: 00007eff52075fa0 RCX: 00007eff51e1da7f [ 3182.594896][T13574] RDX: 0000000000000036 RSI: 0000200000001240 RDI: 00000000000000c8 [ 3182.594910][T13574] RBP: 00007eff5007e090 R08: 0000000000000000 R09: 0000000000000000 [ 3182.594922][T13574] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 3182.594933][T13574] R13: 00007eff52076038 R14: 00007eff52075fa0 R15: 00007ffccece7b88 [ 3182.594971][T13574] [ 3183.138567][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3183.652527][ T37] audit: type=1400 audit(3093.451:4856): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13588 comm="syz.7.10179" dest=20011 [ 3183.787480][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10180'. [ 3183.810552][T13597] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10182'. [ 3183.959100][ T37] audit: type=1400 audit(3093.732:4857): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13594 comm="syz.0.10181" dest=20004 [ 3183.966294][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10181'. [ 3184.411659][T13604] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10184'. [ 3185.620488][ T37] audit: type=1326 audit(3095.284:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3185.661148][T29188] net_ratelimit: 2 callbacks suppressed [ 3185.661448][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3185.692883][ T37] audit: type=1326 audit(3095.350:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3185.692936][ T37] audit: type=1326 audit(3095.350:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3185.692977][ T37] audit: type=1326 audit(3095.350:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3185.693018][ T37] audit: type=1326 audit(3095.350:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3185.902240][ T37] audit: type=1326 audit(3095.546:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3185.999588][ T37] audit: type=1326 audit(3095.631:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3186.101961][ T37] audit: type=1326 audit(3095.733:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.7.10185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7ea5eefc9 code=0x7ffc0000 [ 3186.179563][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3187.008863][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3187.074283][T13619] FAULT_INJECTION: forcing a failure. [ 3187.074283][T13619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3187.074317][T13619] CPU: 1 UID: 0 PID: 13619 Comm: syz.2.10186 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3187.074340][T13619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3187.074352][T13619] Call Trace: [ 3187.074361][T13619] [ 3187.074369][T13619] dump_stack_lvl+0x189/0x250 [ 3187.074400][T13619] ? __pfx____ratelimit+0x10/0x10 [ 3187.074425][T13619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3187.074450][T13619] ? __pfx__printk+0x10/0x10 [ 3187.074484][T13619] should_fail_ex+0x46c/0x600 [ 3187.074512][T13619] _copy_from_user+0x2d/0xb0 [ 3187.074534][T13619] memdup_user+0x5e/0xd0 [ 3187.074557][T13619] nvram_misc_write+0x83/0xe0 [ 3187.074579][T13619] ? __pfx_nvram_misc_write+0x10/0x10 [ 3187.074603][T13619] vfs_write+0x287/0xb40 [ 3187.074634][T13619] ? __pfx_vfs_write+0x10/0x10 [ 3187.074659][T13619] ? __fget_files+0x2a/0x420 [ 3187.074685][T13619] ? __fget_files+0x2a/0x420 [ 3187.074708][T13619] ? __fget_files+0x3a6/0x420 [ 3187.074731][T13619] ? __fget_files+0x2a/0x420 [ 3187.074763][T13619] ksys_write+0x14b/0x260 [ 3187.074788][T13619] ? __pfx_ksys_write+0x10/0x10 [ 3187.074814][T13619] ? do_syscall_64+0xbe/0xfa0 [ 3187.074841][T13619] do_syscall_64+0xfa/0xfa0 [ 3187.074863][T13619] ? lockdep_hardirqs_on+0x9c/0x150 [ 3187.074887][T13619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3187.074906][T13619] ? clear_bhb_loop+0x60/0xb0 [ 3187.074929][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3187.074948][T13619] RIP: 0033:0x7f44ec6eefc9 [ 3187.074967][T13619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3187.074982][T13619] RSP: 002b:00007f44ea956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3187.075004][T13619] RAX: ffffffffffffffda RBX: 00007f44ec945fa0 RCX: 00007f44ec6eefc9 [ 3187.075019][T13619] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000003 [ 3187.075031][T13619] RBP: 00007f44ea956090 R08: 0000000000000000 R09: 0000000000000000 [ 3187.075044][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3187.075056][T13619] R13: 00007f44ec946038 R14: 00007f44ec945fa0 R15: 00007fffb22428c8 [ 3187.075089][T13619] [ 3187.328535][T27936] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 3187.518473][T27936] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 3187.518511][T27936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3187.518533][T27936] usb 7-1: Product: syz [ 3187.518547][T27936] usb 7-1: Manufacturer: syz [ 3187.518562][T27936] usb 7-1: SerialNumber: syz [ 3187.546676][T27936] usb 7-1: config 0 descriptor?? [ 3187.559645][T27936] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 3187.576388][T27936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3187.581620][T27936] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 3187.582998][T27936] usb 7-1: media controller created [ 3187.678603][T27936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3187.840442][T13631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3187.856902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3187.890991][T27936] DVB: Unable to find symbol mt352_attach() [ 3188.015462][T27936] DVB: Unable to find symbol nxt6000_attach() [ 3188.015479][T27936] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 3188.023142][T27936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input129 [ 3188.031308][T27936] dvb-usb: schedule remote query interval to 1000 msecs. [ 3188.031330][T27936] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 3188.031348][T27936] dvb-usb: bulk message failed: -22 (7/0) [ 3188.031366][T27936] dvb-usb: bulk message failed: -22 (7/0) [ 3188.173318][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3188.910821][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3188.946927][ C1] vkms_vblank_simulate: vblank timer overrun [ 3189.007760][ T37] kauditd_printk_skb: 376 callbacks suppressed [ 3189.007777][ T37] audit: type=1326 audit(3098.465:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.009256][ T37] audit: type=1326 audit(3098.465:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.010778][ T37] audit: type=1326 audit(3098.465:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.012249][ T37] audit: type=1326 audit(3098.465:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.013873][ T37] audit: type=1326 audit(3098.465:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.015634][ T37] audit: type=1326 audit(3098.465:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.017144][ T37] audit: type=1326 audit(3098.465:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.038821][ T37] audit: type=1326 audit(3098.474:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.173860][T10795] dvb-usb: bulk message failed: -22 (7/0) [ 3189.173928][T10795] dvb-usb: error while querying for an remote control event. [ 3189.254482][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3189.254794][ T37] audit: type=1326 audit(3098.493:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.254844][ T37] audit: type=1326 audit(3098.680:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.6.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6dc7371885 code=0x7ffc0000 [ 3189.822488][ C1] vkms_vblank_simulate: vblank timer overrun [ 3190.278903][T20423] dvb-usb: bulk message failed: -22 (7/0) [ 3190.278926][T20423] dvb-usb: error while querying for an remote control event. [ 3190.364762][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3191.391014][T20423] dvb-usb: bulk message failed: -22 (7/0) [ 3191.391036][T20423] dvb-usb: error while querying for an remote control event. [ 3191.476577][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3192.171109][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3192.502431][T27936] dvb-usb: bulk message failed: -22 (7/0) [ 3192.506089][T27936] dvb-usb: error while querying for an remote control event. [ 3192.588363][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3193.017940][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3193.614507][T27936] dvb-usb: bulk message failed: -22 (7/0) [ 3193.614532][T27936] dvb-usb: error while querying for an remote control event. [ 3193.700215][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3194.736642][T10795] dvb-usb: bulk message failed: -22 (7/0) [ 3194.736665][T10795] dvb-usb: error while querying for an remote control event. [ 3194.811772][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3195.410461][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3195.841379][T27936] dvb-usb: bulk message failed: -22 (7/0) [ 3195.841403][T27936] dvb-usb: error while querying for an remote control event. [ 3195.923575][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3196.949413][T27936] dvb-usb: bulk message failed: -22 (7/0) [ 3196.949437][T27936] dvb-usb: error while querying for an remote control event. [ 3197.035369][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.061542][T20423] dvb-usb: bulk message failed: -22 (7/0) [ 3198.061564][T20423] dvb-usb: error while querying for an remote control event. [ 3198.147133][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.660060][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3199.174298][T27936] dvb-usb: bulk message failed: -22 (7/0) [ 3199.174323][T27936] dvb-usb: error while querying for an remote control event. [ 3199.269584][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3200.285071][T10795] dvb-usb: bulk message failed: -22 (7/0) [ 3200.285102][T10795] dvb-usb: error while querying for an remote control event. [ 3200.370554][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3200.454920][T29500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3200.485826][T29500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3200.494976][T29500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3200.496180][T29500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3200.497945][T29500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3201.399699][T10795] dvb-usb: bulk message failed: -22 (7/0) [ 3201.399723][T10795] dvb-usb: error while querying for an remote control event. [ 3201.482389][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3201.594188][T27936] usb 7-1: USB disconnect, device number 122 [ 3201.692740][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10198'. acpid: input device has been disconnected, fd 3 [ 3201.931249][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3202.430450][T27936] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 3202.498575][T13660] chnl_net:caif_netlink_parms(): no params data found [ 3202.529152][T13795] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.10202'. [ 3202.529175][T13795] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10202'. [ 3202.583517][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10202'. [ 3202.594116][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3202.769683][T29500] Bluetooth: hci0: command tx timeout [ 3202.993860][T13829] FAULT_INJECTION: forcing a failure. [ 3202.993860][T13829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3202.993895][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.2.10207 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3202.993919][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3202.993931][T13829] Call Trace: [ 3202.993940][T13829] [ 3202.993950][T13829] dump_stack_lvl+0x189/0x250 [ 3202.993982][T13829] ? __pfx____ratelimit+0x10/0x10 [ 3202.994006][T13829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3202.994034][T13829] ? __pfx__printk+0x10/0x10 [ 3202.994057][T13829] ? __might_fault+0xb0/0x130 [ 3202.994095][T13829] should_fail_ex+0x46c/0x600 [ 3202.994127][T13829] _copy_from_user+0x2d/0xb0 [ 3202.994149][T13829] ___sys_sendmsg+0x158/0x2a0 [ 3202.994176][T13829] ? __pfx____sys_sendmsg+0x10/0x10 [ 3202.994236][T13829] ? __fget_files+0x2a/0x420 [ 3202.994261][T13829] ? __fget_files+0x3a6/0x420 [ 3202.994296][T13829] __x64_sys_sendmsg+0x1a1/0x260 [ 3202.994321][T13829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3202.994354][T13829] ? __pfx_ksys_write+0x10/0x10 [ 3202.994382][T13829] ? do_syscall_64+0xbe/0xfa0 [ 3202.994410][T13829] do_syscall_64+0xfa/0xfa0 [ 3202.994432][T13829] ? lockdep_hardirqs_on+0x9c/0x150 [ 3202.994455][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3202.994475][T13829] ? clear_bhb_loop+0x60/0xb0 [ 3202.994498][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3202.994517][T13829] RIP: 0033:0x7f44ec6eefc9 [ 3202.994535][T13829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3202.994553][T13829] RSP: 002b:00007f44ea956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3202.994574][T13829] RAX: ffffffffffffffda RBX: 00007f44ec945fa0 RCX: 00007f44ec6eefc9 [ 3202.994593][T13829] RDX: 0000000000000800 RSI: 0000200000002d00 RDI: 0000000000000003 [ 3202.994606][T13829] RBP: 00007f44ea956090 R08: 0000000000000000 R09: 0000000000000000 [ 3202.994619][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3202.994631][T13829] R13: 00007f44ec946038 R14: 00007f44ec945fa0 R15: 00007fffb22428c8 [ 3202.994664][T13829] [ 3203.148850][ C1] vkms_vblank_simulate: vblank timer overrun [ 3203.449009][T27936] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 3203.496986][T13832] FAULT_INJECTION: forcing a failure. [ 3203.496986][T13832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3203.497019][T13832] CPU: 1 UID: 0 PID: 13832 Comm: syz.2.10209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3203.497043][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3203.497055][T13832] Call Trace: [ 3203.497063][T13832] [ 3203.497074][T13832] dump_stack_lvl+0x189/0x250 [ 3203.497105][T13832] ? __pfx____ratelimit+0x10/0x10 [ 3203.497130][T13832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3203.497157][T13832] ? __pfx__printk+0x10/0x10 [ 3203.497196][T13832] should_fail_ex+0x46c/0x600 [ 3203.497227][T13832] _copy_to_user+0x31/0xb0 [ 3203.497252][T13832] simple_read_from_buffer+0xe1/0x170 [ 3203.497283][T13832] proc_fail_nth_read+0x1b6/0x220 [ 3203.497308][T13832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3203.497333][T13832] ? rw_verify_area+0x2ac/0x4e0 [ 3203.497356][T13832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3203.497379][T13832] vfs_read+0x206/0xa30 [ 3203.497410][T13832] ? __pfx_vfs_read+0x10/0x10 [ 3203.497430][T13832] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 3203.497461][T13832] ? mutex_lock_nested+0x154/0x1d0 [ 3203.497480][T13832] ? fdget_pos+0x253/0x320 [ 3203.497519][T13832] ksys_read+0x14b/0x260 [ 3203.497545][T13832] ? __pfx_ksys_read+0x10/0x10 [ 3203.497572][T13832] ? do_syscall_64+0xbe/0xfa0 [ 3203.497600][T13832] do_syscall_64+0xfa/0xfa0 [ 3203.497622][T13832] ? lockdep_hardirqs_on+0x9c/0x150 [ 3203.497646][T13832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3203.497666][T13832] ? clear_bhb_loop+0x60/0xb0 [ 3203.497690][T13832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3203.497709][T13832] RIP: 0033:0x7f44ec6ed9dc [ 3203.497727][T13832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3203.497745][T13832] RSP: 002b:00007f44ea956030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3203.497773][T13832] RAX: ffffffffffffffda RBX: 00007f44ec945fa0 RCX: 00007f44ec6ed9dc [ 3203.497788][T13832] RDX: 000000000000000f RSI: 00007f44ea9560a0 RDI: 0000000000000004 [ 3203.497801][T13832] RBP: 00007f44ea956090 R08: 0000000000000000 R09: 0000000000000000 [ 3203.497814][T13832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3203.497826][T13832] R13: 00007f44ec946038 R14: 00007f44ec945fa0 R15: 00007fffb22428c8 [ 3203.497860][T13832] [ 3203.568475][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3203.778017][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3203.802877][T27936] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3203.802912][T27936] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3203.802962][T27936] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3203.802986][T27936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3203.855866][T13823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3203.862888][T27936] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3204.022241][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3204.272042][ C1] vkms_vblank_simulate: vblank timer overrun [ 3204.463252][T13850] input: syz0 as /devices/virtual/input/input130 [ 3204.468371][ C1] vkms_vblank_simulate: vblank timer overrun [ 3204.913228][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3204.989127][T29500] Bluetooth: hci0: command tx timeout [ 3205.110053][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.618425][T27936] usb 2-1: USB disconnect, device number 56 [ 3205.635114][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3205.945273][ C1] vkms_vblank_simulate: vblank timer overrun [ 3206.015681][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3206.340938][T13904] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10215'. [ 3206.911857][ C1] vkms_vblank_simulate: vblank timer overrun [ 3207.050037][ C1] vkms_vblank_simulate: vblank timer overrun [ 3207.150955][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10218'. [ 3207.152712][ T37] kauditd_printk_skb: 355 callbacks suppressed [ 3207.152727][ T37] audit: type=1400 audit(3115.434:5607): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13919 comm="syz.7.10218" daddr=::ffff:0.0.0.0 dest=20002 [ 3207.205226][ T37] audit: type=1400 audit(3115.481:5608): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13919 comm="syz.7.10218" daddr=::ffff:0.0.0.0 dest=20002 [ 3207.221172][T29500] Bluetooth: hci0: command tx timeout [ 3207.225923][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3207.592093][T13938] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10219'. [ 3208.297945][T13660] bridge0: port 1(bridge_slave_0) entered blocking state [ 3208.298096][T13660] bridge0: port 1(bridge_slave_0) entered disabled state [ 3208.298319][T13660] bridge_slave_0: entered allmulticast mode [ 3208.323788][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3208.427165][T13938] nbd: socks must be embedded in a SOCK_ITEM attr [ 3208.470026][T13660] bridge_slave_0: entered promiscuous mode [ 3208.481408][T13660] bridge0: port 2(bridge_slave_1) entered blocking state [ 3208.497378][T13660] bridge0: port 2(bridge_slave_1) entered disabled state [ 3208.497571][T13660] bridge_slave_1: entered allmulticast mode [ 3208.503985][T13660] bridge_slave_1: entered promiscuous mode [ 3208.837079][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3209.435631][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3209.435757][T29500] Bluetooth: hci0: command tx timeout [ 3210.099752][T13660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3210.114389][T13660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3210.547396][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3212.322770][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3212.434077][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3212.807496][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10224'. [ 3213.541202][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3213.805338][ C1] vkms_vblank_simulate: vblank timer overrun [ 3214.400409][ C1] vkms_vblank_simulate: vblank timer overrun [ 3214.437950][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3214.550233][ C1] vkms_vblank_simulate: vblank timer overrun [ 3215.389756][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3215.583715][ C1] vkms_vblank_simulate: vblank timer overrun [ 3215.584523][T10795] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 3215.598950][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3215.655109][ C1] vkms_vblank_simulate: vblank timer overrun [ 3215.817454][T10795] usb 2-1: Using ep0 maxpacket: 16 [ 3215.819606][T10795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3215.819638][T10795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3215.819662][T10795] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3215.819707][T10795] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3215.819733][T10795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3215.890546][T10795] usb 2-1: config 0 descriptor?? [ 3216.960580][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.054078][T13660] team0: Port device team_slave_0 added [ 3217.073869][T13660] team0: Port device team_slave_1 added [ 3217.283555][T29500] Bluetooth: Unknown LE signaling command 0xf2 [ 3217.283581][T29500] Bluetooth: Wrong link type (-22) [ 3217.372406][T14048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.372779][T14048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.392700][T14048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.421864][T14045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.425751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.479221][T14044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.667423][T13660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3217.667442][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3217.667470][T13660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3217.724032][T13660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3217.724049][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3217.724300][T13660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3218.228976][ C1] vkms_vblank_simulate: vblank timer overrun [ 3218.230895][T10795] usbhid 2-1:0.0: can't add hid device: -71 [ 3218.231969][T10795] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3218.268225][T10795] usb 2-1: USB disconnect, device number 57 [ 3218.426239][ C1] vkms_vblank_simulate: vblank timer overrun [ 3218.769615][T14089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10234'. [ 3219.423044][ C1] vkms_vblank_simulate: vblank timer overrun [ 3220.553169][T20423] net_ratelimit: 3 callbacks suppressed [ 3220.553190][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3221.510755][ C1] vkms_vblank_simulate: vblank timer overrun [ 3221.576204][T13660] hsr_slave_0: entered promiscuous mode [ 3221.577768][T13660] hsr_slave_1: entered promiscuous mode [ 3221.598416][T13660] debugfs: 'hsr0' already exists in 'hsr' [ 3221.598445][T13660] Cannot create hsr debugfs directory [ 3222.432371][ C1] vkms_vblank_simulate: vblank timer overrun [ 3222.477605][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3222.584026][T20423] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 3222.614654][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3222.930010][ C1] vkms_vblank_simulate: vblank timer overrun [ 3222.947448][T20423] usb 7-1: Using ep0 maxpacket: 32 [ 3222.950086][T20423] usb 7-1: config 0 has an invalid interface number: 127 but max is 0 [ 3222.950112][T20423] usb 7-1: config 0 has no interface number 0 [ 3222.950171][T20423] usb 7-1: config 0 interface 127 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3222.950201][T20423] usb 7-1: config 0 interface 127 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 3223.005277][T20423] usb 7-1: New USB device found, idVendor=1fb9, idProduct=0403, bcdDevice=fa.9f [ 3223.005309][T20423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3223.005331][T20423] usb 7-1: Product: syz [ 3223.005347][T20423] usb 7-1: Manufacturer: syz [ 3223.005364][T20423] usb 7-1: SerialNumber: syz [ 3223.200450][ C1] vkms_vblank_simulate: vblank timer overrun [ 3223.229805][T20423] usb 7-1: config 0 descriptor?? [ 3223.234204][T20423] cp210x 7-1:0.127: cp210x converter detected [ 3223.738585][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3224.487372][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3224.840162][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3224.961715][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10242'. [ 3224.978568][T27936] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 3225.036775][T20423] cp210x 7-1:0.127: failed to get vendor val 0x370b size 1: -71 [ 3225.036807][T20423] cp210x 7-1:0.127: querying part number failed [ 3225.040815][T20423] usb 7-1: cp210x converter now attached to ttyUSB0 [ 3225.079761][T20423] usb 7-1: USB disconnect, device number 123 [ 3225.099264][T20423] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3225.099881][T20423] cp210x 7-1:0.127: device disconnected [ 3225.163000][T27936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3225.163038][T27936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3225.164563][T27936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 3225.164591][T27936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3225.164613][T27936] usb 3-1: SerialNumber: syz [ 3225.227327][T27936] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 3225.228046][T27936] usb-storage 3-1:1.0: USB Mass Storage device detected [ 3225.274164][T27936] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 3225.285633][T27936] scsi host1: usb-storage 3-1:1.0 [ 3225.777896][ T5278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3225.812525][ T5278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3225.816431][ T5278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3225.848620][ T5278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3225.857805][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3225.878043][ T5278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3225.898228][T14219] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 3225.898254][T14219] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3225.898357][T14219] vhci_hcd vhci_hcd.0: Device attached [ 3225.944398][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3226.219749][T20423] vhci_hcd: vhci_device speed not set [ 3226.300811][T20423] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 3226.436133][T14220] vhci_hcd: connection reset by peer [ 3226.439157][T15415] usb 3-1: USB disconnect, device number 123 [ 3226.460985][ T9926] vhci_hcd: stop threads [ 3226.461004][ T9926] vhci_hcd: release socket [ 3226.461077][ T9926] vhci_hcd: disconnect device [ 3227.053632][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3228.164630][ T5278] Bluetooth: hci4: command tx timeout [ 3228.180965][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3229.105592][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3229.179039][T14262] 9pnet_fd: p9_fd_create_unix (14262): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 3229.310962][ C1] vkms_vblank_simulate: vblank timer overrun [ 3229.325505][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.387658][ T5278] Bluetooth: hci4: command tx timeout [ 3230.487842][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.720525][T14207] chnl_net:caif_netlink_parms(): no params data found [ 3231.298569][ C1] vkms_vblank_simulate: vblank timer overrun [ 3231.587716][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3231.834692][T20423] vhci_hcd: vhci_device speed not set [ 3232.056184][ C1] vkms_vblank_simulate: vblank timer overrun [ 3232.261156][T14410] binder: 14405:14410 ioctl 40046205 0 returned -22 [ 3232.263017][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10252'. [ 3232.313749][T14414] FAULT_INJECTION: forcing a failure. [ 3232.313749][T14414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3232.313783][T14414] CPU: 1 UID: 0 PID: 14414 Comm: syz.6.10255 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3232.313805][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3232.313817][T14414] Call Trace: [ 3232.313826][T14414] [ 3232.313835][T14414] dump_stack_lvl+0x189/0x250 [ 3232.313870][T14414] ? __pfx____ratelimit+0x10/0x10 [ 3232.313895][T14414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3232.313923][T14414] ? __pfx__printk+0x10/0x10 [ 3232.313962][T14414] should_fail_ex+0x46c/0x600 [ 3232.313993][T14414] _copy_to_user+0x31/0xb0 [ 3232.314017][T14414] simple_read_from_buffer+0xe1/0x170 [ 3232.314048][T14414] proc_fail_nth_read+0x1b6/0x220 [ 3232.314073][T14414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3232.314098][T14414] ? rw_verify_area+0x2ac/0x4e0 [ 3232.314120][T14414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3232.314143][T14414] vfs_read+0x206/0xa30 [ 3232.314176][T14414] ? __pfx_vfs_read+0x10/0x10 [ 3232.314195][T14414] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 3232.314227][T14414] ? mutex_lock_nested+0x154/0x1d0 [ 3232.314251][T14414] ? fdget_pos+0x253/0x320 [ 3232.314287][T14414] ksys_read+0x14b/0x260 [ 3232.314307][T14414] ? __fget_files+0x2a/0x420 [ 3232.314333][T14414] ? __pfx_ksys_read+0x10/0x10 [ 3232.314360][T14414] ? do_syscall_64+0xbe/0xfa0 [ 3232.314389][T14414] do_syscall_64+0xfa/0xfa0 [ 3232.314411][T14414] ? lockdep_hardirqs_on+0x9c/0x150 [ 3232.314435][T14414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3232.314455][T14414] ? clear_bhb_loop+0x60/0xb0 [ 3232.314479][T14414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3232.314498][T14414] RIP: 0033:0x7f6dc733d9dc [ 3232.314516][T14414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3232.314533][T14414] RSP: 002b:00007f6dc559e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3232.314554][T14414] RAX: ffffffffffffffda RBX: 00007f6dc7595fa0 RCX: 00007f6dc733d9dc [ 3232.314569][T14414] RDX: 000000000000000f RSI: 00007f6dc559e0a0 RDI: 0000000000000005 [ 3232.314582][T14414] RBP: 00007f6dc559e090 R08: 0000000000000000 R09: 0000000000000000 [ 3232.314595][T14414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3232.314607][T14414] R13: 00007f6dc7596038 R14: 00007f6dc7595fa0 R15: 00007fff895427c8 [ 3232.314643][T14414] [ 3232.359117][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3232.611249][ T5278] Bluetooth: hci4: command tx timeout [ 3232.697565][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3233.284932][ C1] vkms_vblank_simulate: vblank timer overrun [ 3233.982539][ C1] vkms_vblank_simulate: vblank timer overrun [ 3234.036397][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.444002][ C1] vkms_vblank_simulate: vblank timer overrun [ 3234.758828][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.834876][ T5278] Bluetooth: hci4: command tx timeout [ 3235.177070][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3235.625786][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.288969][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.989710][T14207] bridge0: port 1(bridge_slave_0) entered blocking state [ 3236.989845][T14207] bridge0: port 1(bridge_slave_0) entered disabled state [ 3236.990110][T14207] bridge_slave_0: entered allmulticast mode [ 3237.014765][T14207] bridge_slave_0: entered promiscuous mode [ 3237.038560][T14207] bridge0: port 2(bridge_slave_1) entered blocking state [ 3237.043905][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 3237.044149][T14207] bridge_slave_1: entered allmulticast mode [ 3237.047043][T14207] bridge_slave_1: entered promiscuous mode [ 3237.447087][ C1] vkms_vblank_simulate: vblank timer overrun [ 3237.448535][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3237.705681][ C1] vkms_vblank_simulate: vblank timer overrun [ 3238.212425][ C1] vkms_vblank_simulate: vblank timer overrun [ 3238.599768][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3238.949262][ C1] vkms_vblank_simulate: vblank timer overrun [ 3239.001972][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3239.186275][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10262'. [ 3239.321732][ C1] vkms_vblank_simulate: vblank timer overrun [ 3239.707877][ C1] vkms_vblank_simulate: vblank timer overrun [ 3239.950134][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3240.679111][T14517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10269'. [ 3241.004117][ C1] vkms_vblank_simulate: vblank timer overrun [ 3241.512232][ C1] vkms_vblank_simulate: vblank timer overrun [ 3241.560652][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3241.585928][T14207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3241.595319][T14207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3242.256438][ C1] vkms_vblank_simulate: vblank timer overrun [ 3242.257811][T20423] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 3242.276001][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3242.280011][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 3242.423112][T20423] usb 2-1: not running at top speed; connect to a high speed hub [ 3242.424910][T20423] usb 2-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 3242.424933][T20423] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3242.424956][T20423] usb 2-1: config 1 has no interface number 1 [ 3242.425005][T20423] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3242.425057][T20423] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 74, changing to 4 [ 3242.425085][T20423] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49232, setting to 1023 [ 3242.782857][ C1] vkms_vblank_simulate: vblank timer overrun [ 3242.814504][T20423] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3242.814535][T20423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3242.814556][T20423] usb 2-1: Product: syz [ 3242.814571][T20423] usb 2-1: Manufacturer: syz [ 3242.814586][T20423] usb 2-1: SerialNumber: syz [ 3242.944962][ C1] vkms_vblank_simulate: vblank timer overrun [ 3243.198007][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3243.406027][ C1] vkms_vblank_simulate: vblank timer overrun [ 3243.518968][ C1] vkms_vblank_simulate: vblank timer overrun [ 3243.784941][ C1] vkms_vblank_simulate: vblank timer overrun [ 3244.408112][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3245.279035][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3245.341258][T20423] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 3245.341481][T20423] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 3245.745312][ C1] vkms_vblank_simulate: vblank timer overrun [ 3245.746937][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3245.877055][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10274'. [ 3245.886945][ C1] vkms_vblank_simulate: vblank timer overrun [ 3246.433707][ C1] vkms_vblank_simulate: vblank timer overrun [ 3246.468561][T14207] team0: Port device team_slave_0 added [ 3246.506860][T14207] team0: Port device team_slave_1 added [ 3246.524773][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10275'. [ 3246.570831][T20423] usb 2-1: USB disconnect, device number 58 [ 3246.583135][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3246.901514][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3248.008205][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3248.621787][ C1] vkms_vblank_simulate: vblank timer overrun [ 3248.968099][T14207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3248.968117][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3248.968144][T14207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3248.970577][T14207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3248.970590][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3248.970617][T14207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3249.120066][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3249.458043][ C1] vkms_vblank_simulate: vblank timer overrun [ 3249.524834][ T37] audit: type=1326 audit(3155.079:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14668 comm="syz.2.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec6eefc9 code=0x7ffc0000 [ 3249.525249][ T37] audit: type=1326 audit(3155.079:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14668 comm="syz.2.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f44ec6eefc9 code=0x7ffc0000 [ 3249.530958][ T37] audit: type=1326 audit(3155.079:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14668 comm="syz.2.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec6eefc9 code=0x7ffc0000 [ 3249.531012][ T37] audit: type=1326 audit(3155.079:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14668 comm="syz.2.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f44ec6eefc9 code=0x7ffc0000 [ 3249.531055][ T37] audit: type=1326 audit(3155.079:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14668 comm="syz.2.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ec6eefc9 code=0x7ffc0000 [ 3249.814728][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3250.598506][ C1] vkms_vblank_simulate: vblank timer overrun [ 3250.837765][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3250.897203][ C1] vkms_vblank_simulate: vblank timer overrun [ 3251.313360][ C1] vkms_vblank_simulate: vblank timer overrun [ 3251.943668][ C1] vkms_vblank_simulate: vblank timer overrun [ 3252.028166][ C1] vkms_vblank_simulate: vblank timer overrun [ 3252.102099][ C1] vkms_vblank_simulate: vblank timer overrun [ 3252.579580][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3253.011848][ C1] vkms_vblank_simulate: vblank timer overrun [ 3253.082800][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3253.150864][ C1] vkms_vblank_simulate: vblank timer overrun [ 3253.225958][ C1] vkms_vblank_simulate: vblank timer overrun [ 3253.493629][ C1] vkms_vblank_simulate: vblank timer overrun [ 3253.897797][ C1] vkms_vblank_simulate: vblank timer overrun [ 3254.361044][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3254.931250][T14207] hsr_slave_0: entered promiscuous mode [ 3255.062051][T14207] hsr_slave_1: entered promiscuous mode [ 3255.078261][T14207] debugfs: 'hsr0' already exists in 'hsr' [ 3255.078291][T14207] Cannot create hsr debugfs directory [ 3255.795636][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3255.846452][ C1] vkms_vblank_simulate: vblank timer overrun [ 3256.132553][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3256.350426][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3256.539884][ C1] vkms_vblank_simulate: vblank timer overrun [ 3256.700157][ C1] vkms_vblank_simulate: vblank timer overrun [ 3256.732114][ C1] vkms_vblank_simulate: vblank timer overrun [ 3256.840316][ C1] vkms_vblank_simulate: vblank timer overrun [ 3257.021721][ C1] vkms_vblank_simulate: vblank timer overrun [ 3257.241049][ C1] vkms_vblank_simulate: vblank timer overrun [ 3257.241748][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3257.684218][ C1] vkms_vblank_simulate: vblank timer overrun [ 3257.859011][ C1] vkms_vblank_simulate: vblank timer overrun [ 3258.751450][ C1] vkms_vblank_simulate: vblank timer overrun [ 3258.823476][ C1] vkms_vblank_simulate: vblank timer overrun [ 3258.923067][ C1] vkms_vblank_simulate: vblank timer overrun [ 3259.056806][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3259.541259][T14716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10287'. [ 3259.722380][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3259.801320][ C1] vkms_vblank_simulate: vblank timer overrun [ 3260.046453][ C1] vkms_vblank_simulate: vblank timer overrun [ 3260.313057][ C1] vkms_vblank_simulate: vblank timer overrun [ 3260.371104][ C1] vkms_vblank_simulate: vblank timer overrun [ 3260.420258][ C1] vkms_vblank_simulate: vblank timer overrun [ 3260.543087][ C1] vkms_vblank_simulate: vblank timer overrun [ 3260.602948][ C1] vkms_vblank_simulate: vblank timer overrun [ 3261.041806][ C1] vkms_vblank_simulate: vblank timer overrun [ 3262.023655][ C1] vkms_vblank_simulate: vblank timer overrun [ 3262.200252][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.236745][ C1] vkms_vblank_simulate: vblank timer overrun [ 3262.419666][ C1] vkms_vblank_simulate: vblank timer overrun [ 3262.504700][ C1] vkms_vblank_simulate: vblank timer overrun [ 3262.597256][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.971325][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.985543][ C1] vkms_vblank_simulate: vblank timer overrun [ 3263.038577][ C1] vkms_vblank_simulate: vblank timer overrun [ 3263.073466][ C1] vkms_vblank_simulate: vblank timer overrun [ 3264.905588][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3264.948508][ C1] vkms_vblank_simulate: vblank timer overrun [ 3265.946572][ C1] vkms_vblank_simulate: vblank timer overrun [ 3265.978526][ C1] vkms_vblank_simulate: vblank timer overrun [ 3266.213334][ C1] vkms_vblank_simulate: vblank timer overrun [ 3266.335786][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.507379][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.561559][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3267.530991][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3268.030820][ C1] vkms_vblank_simulate: vblank timer overrun [ 3268.786454][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3269.787924][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3269.986965][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3270.829531][T14766] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 3271.120324][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3271.503007][ C1] vkms_vblank_simulate: vblank timer overrun [ 3271.673744][T14791] tmpfs: Unknown parameter 'm¨p¢›' [ 3271.679144][T14790] Invalid ELF header magic: != ELF [ 3272.307977][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3272.311088][T14795] NILFS (nullb0): couldn't find nilfs on the device [ 3272.926980][ C1] vkms_vblank_simulate: vblank timer overrun [ 3273.404586][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3273.479922][T27211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3273.601729][ C1] vkms_vblank_simulate: vblank timer overrun [ 3274.586919][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3274.617642][T27838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3274.652818][ C1] vkms_vblank_simulate: vblank timer overrun [ 3274.920186][ C1] vkms_vblank_simulate: vblank timer overrun [ 3274.973650][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3275.094654][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3275.100747][T29500] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3275.161113][T29500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3275.162891][T29500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3275.163773][T29500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3275.165378][T29500] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3275.244664][ T5278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3275.254995][T27211] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 3275.322094][ T5278] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3275.479296][ T5278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3275.489512][ T5278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3275.490279][ T5278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3275.582492][T27211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3275.582514][T27211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3275.583909][T27211] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 3275.583945][T27211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3275.583967][T27211] usb 2-1: SerialNumber: syz [ 3275.626297][T27211] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 3275.626966][T27211] usb-storage 2-1:1.0: USB Mass Storage device detected [ 3275.874090][T27211] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 3275.887797][ C1] vkms_vblank_simulate: vblank timer overrun [ 3275.997449][ C1] vkms_vblank_simulate: vblank timer overrun [ 3276.232514][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3276.247875][T27211] scsi host2: usb-storage 2-1:1.0 [ 3276.337804][T14825] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 3276.337832][T14825] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3276.337997][T14825] vhci_hcd vhci_hcd.0: Device attached [ 3276.541336][ C1] vkms_vblank_simulate: vblank timer overrun [ 3276.637628][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3276.698622][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3277.017404][T15413] vhci_hcd: vhci_device speed not set [ 3277.093226][T15413] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 3277.256158][ C1] vkms_vblank_simulate: vblank timer overrun [ 3277.456032][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3277.680198][ T5278] Bluetooth: hci7: command tx timeout [ 3277.765650][ T5278] Bluetooth: hci6: command tx timeout [ 3277.802602][T14826] vhci_hcd: connection reset by peer [ 3277.803948][T27211] usb 2-1: USB disconnect, device number 59 [ 3277.853134][T14480] vhci_hcd: stop threads [ 3277.853148][T14480] vhci_hcd: release socket [ 3277.853186][T14480] vhci_hcd: disconnect device [ 3278.024369][ C1] vkms_vblank_simulate: vblank timer overrun [ 3278.327952][ C1] vkms_vblank_simulate: vblank timer overrun [ 3278.717620][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3278.838364][ C1] vkms_vblank_simulate: vblank timer overrun [ 3279.041348][ C1] vkms_vblank_simulate: vblank timer overrun [ 3279.094671][ C1] vkms_vblank_simulate: vblank timer overrun [ 3279.818361][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3280.132506][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3280.282626][ T5278] Bluetooth: hci7: command tx timeout [ 3280.282662][ T5278] Bluetooth: hci6: command tx timeout [ 3280.443588][ C1] vkms_vblank_simulate: vblank timer overrun [ 3280.930502][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3281.340038][ C1] vkms_vblank_simulate: vblank timer overrun [ 3281.801177][ C1] vkms_vblank_simulate: vblank timer overrun [ 3281.907408][ C1] vkms_vblank_simulate: vblank timer overrun [ 3282.153372][ C1] vkms_vblank_simulate: vblank timer overrun [ 3282.206699][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3282.480011][ T5277] Bluetooth: hci7: command tx timeout [ 3282.482515][ T5278] Bluetooth: hci6: command tx timeout [ 3282.672683][T15413] vhci_hcd: vhci_device speed not set [ 3282.688790][ C1] vkms_vblank_simulate: vblank timer overrun [ 3282.976998][ C1] vkms_vblank_simulate: vblank timer overrun [ 3283.050694][ C1] vkms_vblank_simulate: vblank timer overrun [ 3283.082647][ C1] vkms_vblank_simulate: vblank timer overrun [ 3283.137003][ C1] vkms_vblank_simulate: vblank timer overrun [ 3283.368628][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3283.510496][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3283.938124][ C1] vkms_vblank_simulate: vblank timer overrun [ 3284.226086][ C1] vkms_vblank_simulate: vblank timer overrun [ 3284.313326][ C1] vkms_vblank_simulate: vblank timer overrun [ 3284.344354][ C1] vkms_vblank_simulate: vblank timer overrun [ 3284.387248][ C1] vkms_vblank_simulate: vblank timer overrun [ 3284.650330][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3284.693086][ T5278] Bluetooth: hci6: command tx timeout [ 3284.693123][ T5278] Bluetooth: hci7: command tx timeout [ 3285.188841][ C1] vkms_vblank_simulate: vblank timer overrun [ 3285.629876][ C1] vkms_vblank_simulate: vblank timer overrun [ 3285.858276][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3285.936053][ C1] vkms_vblank_simulate: vblank timer overrun [ 3286.109561][ C1] vkms_vblank_simulate: vblank timer overrun [ 3287.001184][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3287.001268][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3287.482945][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3288.053464][ C1] vkms_vblank_simulate: vblank timer overrun [ 3288.085659][ C1] vkms_vblank_simulate: vblank timer overrun [ 3288.574706][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3288.696628][ C1] vkms_vblank_simulate: vblank timer overrun [ 3289.124229][ C1] vkms_vblank_simulate: vblank timer overrun [ 3289.476379][ C1] vkms_vblank_simulate: vblank timer overrun [ 3290.274585][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3290.639997][ C1] vkms_vblank_simulate: vblank timer overrun [ 3291.150531][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3291.608622][ C1] vkms_vblank_simulate: vblank timer overrun [ 3292.951813][ C1] vkms_vblank_simulate: vblank timer overrun [ 3293.152860][ C1] vkms_vblank_simulate: vblank timer overrun [ 3293.502281][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3293.527232][ C1] vkms_vblank_simulate: vblank timer overrun [ 3293.591157][ C1] vkms_vblank_simulate: vblank timer overrun [ 3293.870518][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3293.886327][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.253973][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.360497][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.435125][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.682398][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.712953][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.755987][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.788328][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.820276][ C1] vkms_vblank_simulate: vblank timer overrun [ 3294.956491][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3295.665343][ C1] vkms_vblank_simulate: vblank timer overrun [ 3296.178345][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3296.284775][ C1] vkms_vblank_simulate: vblank timer overrun [ 3296.787311][ C1] vkms_vblank_simulate: vblank timer overrun [ 3296.872740][ C1] vkms_vblank_simulate: vblank timer overrun [ 3296.905218][ C1] vkms_vblank_simulate: vblank timer overrun [ 3297.446830][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3297.446930][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3297.447129][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3297.706190][ C1] vkms_vblank_simulate: vblank timer overrun [ 3298.241257][ C1] vkms_vblank_simulate: vblank timer overrun [ 3298.548252][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3299.600758][ T5278] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3299.629577][ T5278] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3299.631447][ T5278] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3299.632684][ T5278] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3299.659820][ T5278] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3299.799444][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3300.457748][ C1] vkms_vblank_simulate: vblank timer overrun [ 3300.879466][T14890] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3301.051369][T14890] usb 3-1: Using ep0 maxpacket: 16 [ 3301.066247][T14890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3301.066330][T14890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3301.066379][T14890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3301.066567][T14890] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3301.066650][T14890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3301.240111][T14890] usb 3-1: config 0 descriptor?? [ 3301.462174][T15413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3301.469819][ C1] vkms_vblank_simulate: vblank timer overrun [ 3301.526329][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3301.882587][ T5277] Bluetooth: hci8: command tx timeout [ 3302.794347][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3303.460114][T15099] netlink: 'syz.1.10307': attribute type 11 has an invalid length. [ 3303.460138][T15099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10307'. [ 3303.935281][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3304.123151][ T5277] Bluetooth: hci8: command tx timeout [ 3304.840809][ C1] vkms_vblank_simulate: vblank timer overrun [ 3304.888115][ C1] vkms_vblank_simulate: vblank timer overrun [ 3304.910515][ T1518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3304.948575][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3305.119134][T14890] usbhid 3-1:0.0: can't add hid device: -71 [ 3305.119280][T14890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3305.144450][ C1] vkms_vblank_simulate: vblank timer overrun [ 3305.153193][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3305.168229][T14890] usb 3-1: USB disconnect, device number 124 [ 3305.333119][T14800] chnl_net:caif_netlink_parms(): no params data found [ 3306.329287][ T5277] Bluetooth: hci8: command tx timeout [ 3306.458169][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3306.955334][ C1] vkms_vblank_simulate: vblank timer overrun [ 3307.008096][ C1] vkms_vblank_simulate: vblank timer overrun [ 3307.137161][ C1] vkms_vblank_simulate: vblank timer overrun [ 3307.243830][ C1] vkms_vblank_simulate: vblank timer overrun [ 3307.270282][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3307.273907][ C1] vkms_vblank_simulate: vblank timer overrun [ 3307.462382][T20428] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3307.883144][ C1] vkms_vblank_simulate: vblank timer overrun [ 3307.982283][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 3308.237546][ C1] vkms_vblank_simulate: vblank timer overrun [ 3308.419919][ C1] vkms_vblank_simulate: vblank timer overrun [ 3308.696564][ C1] vkms_vblank_simulate: vblank timer overrun [ 3308.702375][ T5277] Bluetooth: hci8: command tx timeout [ 3308.714602][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3308.769598][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3309.146671][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.199126][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.273133][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.305603][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.467059][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.550512][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.648350][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.679062][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.745612][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.783906][T20428] usb 3-1: device descriptor read/all, error -71 [ 3309.953950][ C1] vkms_vblank_simulate: vblank timer overrun [ 3309.954421][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3310.129634][ C1] vkms_vblank_simulate: vblank timer overrun [ 3310.290552][ C1] vkms_vblank_simulate: vblank timer overrun [ 3310.983116][T20428] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3311.015203][ C1] vkms_vblank_simulate: vblank timer overrun [ 3311.337580][ C1] vkms_vblank_simulate: vblank timer overrun [ 3311.347835][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3311.518913][ C1] vkms_vblank_simulate: vblank timer overrun [ 3311.550041][ C1] vkms_vblank_simulate: vblank timer overrun [ 3311.605414][ C1] vkms_vblank_simulate: vblank timer overrun [ 3311.732542][ C1] vkms_vblank_simulate: vblank timer overrun [ 3311.947547][ C1] vkms_vblank_simulate: vblank timer overrun [ 3311.973793][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3312.031772][ C1] vkms_vblank_simulate: vblank timer overrun [ 3312.487136][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3312.854250][ C1] vkms_vblank_simulate: vblank timer overrun [ 3312.886794][ C1] vkms_vblank_simulate: vblank timer overrun [ 3312.969169][T20428] usb 3-1: Using ep0 maxpacket: 16 [ 3313.001850][T20428] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3313.003460][T20428] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3313.003492][T20428] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3313.006592][T20428] usb 3-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 3313.006620][T20428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.006640][T20428] usb 3-1: Product: syz [ 3313.006656][T20428] usb 3-1: Manufacturer: à ‰ [ 3313.006670][T20428] usb 3-1: SerialNumber: syz [ 3313.314254][ C1] vkms_vblank_simulate: vblank timer overrun [ 3313.796267][ C1] vkms_vblank_simulate: vblank timer overrun [ 3313.908803][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3313.921581][T14807] chnl_net:caif_netlink_parms(): no params data found [ 3314.095206][T20428] usbhid 3-1:1.0: can't add hid device: -22 [ 3314.095341][T20428] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 3314.191561][ C1] vkms_vblank_simulate: vblank timer overrun [ 3314.246245][ C1] vkms_vblank_simulate: vblank timer overrun [ 3314.276417][ C1] vkms_vblank_simulate: vblank timer overrun [ 3314.416975][ C1] vkms_vblank_simulate: vblank timer overrun [ 3314.734738][T20428] usb 3-1: USB disconnect, device number 126 [ 3314.832375][ C1] vkms_vblank_simulate: vblank timer overrun [ 3314.918192][ C1] vkms_vblank_simulate: vblank timer overrun [ 3315.100562][ C1] vkms_vblank_simulate: vblank timer overrun [ 3315.223924][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3315.261628][ C1] vkms_vblank_simulate: vblank timer overrun [ 3315.345566][ C1] vkms_vblank_simulate: vblank timer overrun [ 3315.453524][ C1] vkms_vblank_simulate: vblank timer overrun [ 3315.559584][ C1] vkms_vblank_simulate: vblank timer overrun [ 3315.768813][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3315.798768][ C1] vkms_vblank_simulate: vblank timer overrun [ 3316.933743][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3317.650074][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.179421][ C1] vkms_vblank_simulate: vblank timer overrun [ 3318.233166][ C1] vkms_vblank_simulate: vblank timer overrun [ 3318.340758][ C1] vkms_vblank_simulate: vblank timer overrun [ 3318.500653][ C1] vkms_vblank_simulate: vblank timer overrun [ 3318.612484][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.623161][ C1] vkms_vblank_simulate: vblank timer overrun [ 3318.915907][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.925706][ C1] vkms_vblank_simulate: vblank timer overrun [ 3319.162104][ C1] vkms_vblank_simulate: vblank timer overrun [ 3319.300429][ C1] vkms_vblank_simulate: vblank timer overrun [ 3319.587941][ C1] vkms_vblank_simulate: vblank timer overrun [ 3319.727604][ C1] vkms_vblank_simulate: vblank timer overrun [ 3319.916262][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3320.102178][ C1] vkms_vblank_simulate: vblank timer overrun [ 3320.973847][ C1] vkms_vblank_simulate: vblank timer overrun [ 3321.060391][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3321.991102][ C1] vkms_vblank_simulate: vblank timer overrun [ 3322.047477][ C1] vkms_vblank_simulate: vblank timer overrun [ 3322.151148][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3322.524699][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3323.276578][ C1] vkms_vblank_simulate: vblank timer overrun [ 3323.309014][ C1] vkms_vblank_simulate: vblank timer overrun [ 3323.704444][ C1] vkms_vblank_simulate: vblank timer overrun [ 3323.919804][ C1] vkms_vblank_simulate: vblank timer overrun [ 3324.080661][ C1] vkms_vblank_simulate: vblank timer overrun [ 3324.252730][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3324.742604][ C1] vkms_vblank_simulate: vblank timer overrun [ 3325.356080][ C1] vkms_vblank_simulate: vblank timer overrun [ 3325.392475][ C1] vkms_vblank_simulate: vblank timer overrun [ 3325.401069][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3325.446769][ C1] vkms_vblank_simulate: vblank timer overrun [ 3325.500592][ C1] vkms_vblank_simulate: vblank timer overrun [ 3325.517920][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3326.162649][ C1] vkms_vblank_simulate: vblank timer overrun [ 3326.597583][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3326.995243][ C1] vkms_vblank_simulate: vblank timer overrun [ 3327.293191][T14800] bridge0: port 1(bridge_slave_0) entered blocking state [ 3327.293396][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 3327.293673][T14800] bridge_slave_0: entered allmulticast mode [ 3327.296528][T14800] bridge_slave_0: entered promiscuous mode [ 3327.317090][ C1] vkms_vblank_simulate: vblank timer overrun [ 3327.794996][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3328.379629][ C1] vkms_vblank_simulate: vblank timer overrun [ 3328.405385][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3328.651641][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3329.201454][T14800] bridge0: port 2(bridge_slave_1) entered blocking state [ 3329.203827][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 3329.204120][T14800] bridge_slave_1: entered allmulticast mode [ 3330.522190][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3331.107816][T14800] bridge_slave_1: entered promiscuous mode [ 3331.326551][ C1] vkms_vblank_simulate: vblank timer overrun [ 3331.360181][ C1] vkms_vblank_simulate: vblank timer overrun [ 3331.750264][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3331.776795][T14807] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 3331.829737][ C1] vkms_vblank_simulate: vblank timer overrun [ 3331.899831][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3332.079750][ T5278] Bluetooth: hci0: command 0x0406 tx timeout [ 3332.480142][T29500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3332.769976][T29500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3332.774671][T29500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3332.802597][T29500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3332.803564][T29500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3332.852130][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3333.059106][ C1] vkms_vblank_simulate: vblank timer overrun [ 3333.165607][ C1] vkms_vblank_simulate: vblank timer overrun [ 3334.200947][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3335.079649][ C1] vkms_vblank_simulate: vblank timer overrun [ 3335.079936][ T5277] Bluetooth: hci1: command tx timeout [ 3335.334052][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3335.350203][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3336.464769][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3336.618060][ C1] vkms_vblank_simulate: vblank timer overrun [ 3336.778671][ C1] vkms_vblank_simulate: vblank timer overrun [ 3337.330673][ C1] vkms_vblank_simulate: vblank timer overrun [ 3337.373333][ T5277] Bluetooth: hci1: command tx timeout [ 3337.544404][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3338.061365][ C1] vkms_vblank_simulate: vblank timer overrun [ 3338.186027][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3338.498316][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3338.659314][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3338.756633][ C1] vkms_vblank_simulate: vblank timer overrun [ 3338.863694][ C1] vkms_vblank_simulate: vblank timer overrun [ 3338.896006][ C1] vkms_vblank_simulate: vblank timer overrun [ 3338.938594][ C1] vkms_vblank_simulate: vblank timer overrun [ 3338.970757][ C1] vkms_vblank_simulate: vblank timer overrun [ 3339.003051][ C1] vkms_vblank_simulate: vblank timer overrun [ 3339.079033][ C1] vkms_vblank_simulate: vblank timer overrun [ 3339.184465][ C1] vkms_vblank_simulate: vblank timer overrun [ 3339.623248][ T5277] Bluetooth: hci1: command tx timeout [ 3339.698203][ C1] vkms_vblank_simulate: vblank timer overrun [ 3340.054296][ C1] vkms_vblank_simulate: vblank timer overrun [ 3340.091074][ C1] vkms_vblank_simulate: vblank timer overrun [ 3340.432479][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.342653][ C1] vkms_vblank_simulate: vblank timer overrun [ 3341.375722][ C1] vkms_vblank_simulate: vblank timer overrun [ 3341.905593][ T5277] Bluetooth: hci1: command tx timeout [ 3341.922284][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3342.210316][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3342.549945][ C1] vkms_vblank_simulate: vblank timer overrun [ 3342.786995][T29500] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 3342.806620][T29500] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 3342.808878][T29500] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 3342.814694][T29500] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 3342.831475][T29500] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 3342.946109][ C1] vkms_vblank_simulate: vblank timer overrun [ 3342.980099][ C1] vkms_vblank_simulate: vblank timer overrun [ 3343.011329][ C1] vkms_vblank_simulate: vblank timer overrun [ 3343.159976][ C1] vkms_vblank_simulate: vblank timer overrun [ 3343.514529][ C1] vkms_vblank_simulate: vblank timer overrun [ 3343.619904][ C1] vkms_vblank_simulate: vblank timer overrun [ 3343.727855][ C1] vkms_vblank_simulate: vblank timer overrun [ 3343.813628][ C1] vkms_vblank_simulate: vblank timer overrun [ 3344.088517][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3345.057435][ C1] vkms_vblank_simulate: vblank timer overrun [ 3345.326939][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3345.492346][ C1] vkms_vblank_simulate: vblank timer overrun [ 3345.522991][ C1] vkms_vblank_simulate: vblank timer overrun [ 3345.565272][ C1] vkms_vblank_simulate: vblank timer overrun [ 3345.682043][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3345.756263][ C1] vkms_vblank_simulate: vblank timer overrun [ 3345.757423][T29500] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 3345.788342][T29500] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 3345.807706][T29500] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 3345.810298][T29500] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 3345.815048][T29500] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 3345.894596][T15055] chnl_net:caif_netlink_parms(): no params data found [ 3346.293236][ C1] vkms_vblank_simulate: vblank timer overrun [ 3346.399918][ C1] vkms_vblank_simulate: vblank timer overrun [ 3346.460128][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3347.892474][ T5277] Bluetooth: hci9: command tx timeout [ 3348.063056][ T5277] Bluetooth: hci10: command tx timeout [ 3348.116704][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.279971][ C1] vkms_vblank_simulate: vblank timer overrun [ 3348.319840][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.390960][ C1] vkms_vblank_simulate: vblank timer overrun [ 3348.536242][ T6226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.716766][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.738283][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.911195][ C1] vkms_vblank_simulate: vblank timer overrun [ 3348.919862][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3349.273096][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3349.391802][ C1] vkms_vblank_simulate: vblank timer overrun [ 3350.115760][ T5277] Bluetooth: hci9: command tx timeout [ 3350.247606][ C1] vkms_vblank_simulate: vblank timer overrun [ 3350.286580][ T5277] Bluetooth: hci10: command tx timeout [ 3350.409481][ C1] vkms_vblank_simulate: vblank timer overrun [ 3350.941976][ C1] vkms_vblank_simulate: vblank timer overrun [ 3351.188238][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3351.284678][ C1] vkms_vblank_simulate: vblank timer overrun [ 3352.168320][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3352.339248][ T5277] Bluetooth: hci9: command tx timeout [ 3352.339312][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3352.607900][ T5277] Bluetooth: hci10: command tx timeout [ 3353.963978][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3354.573277][ T5277] Bluetooth: hci9: command tx timeout [ 3354.818926][ T5277] Bluetooth: hci10: command tx timeout [ 3355.300260][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3355.417856][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3355.439588][ C1] vkms_vblank_simulate: vblank timer overrun [ 3355.615776][ C1] vkms_vblank_simulate: vblank timer overrun [ 3355.945877][ C1] vkms_vblank_simulate: vblank timer overrun [ 3356.340787][ C1] vkms_vblank_simulate: vblank timer overrun [ 3356.497571][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3357.196445][ C1] vkms_vblank_simulate: vblank timer overrun [ 3357.358426][ C1] vkms_vblank_simulate: vblank timer overrun [ 3357.677452][ C1] vkms_vblank_simulate: vblank timer overrun [ 3357.774018][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3358.610359][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3358.793252][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3358.926730][ T6226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3358.956318][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3359.037072][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3359.280864][ C1] vkms_vblank_simulate: vblank timer overrun [ 3359.334356][ C1] vkms_vblank_simulate: vblank timer overrun [ 3359.440770][ C1] vkms_vblank_simulate: vblank timer overrun [ 3359.473006][ C1] vkms_vblank_simulate: vblank timer overrun [ 3359.473180][ T5277] Bluetooth: hci4: command 0x0406 tx timeout [ 3359.549232][ C1] vkms_vblank_simulate: vblank timer overrun [ 3360.221095][ C1] vkms_vblank_simulate: vblank timer overrun [ 3360.362973][ C1] vkms_vblank_simulate: vblank timer overrun [ 3360.437091][ C1] vkms_vblank_simulate: vblank timer overrun [ 3360.623830][T20428] net_ratelimit: 1 callbacks suppressed [ 3360.623851][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3360.918000][ C1] vkms_vblank_simulate: vblank timer overrun [ 3362.098679][ C1] vkms_vblank_simulate: vblank timer overrun [ 3362.270327][ C1] vkms_vblank_simulate: vblank timer overrun [ 3362.548233][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3362.753856][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3363.473092][ C1] vkms_vblank_simulate: vblank timer overrun [ 3363.504014][ C1] vkms_vblank_simulate: vblank timer overrun [ 3363.784275][ C1] vkms_vblank_simulate: vblank timer overrun [ 3363.825169][ C1] vkms_vblank_simulate: vblank timer overrun [ 3363.857099][ C1] vkms_vblank_simulate: vblank timer overrun [ 3363.944571][ C1] vkms_vblank_simulate: vblank timer overrun [ 3363.997693][ C1] vkms_vblank_simulate: vblank timer overrun [ 3364.072659][ C1] vkms_vblank_simulate: vblank timer overrun [ 3364.146542][ C1] vkms_vblank_simulate: vblank timer overrun [ 3364.427535][ C1] vkms_vblank_simulate: vblank timer overrun [ 3364.466352][ C1] vkms_vblank_simulate: vblank timer overrun [ 3364.499256][ C1] vkms_vblank_simulate: vblank timer overrun [ 3364.763394][ C1] vkms_vblank_simulate: vblank timer overrun [ 3364.771672][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3365.588070][ C1] vkms_vblank_simulate: vblank timer overrun [ 3365.862255][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3366.030119][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3366.101506][ C1] vkms_vblank_simulate: vblank timer overrun [ 3366.422709][ C1] vkms_vblank_simulate: vblank timer overrun [ 3366.973984][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3367.236610][ C1] vkms_vblank_simulate: vblank timer overrun [ 3367.351142][ C1] vkms_vblank_simulate: vblank timer overrun [ 3367.382937][ C1] vkms_vblank_simulate: vblank timer overrun [ 3367.726393][ T5277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3367.747855][ T5277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3367.749710][ T5277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3367.751802][ T5277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3367.752644][ T5277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3368.115019][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3368.827155][ C1] vkms_vblank_simulate: vblank timer overrun [ 3368.844709][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.169083][ C1] vkms_vblank_simulate: vblank timer overrun [ 3369.224482][ C1] vkms_vblank_simulate: vblank timer overrun [ 3369.272262][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.369750][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.865758][ C1] vkms_vblank_simulate: vblank timer overrun [ 3369.971739][ C1] vkms_vblank_simulate: vblank timer overrun [ 3370.025850][ C1] vkms_vblank_simulate: vblank timer overrun [ 3370.163568][ C1] vkms_vblank_simulate: vblank timer overrun [ 3370.398919][ C1] vkms_vblank_simulate: vblank timer overrun [ 3370.505799][ C1] vkms_vblank_simulate: vblank timer overrun [ 3370.514576][T29500] Bluetooth: hci6: command tx timeout [ 3370.621509][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3370.645559][ C1] vkms_vblank_simulate: vblank timer overrun [ 3370.849873][T29500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3370.889206][T29500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3370.891411][T29500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3370.918294][T29500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3370.920054][T29500] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3371.769384][ C1] vkms_vblank_simulate: vblank timer overrun [ 3371.841211][ C1] vkms_vblank_simulate: vblank timer overrun [ 3371.874161][ C1] vkms_vblank_simulate: vblank timer overrun [ 3371.981469][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.119207][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.163431][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.216765][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.409790][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.538154][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.651581][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3372.704642][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.783440][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.851822][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3372.895826][ T5277] Bluetooth: hci6: command tx timeout [ 3372.904037][ C1] vkms_vblank_simulate: vblank timer overrun [ 3372.965027][ C1] vkms_vblank_simulate: vblank timer overrun [ 3373.249188][ T5277] Bluetooth: hci7: command tx timeout [ 3373.697808][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 3373.767550][ C1] vkms_vblank_simulate: vblank timer overrun [ 3373.872925][ C1] vkms_vblank_simulate: vblank timer overrun [ 3373.959333][ C1] vkms_vblank_simulate: vblank timer overrun [ 3374.085306][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3374.385941][ C1] vkms_vblank_simulate: vblank timer overrun [ 3375.320901][ C1] vkms_vblank_simulate: vblank timer overrun [ 3375.328481][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3375.423502][ C1] vkms_vblank_simulate: vblank timer overrun [ 3375.772069][ T5277] Bluetooth: hci7: command tx timeout [ 3375.797290][ C1] vkms_vblank_simulate: vblank timer overrun [ 3376.065201][ C1] vkms_vblank_simulate: vblank timer overrun [ 3376.119732][ C1] vkms_vblank_simulate: vblank timer overrun [ 3376.150041][ C1] vkms_vblank_simulate: vblank timer overrun [ 3376.437391][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.445564][ T5277] Bluetooth: hci6: command tx timeout [ 3376.519843][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.972695][ C1] vkms_vblank_simulate: vblank timer overrun [ 3377.026605][ C1] vkms_vblank_simulate: vblank timer overrun [ 3377.967212][ C1] vkms_vblank_simulate: vblank timer overrun [ 3378.043774][ T5277] Bluetooth: hci7: command tx timeout [ 3378.573932][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3378.691692][ T5277] Bluetooth: hci6: command tx timeout [ 3379.132602][ C1] vkms_vblank_simulate: vblank timer overrun [ 3379.217255][ C1] vkms_vblank_simulate: vblank timer overrun [ 3379.289269][ C1] vkms_vblank_simulate: vblank timer overrun [ 3379.378600][ C1] vkms_vblank_simulate: vblank timer overrun [ 3379.871101][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3379.960726][ C1] vkms_vblank_simulate: vblank timer overrun [ 3380.087171][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3380.087585][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3380.293233][ T5277] Bluetooth: hci7: command tx timeout [ 3381.074193][ C1] vkms_vblank_simulate: vblank timer overrun [ 3381.142368][ C1] vkms_vblank_simulate: vblank timer overrun [ 3381.463500][ C1] vkms_vblank_simulate: vblank timer overrun [ 3382.131867][T20423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3382.253833][ C1] vkms_vblank_simulate: vblank timer overrun [ 3383.013194][ C1] vkms_vblank_simulate: vblank timer overrun [ 3383.065644][ C1] vkms_vblank_simulate: vblank timer overrun [ 3383.212244][ T38] INFO: task syz-executor:13660 blocked for more than 143 seconds. [ 3383.212269][ T38] Not tainted syzkaller #0 [ 3383.212281][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3383.212292][ T38] task:syz-executor state:D stack:19096 pid:13660 tgid:13660 ppid:1 task_flags:0x480140 flags:0x00080003 [ 3383.212344][ T38] Call Trace: [ 3383.212352][ T38] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3383.212368][ T38] __schedule+0x16f3/0x4c20 [ 3383.212427][ T38] ? __pfx___schedule+0x10/0x10 [ 3383.212472][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 3383.212501][ T38] rt_mutex_schedule+0x77/0xf0 [ 3383.212522][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 3383.212544][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 3383.212585][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 3383.212609][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 3383.212632][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 3383.212651][ T38] ? __lock_acquire+0xab9/0xd20 [ 3383.212688][ T38] ? rcu_barrier+0x4c/0x570 [ 3383.212725][ T38] ? rcu_barrier+0x4c/0x570 [ 3383.212743][ T38] mutex_lock_nested+0x16a/0x1d0 [ 3383.212762][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 3383.212798][ T38] rcu_barrier+0x4c/0x570 [ 3383.212831][ T38] netdev_run_todo+0x327/0xea0 [ 3383.212863][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 3383.212884][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 3383.212908][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 3383.212938][ T38] ? nsim_destroy+0x38d/0x680 [ 3383.212964][ T38] ? kfree+0x197/0x950 [ 3383.212984][ T38] ? nsim_destroy+0x38d/0x680 [ 3383.213016][ T38] nsim_destroy+0x3ae/0x680 [ 3383.213051][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 3383.213078][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 3383.213101][ T38] ? nsim_drv_remove+0x50/0x160 [ 3383.213127][ T38] nsim_drv_remove+0x58/0x160 [ 3383.213147][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 3383.213176][ T38] device_release_driver_internal+0x46f/0x800 [ 3383.213211][ T38] bus_remove_device+0x355/0x420 [ 3383.213241][ T38] device_del+0x515/0x8e0 [ 3383.213270][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 3383.213299][ T38] ? __pfx_device_del+0x10/0x10 [ 3383.213335][ T38] device_unregister+0x20/0xc0 [ 3383.213359][ T38] del_device_store+0x2aa/0x360 [ 3383.213382][ T38] ? __pfx_del_device_store+0x10/0x10 [ 3383.213402][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 3383.213430][ T38] ? sysfs_kf_write+0x166/0x260 [ 3383.213453][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 3383.213469][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 3383.213503][ T38] vfs_write+0x5d5/0xb40 [ 3383.213534][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 3383.213561][ T38] ? __pfx_vfs_write+0x10/0x10 [ 3383.213595][ T38] ? do_sys_openat2+0x154/0x1c0 [ 3383.213626][ T38] ksys_write+0x14b/0x260 [ 3383.213653][ T38] ? __pfx_ksys_write+0x10/0x10 [ 3383.213681][ T38] ? do_syscall_64+0xbe/0xfa0 [ 3383.213710][ T38] do_syscall_64+0xfa/0xfa0 [ 3383.213737][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3383.213756][ T38] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3383.213775][ T38] ? clear_bhb_loop+0x60/0xb0 [ 3383.213805][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3383.213825][ T38] RIP: 0033:0x7f03ed2dda7f [ 3383.213844][ T38] RSP: 002b:00007ffd76cb2b30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3383.213864][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f03ed2dda7f [ 3383.213880][ T38] RDX: 0000000000000001 RSI: 00007ffd76cb2b80 RDI: 0000000000000005 [ 3383.213894][ T38] RBP: 00007f03ed363256 R08: 0000000000000000 R09: 00007ffd76cb2987 [ 3383.213908][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3383.213922][ T38] R13: 00007ffd76cb2b80 R14: 00007f03ee064620 R15: 0000000000000003 [ 3383.213957][ T38] [ 3383.213999][ T38] [ 3383.213999][ T38] Showing all locks held in the system: [ 3383.214012][ T38] 6 locks held by ksoftirqd/0/15: [ 3383.214024][ T38] #0: ffffffff8d44ac40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 3383.214074][ T38] #1: ffffffff8d5aa800 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 3383.214122][ T38] #2: ffffffff8d5aa800 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x27b/0x900 [ 3383.214166][ T38] #3: ffffffff8d5aa800 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9a/0x3a0 [ 3383.214208][ T38] #4: ffffffff8d5aa800 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xc1/0x280 [ 3383.214258][ T38] #5: ffff8880377f46f0 (&dir->lock#2){+.+.}-{3:3}, at: ref_tracker_alloc+0x1cb/0x450 [ 3383.214314][ T38] 4 locks held by rcuc/0/20: [ 3383.214327][ T38] 1 lock held by khungtaskd/38: [ 3383.214338][ T38] #0: ffffffff8d5aa800 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3383.214391][ T38] 9 locks held by kworker/u8:5/984: [ 3383.214405][ T38] 6 locks held by kworker/u8:8/1518: [ 3383.214417][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3383.214466][ T38] #1: ffffc90005a6fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3383.214514][ T38] #2: ffffffff8e856320 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 3383.214559][ T38] #3: ffff888064a310d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 3383.214613][ T38] #4: ffff888026159300 (&devlink->lock_key#55){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 3383.214668][ T38] #5: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.214725][ T38] 2 locks held by getty/5553: [ 3383.214737][ T38] #0: ffff88823bf2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3383.214790][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 3383.214842][ T38] 3 locks held by kworker/u8:3/9926: [ 3383.214853][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3383.214907][ T38] #1: ffffc9000cc5fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3383.214954][ T38] #2: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 3383.215002][ T38] 2 locks held by kworker/u8:12/10001: [ 3383.215014][ T38] #0: ffff88801c39d138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3383.215062][ T38] #1: ffffc90004c4fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3383.215110][ T38] 3 locks held by kworker/u8:2/19202: [ 3383.215122][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3383.215175][ T38] #1: ffffc90004d5fba0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3383.215223][ T38] #2: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.215268][ T38] 2 locks held by kworker/u8:6/22468: [ 3383.215280][ T38] #0: ffff88801c39d138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3383.215328][ T38] #1: ffffc90004037ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3383.215373][ T38] 6 locks held by kworker/0:0/27211: [ 3383.215383][ T38] #0: ffff8880216dd138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3383.215430][ T38] #1: ffffc9000d4afba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3383.215475][ T38] #2: ffff88802748a188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 3383.215520][ T38] #3: ffff8880641e9188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x940 [ 3383.215574][ T38] #4: ffff888081a4e150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 3383.215625][ T38] #5: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.215670][ T38] 6 locks held by kworker/u8:7/29080: [ 3383.215683][ T38] 3 locks held by kworker/1:1/30040: [ 3383.215705][ T38] 7 locks held by syz-executor/13660: [ 3383.215715][ T38] #0: ffff888033eb0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3383.215759][ T38] #1: ffff88805cd54078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3383.215811][ T38] #2: ffff8881443f9e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3383.215862][ T38] #3: ffffffff8e0f3fd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3383.215902][ T38] #4: ffff8880527280d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 3383.215949][ T38] #5: ffff888027acd300 (&devlink->lock_key#26){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 3383.215997][ T38] #6: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.216040][ T38] 1 lock held by syz.7.10218/13919: [ 3383.216051][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.216094][ T38] 4 locks held by syz-executor/14207: [ 3383.216104][ T38] #0: ffff888033eb0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3383.216152][ T38] #1: ffff88805984d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3383.216201][ T38] #2: ffff8881443f9e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3383.216252][ T38] #3: ffffffff8e0f3fd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3383.216297][ T38] 2 locks held by kworker/u8:10/14480: [ 3383.216309][ T38] #0: ffff88801c39d138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3383.216357][ T38] #1: ffffc9000cf1fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3383.216407][ T38] 1 lock held by syz.6.10277/14612: [ 3383.216418][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.216464][ T38] 1 lock held by syz-executor/14800: [ 3383.216476][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.216521][ T38] 1 lock held by syz-executor/14807: [ 3383.216532][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.216577][ T38] 1 lock held by syz-executor/15055: [ 3383.216589][ T38] #0: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 3383.216637][ T38] 1 lock held by syz.1.10307/15098: [ 3383.216647][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3383.216692][ T38] 2 locks held by syz-executor/15257: [ 3383.216703][ T38] #0: ffffffff8ed64c78 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 3383.216753][ T38] #1: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 3383.216804][ T38] 2 locks held by syz-executor/15365: [ 3383.216815][ T38] #0: ffffffff8e856320 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 3383.216858][ T38] #1: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 3383.216906][ T38] 3 locks held by syz-executor/15377: [ 3383.216918][ T38] 2 locks held by syz-executor/15435: [ 3383.216930][ T38] #0: ffffffff8e856320 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 3383.216973][ T38] #1: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 3383.217021][ T38] 3 locks held by syz-executor/15448: [ 3383.217033][ T38] [ 3383.217039][ T38] ============================================= [ 3383.217039][ T38] [ 3383.217049][ T38] NMI backtrace for cpu 1 [ 3383.217069][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3383.217122][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3383.217150][ T38] Call Trace: [ 3383.217168][ T38] [ 3383.217186][ T38] dump_stack_lvl+0x189/0x250 [ 3383.217260][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3383.217329][ T38] ? __pfx__printk+0x10/0x10 [ 3383.217415][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 3383.217471][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3383.217527][ T38] ? __pfx__printk+0x10/0x10 [ 3383.217595][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3383.217651][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3383.217708][ T38] watchdog+0xf60/0xfa0 [ 3383.217742][ T38] ? watchdog+0x1e2/0xfa0 [ 3383.217773][ T38] kthread+0x711/0x8a0 [ 3383.217809][ T38] ? __pfx_watchdog+0x10/0x10 [ 3383.217833][ T38] ? __pfx_kthread+0x10/0x10 [ 3383.217856][ T38] ? rt_spin_unlock+0x150/0x200 [ 3383.217881][ T38] ? rt_spin_unlock+0x161/0x200 [ 3383.217899][ T38] ? __pfx_kthread+0x10/0x10 [ 3383.217925][ T38] ret_from_fork+0x4bc/0x870 [ 3383.217951][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 3383.217980][ T38] ? __switch_to_asm+0x39/0x70 [ 3383.217999][ T38] ? __switch_to_asm+0x33/0x70 [ 3383.218016][ T38] ? __pfx_kthread+0x10/0x10 [ 3383.218043][ T38] ret_from_fork_asm+0x1a/0x30 [ 3383.218080][ T38] [ 3383.218087][ T38] Sending NMI from CPU 1 to CPUs 0: [ 3383.218121][ C0] NMI backtrace for cpu 0 [ 3383.218134][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3383.218154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3383.218164][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x13/0xf0 [ 3383.218187][ C0] Code: d8 f6 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 <48> 83 ec 60 48 89 fb 65 48 8b 05 4e 91 de 06 48 89 44 24 48 48 c7 [ 3383.218202][ C0] RSP: 0018:ffffc900001476c0 EFLAGS: 00000286 [ 3383.218216][ C0] RAX: 1ffff92000028eed RBX: ffffc90000147760 RCX: 851890c1256e6c00 [ 3383.218229][ C0] RDX: 0000000000000002 RSI: ffffffff8cf63f0a RDI: ffff8880b883c928 [ 3383.218242][ C0] RBP: ffffc900001476f0 R08: 0000000000000000 R09: ffffffff8ac2ab41 [ 3383.218254][ C0] R10: 0000000000000000 R11: ffffed1005a98f92 R12: dffffc0000000000 [ 3383.218266][ C0] R13: ffff8880b883c928 R14: 0000000000000016 R15: 1ffff92000028ee8 [ 3383.218279][ C0] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 3383.218294][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3383.218306][ C0] CR2: 00007f368f9d1ecf CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 3383.218321][ C0] Call Trace: [ 3383.218328][ C0] [ 3383.218338][ C0] rt_mutex_slowunlock+0xb0/0x8a0 [ 3383.218355][ C0] ? reacquire_held_locks+0x127/0x1d0 [ 3383.218377][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 3383.218396][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 3383.218415][ C0] ? rt_spin_unlock+0x150/0x200 [ 3383.218433][ C0] ? rt_spin_unlock+0x161/0x200 [ 3383.218451][ C0] process_backlog+0x26f/0x900 [ 3383.218472][ C0] __napi_poll+0xb6/0x540 [ 3383.218495][ C0] net_rx_action+0x5f7/0xda0 [ 3383.218511][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 3383.218536][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 3383.218553][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 3383.218577][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 3383.218618][ C0] handle_softirqs+0x22f/0x710 [ 3383.218642][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 3383.218665][ C0] run_ksoftirqd+0xac/0x210 [ 3383.218685][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 3383.218706][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 3383.218725][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 3383.218745][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 3383.218763][ C0] smpboot_thread_fn+0x542/0xa60 [ 3383.218782][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 3383.218805][ C0] kthread+0x711/0x8a0 [ 3383.218827][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 3383.218846][ C0] ? __pfx_kthread+0x10/0x10 [ 3383.218865][ C0] ? rt_spin_unlock+0x150/0x200 [ 3383.218884][ C0] ? rt_spin_unlock+0x161/0x200 [ 3383.218899][ C0] ? __pfx_kthread+0x10/0x10 [ 3383.218920][ C0] ret_from_fork+0x4bc/0x870 [ 3383.218939][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3383.218960][ C0] ? __switch_to_asm+0x39/0x70 [ 3383.218976][ C0] ? __switch_to_asm+0x33/0x70 [ 3383.218990][ C0] ? __pfx_kthread+0x10/0x10 [ 3383.219012][ C0] ret_from_fork_asm+0x1a/0x30 [ 3383.219042][ C0] [ 3383.471869][ C1] vkms_vblank_simulate: vblank timer overrun [ 3383.921241][ C1] vkms_vblank_simulate: vblank timer overrun [ 3383.973875][ C1] vkms_vblank_simulate: vblank timer overrun [ 3384.028933][ C1] vkms_vblank_simulate: vblank timer overrun [ 3384.655117][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.830645][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.991177][ C1] vkms_vblank_simulate: vblank timer overrun [ 3385.205425][ C1] vkms_vblank_simulate: vblank timer overrun [ 3385.310526][ C1] vkms_vblank_simulate: vblank timer overrun [ 3385.344475][ C1] vkms_vblank_simulate: vblank timer overrun [ 3385.396941][ C1] vkms_vblank_simulate: vblank timer overrun [ 3386.215481][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3386.226577][ C1] vkms_vblank_simulate: vblank timer overrun [ 3386.488037][ C1] vkms_vblank_simulate: vblank timer overrun [ 3387.160919][ C1] vkms_vblank_simulate: vblank timer overrun [ 3387.233484][ C1] vkms_vblank_simulate: vblank timer overrun [ 3387.389388][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3388.150961][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3388.175800][ C1] vkms_vblank_simulate: vblank timer overrun [ 3388.514124][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3388.763868][ C1] vkms_vblank_simulate: vblank timer overrun [ 3389.694760][ C1] vkms_vblank_simulate: vblank timer overrun [ 3389.800974][ C1] vkms_vblank_simulate: vblank timer overrun [ 3390.310237][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3390.448840][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3390.705697][ C1] vkms_vblank_simulate: vblank timer overrun [ 3391.552406][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3391.689313][T30040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3392.789972][T27936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3392.928986][ C1] vkms_vblank_simulate: vblank timer overrun [ 3393.093832][ C1] vkms_vblank_simulate: vblank timer overrun