last executing test programs: 26m54.566966283s ago: executing program 32 (id=20): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000001040)={0x2020}, 0xffffff16) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) 24m53.010309982s ago: executing program 33 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 23m38.836827775s ago: executing program 34 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) pipe(&(0x7f0000000280)) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x400452c8, &(0x7f0000000000)='\x00'/20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235) write(r3, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) 23m5.571026226s ago: executing program 35 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x7) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) 20m0.111603258s ago: executing program 36 (id=550): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB]) setsockopt(r0, 0xffffffff, 0x485, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000e0000002f4900007f00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000c81e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) 8m7.393822884s ago: executing program 6 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) 8m7.11332376s ago: executing program 6 (id=1201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m5.945135253s ago: executing program 6 (id=1202): r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) 8m1.482235125s ago: executing program 6 (id=1204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000750000000000000000000000000000000000000000000000000000000000b86b"], 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x110008, &(0x7f0000000540)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x5}}, {@sq={'sq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffff9}}, {@rq={'rq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x2}}], [{@uid_gt}, {@euid_lt={'euid<', r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{'}}, {@uid_eq={'uid', 0x3d, r5}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@uid_eq={'uid', 0x3d, r6}}]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x28, r10, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r15, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e"], 0x50}}, 0x840) 8m0.482803001s ago: executing program 6 (id=1205): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000100)=0x0) io_cancel(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 7m59.078824925s ago: executing program 6 (id=1206): mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x5, 0x50, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) io_setup(0x3, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0xff92, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r6, 0x0, 0x2, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) 7m43.971169395s ago: executing program 37 (id=1206): mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x5, 0x50, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) io_setup(0x3, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0xff92, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r6, 0x0, 0x2, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) 5m52.513159752s ago: executing program 7 (id=1343): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) 5m52.090005887s ago: executing program 7 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c) 5m51.561969711s ago: executing program 7 (id=1345): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102"], 0x0) 5m46.349731063s ago: executing program 7 (id=1350): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x14, 0x7}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0x2d, 0x0, 0x10, 0x3b}, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x49, 0x20, 0x59, 0x92, 0x6}]}, 0x4, [{0x44, &(0x7f0000000440)=@string={0x44, 0x3, "b86a0e35c6cfe4d136485e27273b8c4041d8c81181d4f428fd20ea0f5c9a752a5527d744c0b632dc7d73ff65309c13822f5dc0774765cf9f3d29e859c1c2935751c1"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3001}}, {0xb5, &(0x7f0000000640)=@string={0xb5, 0x3, "5d856aedc2708ab1744ab2656e4355195061ed47ec744d45ecf4395bd6106adc8a7f3dc5003f5d0625fcfb235589fec160a26e0699bce199dd2a19de0bfa9da70a55150214fe6d50e6d3367f3f8731f4673ba7e3caa313d91c045676a9a0f1f11ce5fe31add08bf502ae0edc80e22663510d08631d6ca7c80b75e20c50b1cd18e8e36e6bf247d2a4e30c3ce8e216ea15ee6295e4314c0840b11ad5c22337b59f0cdb7e6c8939a2912a0de35ac6e3dccf7004af"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x15}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r7, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r7, &(0x7f0000000500)={0xc4, 0x7d, 0xa, {{0x0, 0xab, 0x3, 0x406, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0x3, 'R\x90\x00', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x4, 'Y\xa6\xb6\x17'}}, 0xc4) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000c00)={0x43, 0x3}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x72bf9ca74e99c77d}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000000108010200000000000000000300010000001000030184000000"], 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0) syz_usb_connect$midi(0x4, 0x80, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x3, 0xb0, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x4, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x3, 0x6, [{0x81, 0x2}, {0x5, 0x6}, {0x30, 0x5}, {0x0, 0x3}, {0xb, 0x9c}, {0x5, 0x7}], 0x9}], [{{0x9, 0x5, 0xd, 0xc, 0x400, 0x0, 0xd, 0xf, {0x7, 0x25, 0x1, 0x3, "0426ac"}}}, {{0x9, 0x5, 0x7, 0x10, 0x50, 0x0, 0x0, 0x46, {0xe, 0x25, 0x1, 0xa, "488ad911e0d66164c0fd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xc, 0x9, 0x9, {0xb, 0x25, 0x1, 0x7, "07c5352fd16e40"}}}]}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x8, 0x3, 0xc7, 0xff, 0x2}, 0x5, &(0x7f0000000a40)={0x5, 0xf, 0x5}, 0x3, [{0xbe, &(0x7f0000000a80)=@string={0xbe, 0x3, "8eb537100fadeca9a73c2e8cb645703f8f68c03246516f49160590b0bd02a3fa0e885aa85f5c114212778b67a43acc8a7e5e7554e668f88534d19754133f9b325925d4444aa0ca98d09db5f1eeaf7095110fd2202fd70d22e11b18b542ec877a82f66ccd7d43be5b0aa7f28114dae6b5cc75acefdbc675ea38861c8ca81cf2a7a1991f93047af6d5a7f0e18ec0df8877c307be922e6fd29b22bf23b963b7a67cf1d64584c62a9839993a740423c98b37f310696e742281d9c1fdc80e"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x423}}]}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000001040)={0x1, 0x1, 0x8, 0x8}) 5m42.54003527s ago: executing program 7 (id=1353): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) poll(&(0x7f00000000c0)=[{r0, 0x100}, {r0, 0x440a}, {r0, 0x1}, {r1, 0x6104}], 0x4, 0x3) 5m41.806172444s ago: executing program 7 (id=1355): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2', 0x5) unshare(0x22020600) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x90, 0x8, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 5m26.565301145s ago: executing program 38 (id=1355): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2', 0x5) unshare(0x22020600) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x90, 0x8, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 4m57.618111641s ago: executing program 8 (id=1443): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0x0, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xbc, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0x9, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x9, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc60, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9514, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x200081, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x6, 0xe03, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0x3, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x7, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) 4m55.727705187s ago: executing program 8 (id=1445): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x14, 0x7}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0x2d, 0x0, 0x10, 0x3b}, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x49, 0x20, 0x59, 0x92, 0x6}]}, 0x4, [{0x44, &(0x7f0000000440)=@string={0x44, 0x3, "b86a0e35c6cfe4d136485e27273b8c4041d8c81181d4f428fd20ea0f5c9a752a5527d744c0b632dc7d73ff65309c13822f5dc0774765cf9f3d29e859c1c2935751c1"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3001}}, {0xb5, &(0x7f0000000640)=@string={0xb5, 0x3, "5d856aedc2708ab1744ab2656e4355195061ed47ec744d45ecf4395bd6106adc8a7f3dc5003f5d0625fcfb235589fec160a26e0699bce199dd2a19de0bfa9da70a55150214fe6d50e6d3367f3f8731f4673ba7e3caa313d91c045676a9a0f1f11ce5fe31add08bf502ae0edc80e22663510d08631d6ca7c80b75e20c50b1cd18e8e36e6bf247d2a4e30c3ce8e216ea15ee6295e4314c0840b11ad5c22337b59f0cdb7e6c8939a2912a0de35ac6e3dccf7004af"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x15}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) 4m52.462364099s ago: executing program 8 (id=1452): socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7ff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x1aa2, 0x2, 0xe, 0x8], 0x0, 0x0}, 0x78) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) 4m52.221484729s ago: executing program 1 (id=1453): r0 = socket$inet(0x2, 0x1, 0x6) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00040028"], 0x20) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[], 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r3, 0x5, 0x0, 0x467b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000004c0)) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r5 = accept$inet(r0, 0x0, 0x0) read(r5, &(0x7f0000000100), 0x4) read(r5, &(0x7f0000000304), 0x4) write(r5, &(0x7f0000000300), 0x100) socket$kcm(0x2, 0x2, 0x0) 4m51.005945406s ago: executing program 8 (id=1454): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000340)}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)}, {&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b40)=""/87, 0x57}], 0x7}, 0x0) 4m49.646170526s ago: executing program 1 (id=1456): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x90001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18d0010}) io_uring_enter(0xffffffffffffffff, 0x0, 0x15ef, 0x4d, 0x0, 0x40) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") openat$incfs(0xffffffffffffff9c, 0x0, 0x1832c1, 0x9c37611dc13d0da6) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) 4m47.974911181s ago: executing program 1 (id=1460): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) 4m47.509161336s ago: executing program 1 (id=1462): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x2001c1, 0x40) write(r0, &(0x7f00000000c0)="11", 0x1) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x9b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000200000000060000000e0001006e657464657673696d0000000f0002006e657464657673696d300b000000000006001600d53e00000500120001000000000000000000"], 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="2400000057474178cf5932297977cf89a9ed4bbda3aaa211d13b5a062c65a75db483a0c065e8e409455d371e89905358b149cbcfd4b25abb689dda3a962209902a733e48d5ae872ee82d1dfc273b95a7aba56b107b1248eb5f9e1bd8752f605066afec09a5f99ff435dbc53bde207146c3bc7c963b1c9c091ac818761c0c09f352fb66d05f5bec1110d7374abe38406c04ff6ac978b820d0b51905ae1784037560cfc7896d4ec76d4c7abbf030d9cb23bdabea43399872423352aa9b445de103a8fce0be1c0c1490754fbc86c0e780ea3c6035d61f7d65c48569529fbc68c92e724bf9841d12f617cedfe5729f6dec13d093673ffdf8a5117f1f23d650d138618005761c7ce0ceb9757a56c4b4ddaa539ba5e9138a0bb7f4a29e3e456f7ca45fcc76", @ANYRES16, @ANYBLOB="0500000000ecf148cf231b0000000700210061d5"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4808) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x8}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) listen(0xffffffffffffffff, 0x10000) exit(0x0) sendmmsg$inet6(r6, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="f01cf2", 0x3}], 0x1}}], 0x1, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m46.13760689s ago: executing program 1 (id=1466): socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7ff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x1aa2, 0x2, 0xe, 0x8], 0x0, 0x0}, 0x78) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) 4m45.99706647s ago: executing program 8 (id=1467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$dsp(r3, &(0x7f0000000280)=""/189, 0xbd) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0xa50003d1) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 4m44.730535288s ago: executing program 1 (id=1469): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0x88600) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 4m43.455527426s ago: executing program 8 (id=1470): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e01020301090261000100000000090400"], 0x0) 4m29.205252249s ago: executing program 39 (id=1469): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0x88600) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 4m28.031624309s ago: executing program 40 (id=1470): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e01020301090261000100000000090400"], 0x0) 2m51.727226752s ago: executing program 0 (id=1648): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 2m50.52931012s ago: executing program 0 (id=1653): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2m47.12706328s ago: executing program 0 (id=1659): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x212, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "ee6a4130f0506500"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r8, 0x2000000008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m43.685097404s ago: executing program 0 (id=1664): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) 2m43.647757406s ago: executing program 9 (id=1665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m43.014279322s ago: executing program 9 (id=1668): socket$inet6(0xa, 0x2, 0x3a) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) 2m40.098521562s ago: executing program 9 (id=1671): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2m36.966024184s ago: executing program 0 (id=1682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 2m33.452846787s ago: executing program 0 (id=1688): sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) gettid() sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m29.881767014s ago: executing program 9 (id=1693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) openat$vsock(0xffffffffffffff9c, 0x0, 0x80801, 0x0) pipe2$watch_queue(0x0, 0x80) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m29.645247607s ago: executing program 9 (id=1696): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6690000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 2m29.4512926s ago: executing program 9 (id=1698): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0xfffffffa, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="e9e29565e7416568a4c81385b0f62b7928f815ac9eef5aa4a45793b62f36ae8a2d05009809f864c38f21bb721658e299a7e7b15367314829b0a62f0e42e7"], 0x38}, 0x40) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc01c586b, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) clock_nanosleep(0x2, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r7) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xc, 0x4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 2m24.94177091s ago: executing program 2 (id=1704): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 2m23.573207405s ago: executing program 2 (id=1707): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) 2m23.364690663s ago: executing program 2 (id=1708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m23.050652451s ago: executing program 2 (id=1709): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r0 = io_uring_setup(0x5940, &(0x7f0000000440)={0x0, 0x800000, 0x400, 0x2, 0x12a}) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) dup(0xffffffffffffffff) timer_gettime(0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func_proto]}}, 0x0, 0x4a}, 0x28) ioctl$TCFLSH(r3, 0x400455c8, 0x2) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r5) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x3) 2m22.358336343s ago: executing program 2 (id=1711): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='4', 0x1) 2m22.213576463s ago: executing program 2 (id=1713): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x3, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0x4}}, 0xe8) connect$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x4, {0x0, 0x0, 0x74, r3, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) 2m17.960979771s ago: executing program 41 (id=1688): sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) gettid() sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m13.164690124s ago: executing program 42 (id=1698): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0xfffffffa, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="e9e29565e7416568a4c81385b0f62b7928f815ac9eef5aa4a45793b62f36ae8a2d05009809f864c38f21bb721658e299a7e7b15367314829b0a62f0e42e7"], 0x38}, 0x40) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc01c586b, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) clock_nanosleep(0x2, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r7) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xc, 0x4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 2m6.162534703s ago: executing program 43 (id=1713): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x3, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0x4}}, 0xe8) connect$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x4, {0x0, 0x0, 0x74, r3, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) 27.200635545s ago: executing program 5 (id=1866): socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r1 = mq_open(0x0, 0x40, 0x118, 0x0) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x7, 0x2, @thr={0x0, 0x0}}) mq_notify(r1, 0x0) 25.317742806s ago: executing program 3 (id=1867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, 0x0, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 22.081908869s ago: executing program 3 (id=1868): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x5}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}], 0x88) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x6, {0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x12, 0x7, 0x10, "61fe9a5a450b0fbac1812fec5fb923bb2379af3a179c14ef4bc8aa64846aa29882efb38ec84ae2150f89d46429c2a01c4ea2a9ca6a56f1e9513699eb6c64f70e", "bc9adabb6e5d264737dfb9bcadd890b323aa12e4bccd0f6315dbb4a626f913a3603aeef631237f5d2dae24f55dedf6fe2514d5c034207c1b1cbab2a73f84abb4", "4364ec1623f0f44fde196ca9a1d464af35369b5bbe02ded09f999166524c9672", [0x1, 0x3]}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xa00, 0x0, 0x3, 0x1, 0x7f, 0xf8}, &(0x7f00000001c0)=0x20) setuid(0xee01) r5 = semget$private(0x0, 0x4, 0x29b) semop(r5, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) 21.884498467s ago: executing program 5 (id=1870): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r1, &(0x7f0000000280)='1', 0x1) 17.914181465s ago: executing program 5 (id=1872): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x212, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "ee6a4130f0506500"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r8, 0x2000000008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.424008485s ago: executing program 5 (id=1873): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 13.223410797s ago: executing program 4 (id=1876): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 11.789076629s ago: executing program 4 (id=1877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 10.987649452s ago: executing program 5 (id=1878): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) 9.867287022s ago: executing program 4 (id=1879): socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r1, 0x0) mq_notify(r1, 0x0) 9.758600789s ago: executing program 3 (id=1880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sched_setattr(r1, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) read$dsp(r4, &(0x7f0000000280)=""/189, 0xbd) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0xa50003d1) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x65, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdir(0x0, 0x2c) listen(0xffffffffffffffff, 0x5) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 6.463600371s ago: executing program 5 (id=1881): setns(0xc9, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d03000000000003010902940003010040000904"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 3.225227936s ago: executing program 3 (id=1882): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x212, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "ee6a4130f0506500"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r8, 0x2000000008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.224771383s ago: executing program 4 (id=1883): socket$l2tp(0x2, 0x2, 0x73) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff8]}, 0x8, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x1d1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='L', 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.567442402s ago: executing program 3 (id=1884): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/19, 0x13}, 0x3}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 552.23545ms ago: executing program 4 (id=1885): read$char_usb(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c0000008200000008000000000000000004000000000000fc00000000000000f856000076c6478cc499b94db07a0000000067e5aea07845466cf9979e3e307e1b123e61b60e14508158dbf232"], 0x121101) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 133.609134ms ago: executing program 4 (id=1886): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 0s ago: executing program 3 (id=1887): openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) setitimer(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x40200) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r1, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) kernel console output (not intermixed with test programs): 0x0 after dequeue, screwing up backlog [ 1495.327536][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.332887][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.682722][T15927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1497.832202][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1497.832919][T15927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1497.883788][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1497.895407][T15927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1497.939893][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.159726][T15927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1498.221598][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1498.472184][ T5759] net_ratelimit: 9 callbacks suppressed [ 1498.472209][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.474227][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.488214][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.488534][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.488858][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.462896][T15927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.565957][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.566464][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.566884][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.616301][T15927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.634164][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.634390][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.667110][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.667218][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.715287][ T6904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.715400][ T6904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.264606][T15942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1501.294307][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1501.331181][T15942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1501.352651][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1501.379709][T15942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1501.398499][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1501.416162][T15942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1501.426988][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1502.052053][T15942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.237408][ T5767] net_ratelimit: 4 callbacks suppressed [ 1504.237434][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.237651][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.237957][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.238841][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.241212][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.414171][T15942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.422667][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.422985][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.423494][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.428836][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.430730][ T6904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.504958][T15455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.505071][T15455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.587795][T15455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.587908][T15455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.458235][T16232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1506.907476][T15927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.342266][T16278] syz.0.1556 uses obsolete (PF_INET,SOCK_PACKET) [ 1509.352970][ C0] net_ratelimit: 18 callbacks suppressed [ 1509.352989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.379151][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.393198][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.401413][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.434438][ T9546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.445206][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.467413][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.491727][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.892632][T15942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.114162][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.117604][T15942] veth0_vlan: entered promiscuous mode [ 1511.150528][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.247986][T15942] veth1_vlan: entered promiscuous mode [ 1511.347171][T15927] veth0_vlan: entered promiscuous mode [ 1512.657831][T15927] veth1_vlan: entered promiscuous mode [ 1512.904217][T15942] veth0_macvtap: entered promiscuous mode [ 1512.999057][T15942] veth1_macvtap: entered promiscuous mode [ 1513.131848][T15927] veth0_macvtap: entered promiscuous mode [ 1513.202644][T15927] veth1_macvtap: entered promiscuous mode [ 1513.236165][T15942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.351440][T15942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.473681][T15927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.501283][ T5759] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1513.523672][T15927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.553846][ T6084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.554290][ T9546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.554339][ T9546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.554385][ T9546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.664383][ T5759] usb 10-1: Using ep0 maxpacket: 16 [ 1513.666867][ T5759] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1513.676964][ T5759] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.677001][ T5759] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1513.677049][ T5759] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.723221][ T5759] usb 10-1: config 0 descriptor?? [ 1513.963565][T15454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.964486][T15454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.965481][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.092492][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.092546][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.209970][T15455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.209998][T15455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.306340][ T7299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.369269][ T5759] usbhid 10-1:0.0: can't add hid device: -71 [ 1514.369390][ T5759] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1514.399933][ T5759] usb 10-1: USB disconnect, device number 17 [ 1514.475408][ C0] net_ratelimit: 13 callbacks suppressed [ 1514.475432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.571464][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.572422][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.672045][ T7299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.672069][ T7299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.711280][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.717743][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.805279][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.190532][T15454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.190551][T15454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.592359][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.752344][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.752440][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.890700][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.019893][T16334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1519.686877][ T9661] net_ratelimit: 8 callbacks suppressed [ 1519.686902][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.818596][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.818650][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.818741][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.818909][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.819554][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.820686][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.822547][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.890763][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.049529][T16361] FAULT_INJECTION: forcing a failure. [ 1520.049529][T16361] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.049574][T16361] CPU: 0 UID: 0 PID: 16361 Comm: syz.2.1571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.049612][T16361] Tainted: [L]=SOFTLOCKUP [ 1520.049623][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1520.049641][T16361] Call Trace: [ 1520.049653][T16361] [ 1520.049665][T16361] dump_stack_lvl+0xe8/0x150 [ 1520.049712][T16361] should_fail_ex+0x410/0x560 [ 1520.049755][T16361] should_failslab+0xa8/0x100 [ 1520.049797][T16361] __kmalloc_noprof+0xfe/0x720 [ 1520.049826][T16361] ? __pfx_rfcomm_dlc_timeout+0x10/0x10 [ 1520.049872][T16361] ? sk_prot_alloc+0xe7/0x210 [ 1520.049912][T16361] ? sk_prot_alloc+0xe7/0x210 [ 1520.049961][T16361] sk_prot_alloc+0xe7/0x210 [ 1520.050000][T16361] ? sk_alloc+0x27/0x390 [ 1520.050045][T16361] sk_alloc+0x3a/0x390 [ 1520.050091][T16361] bt_sock_alloc+0x3b/0x330 [ 1520.050132][T16361] rfcomm_sock_alloc+0x4c/0x230 [ 1520.050175][T16361] rfcomm_sock_create+0xc2/0x320 [ 1520.050209][T16361] bt_sock_create+0x163/0x240 [ 1520.050256][T16361] __sock_create+0x4b3/0x9d0 [ 1520.050302][T16361] __sys_socket+0xd6/0x1b0 [ 1520.050342][T16361] __x64_sys_socket+0x7a/0x90 [ 1520.050379][T16361] do_syscall_64+0x166/0x520 [ 1520.050420][T16361] ? trace_irq_disable+0x3b/0x140 [ 1520.050451][T16361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.050489][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.050518][T16361] RIP: 0033:0x7f30a339e159 [ 1520.050543][T16361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.050568][T16361] RSP: 002b:00007f30a41c9fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1520.050598][T16361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f30a339e159 [ 1520.050619][T16361] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000001f [ 1520.050637][T16361] RBP: 00007f30a343506b R08: 0000000000000000 R09: 0000000000000000 [ 1520.050656][T16361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.050674][T16361] R13: 00007f30a3626038 R14: 00007f30a3625fa0 R15: 00007ffd67005c18 [ 1520.050717][T16361] [ 1520.250272][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.289815][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 1521.289842][ T31] audit: type=1800 audit(1790601479.568:64): pid=16367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1573" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 1521.911657][T14638] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1522.051115][ T9571] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1522.063602][T14638] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1522.065190][T14638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.065230][T14638] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1522.075791][T14638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.075820][T14638] usb 4-1: Product: syz [ 1522.075840][T14638] usb 4-1: Manufacturer: syz [ 1522.075859][T14638] usb 4-1: SerialNumber: syz [ 1522.091131][T14638] usb 4-1: config 0 descriptor?? [ 1522.108442][T14638] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1522.125328][T14638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1522.132794][T14638] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1522.132849][T14638] usb 4-1: media controller created [ 1522.196676][T14638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1522.242315][ T9571] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1522.243867][ T9571] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.243897][ T9571] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1522.243942][ T9571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.317642][ T9571] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1522.358742][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.370953][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.432844][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.434844][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.577561][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.608907][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.652277][T14638] DVB: Unable to find symbol tda10046_attach() [ 1522.652296][T14638] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1522.652313][T14638] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1522.666577][T14638] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1522.683128][T14638] usb 4-1: USB disconnect, device number 7 [ 1523.671299][T16397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1524.255183][T16406] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1524.255217][T16406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1524.278752][T16406] vhci_hcd vhci_hcd.0: Device attached [ 1525.522733][T10277] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1525.528212][ T7325] net_ratelimit: 14 callbacks suppressed [ 1525.528233][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.528569][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.528800][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.540214][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.540911][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.546824][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.547191][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.899056][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.902798][ T6904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.909669][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.928208][ T5745] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1525.987676][T10277] usb 9-1: USB disconnect, device number 7 [ 1526.001601][ T7325] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 1526.230301][T10277] usb 5-1: USB disconnect, device number 8 [ 1526.253613][T10277] idmouse 5-1:1.0: disconnected [ 1527.171673][ T7325] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1527.180010][ T7325] usb 3-1: config 0 has no interfaces? [ 1527.180050][ T7325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.186706][ T7325] usb 3-1: config 0 descriptor?? [ 1527.382344][ T7325] usb 3-1: USB disconnect, device number 15 [ 1527.388910][T16408] vhci_hcd: connection reset by peer [ 1527.419297][ T6904] vhci_hcd vhci_hcd.2: stop threads [ 1527.419722][ T6904] vhci_hcd vhci_hcd.2: release socket [ 1527.439863][ T6904] vhci_hcd vhci_hcd.2: disconnect device [ 1527.539359][T16425] FAULT_INJECTION: forcing a failure. [ 1527.539359][T16425] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.539404][T16425] CPU: 1 UID: 0 PID: 16425 Comm: syz.0.1586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1527.539441][T16425] Tainted: [L]=SOFTLOCKUP [ 1527.539452][T16425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1527.539469][T16425] Call Trace: [ 1527.539480][T16425] [ 1527.539492][T16425] dump_stack_lvl+0xe8/0x150 [ 1527.539539][T16425] should_fail_ex+0x410/0x560 [ 1527.539580][T16425] should_failslab+0xa8/0x100 [ 1527.539625][T16425] __kmalloc_cache_noprof+0xa3/0x600 [ 1527.539656][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.539692][T16425] ? iommu_fwspec_init+0x302/0x470 [ 1527.539730][T16425] ? iommu_fwspec_init+0x302/0x470 [ 1527.539769][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.539809][T16425] iommu_fwspec_init+0x302/0x470 [ 1527.539854][T16425] iommu_mock_device_add+0x56/0x1e0 [ 1527.539898][T16425] iommufd_test+0x38d2/0x6360 [ 1527.539955][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.539988][T16425] ? __lock_acquire+0x747/0x2de0 [ 1527.540019][T16425] ? __pfx_iommufd_test+0x10/0x10 [ 1527.540075][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.540111][T16425] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1527.540149][T16425] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1527.540191][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.540224][T16425] ? lock_acquire+0x115/0x350 [ 1527.540255][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.540300][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.540349][T16425] iommufd_fops_ioctl+0x465/0x600 [ 1527.540390][T16425] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1527.540430][T16425] ? __fget_files+0x2a/0x420 [ 1527.540480][T16425] ? __fget_files+0x2a/0x420 [ 1527.540525][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.540558][T16425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1527.540592][T16425] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1527.540626][T16425] __se_sys_ioctl+0xfc/0x170 [ 1527.540662][T16425] do_syscall_64+0x166/0x520 [ 1527.540703][T16425] ? trace_irq_disable+0x3b/0x140 [ 1527.540733][T16425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.540769][T16425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.540798][T16425] RIP: 0033:0x7f9e0379e159 [ 1527.540824][T16425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.540847][T16425] RSP: 002b:00007f9e046c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1527.540877][T16425] RAX: ffffffffffffffda RBX: 00007f9e03a25fa0 RCX: 00007f9e0379e159 [ 1527.540898][T16425] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1527.540917][T16425] RBP: 00007f9e0383506b R08: 0000000000000000 R09: 0000000000000000 [ 1527.540935][T16425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1527.540952][T16425] R13: 00007f9e03a26038 R14: 00007f9e03a25fa0 R15: 00007ffe492351f8 [ 1527.540995][T16425] [ 1531.023148][ T5745] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1531.164602][ T7299] net_ratelimit: 20 callbacks suppressed [ 1531.164626][ T7299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.166035][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.383008][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.386700][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.387041][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.387469][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.458503][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.221655][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.223356][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.234370][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.415244][T16458] binder: 16454:16458 ioctl c0306201 200000000080 returned -14 [ 1532.641084][T14638] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1532.792821][T14638] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1532.794174][T14638] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.794221][T14638] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1532.847669][T14638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.847701][T14638] usb 6-1: Product: syz [ 1532.847721][T14638] usb 6-1: Manufacturer: syz [ 1532.847739][T14638] usb 6-1: SerialNumber: syz [ 1533.759101][T14638] usb 6-1: config 0 descriptor?? [ 1533.775167][T14638] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1533.790030][T14638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1533.801053][T14638] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1533.801111][T14638] usb 6-1: media controller created [ 1533.833687][T14638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1534.028330][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.059157][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.078897][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.081248][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.112982][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.113469][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.182201][T14638] DVB: Unable to find symbol tda10046_attach() [ 1534.182224][T14638] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1534.182242][T14638] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1534.220221][T14638] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1534.239157][T14638] usb 6-1: USB disconnect, device number 11 [ 1538.476623][ T5767] net_ratelimit: 25 callbacks suppressed [ 1538.476650][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.496033][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.738985][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.739861][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.739974][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.743687][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.765558][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.765817][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.765938][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.078775][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.902584][T16504] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1541.902616][T16504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1541.903356][T16504] vhci_hcd vhci_hcd.0: Device attached [ 1541.973442][ T1143] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.182267][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1542.198591][ T1143] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.223607][ T7325] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1542.507208][ T31] audit: type=1800 audit(1790601501.498:65): pid=16525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1610" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 1543.317317][ T1143] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.381293][ T7325] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1543.391037][ T7325] usb 6-1: config 0 has no interfaces? [ 1543.391078][ T7325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.424017][ T7325] usb 6-1: config 0 descriptor?? [ 1543.787027][ T7325] usb 6-1: USB disconnect, device number 12 [ 1543.807276][T16505] vhci_hcd: connection closed [ 1543.820471][ T1171] vhci_hcd vhci_hcd.5: stop threads [ 1543.820502][ T1171] vhci_hcd vhci_hcd.5: release socket [ 1543.820619][ T1171] vhci_hcd vhci_hcd.5: disconnect device [ 1543.831239][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1543.995971][ T1143] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.155110][ T5767] net_ratelimit: 18 callbacks suppressed [ 1544.155135][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.155341][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.262426][T16541] FAULT_INJECTION: forcing a failure. [ 1544.262426][T16541] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.262469][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.3.1615 Tainted: G L syzkaller #0 PREEMPT(full) [ 1544.262506][T16541] Tainted: [L]=SOFTLOCKUP [ 1544.262516][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1544.262534][T16541] Call Trace: [ 1544.262545][T16541] [ 1544.262557][T16541] dump_stack_lvl+0xe8/0x150 [ 1544.262603][T16541] should_fail_ex+0x410/0x560 [ 1544.262644][T16541] should_failslab+0xa8/0x100 [ 1544.262684][T16541] __kmalloc_cache_noprof+0xa3/0x600 [ 1544.262714][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.262750][T16541] ? iommu_fwspec_init+0x302/0x470 [ 1544.262787][T16541] ? iommu_fwspec_init+0x302/0x470 [ 1544.262827][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.262866][T16541] iommu_fwspec_init+0x302/0x470 [ 1544.262916][T16541] iommu_mock_device_add+0x56/0x1e0 [ 1544.262959][T16541] iommufd_test+0x38d2/0x6360 [ 1544.263014][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.263046][T16541] ? __lock_acquire+0x747/0x2de0 [ 1544.263078][T16541] ? __pfx_iommufd_test+0x10/0x10 [ 1544.263132][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.263171][T16541] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1544.263208][T16541] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1544.263251][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.263285][T16541] ? lock_acquire+0x115/0x350 [ 1544.263317][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.263361][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.263409][T16541] iommufd_fops_ioctl+0x465/0x600 [ 1544.263450][T16541] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1544.263489][T16541] ? __fget_files+0x2a/0x420 [ 1544.263539][T16541] ? __fget_files+0x2a/0x420 [ 1544.263583][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.263615][T16541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.263649][T16541] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1544.263683][T16541] __se_sys_ioctl+0xfc/0x170 [ 1544.263720][T16541] do_syscall_64+0x166/0x520 [ 1544.263759][T16541] ? trace_irq_disable+0x3b/0x140 [ 1544.263791][T16541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.263827][T16541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.263856][T16541] RIP: 0033:0x7f94fef9e159 [ 1544.263880][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.263905][T16541] RSP: 002b:00007f94ffd92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.263934][T16541] RAX: ffffffffffffffda RBX: 00007f94ff225fa0 RCX: 00007f94fef9e159 [ 1544.263954][T16541] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1544.263974][T16541] RBP: 00007f94ff03506b R08: 0000000000000000 R09: 0000000000000000 [ 1544.263993][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.264009][T16541] R13: 00007f94ff226038 R14: 00007f94ff225fa0 R15: 00007ffda2c8b3e8 [ 1544.264053][T16541] [ 1544.565605][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.565781][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.611573][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.611779][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.613713][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.711429][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.833055][ T1143] bridge_slave_1: left allmulticast mode [ 1544.833090][ T1143] bridge_slave_1: left promiscuous mode [ 1544.833385][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.882535][ T1143] bridge_slave_0: left allmulticast mode [ 1544.882570][ T1143] bridge_slave_0: left promiscuous mode [ 1544.882831][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.196592][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.472470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.583236][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.903522][T16589] FAULT_INJECTION: forcing a failure. [ 1548.903522][T16589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1548.903568][T16589] CPU: 0 UID: 0 PID: 16589 Comm: syz.3.1625 Tainted: G L syzkaller #0 PREEMPT(full) [ 1548.903605][T16589] Tainted: [L]=SOFTLOCKUP [ 1548.903616][T16589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1548.903634][T16589] Call Trace: [ 1548.903645][T16589] [ 1548.903656][T16589] dump_stack_lvl+0xe8/0x150 [ 1548.903703][T16589] should_fail_ex+0x410/0x560 [ 1548.903754][T16589] prepare_alloc_pages+0x223/0x600 [ 1548.903796][T16589] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1548.903837][T16589] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1548.903878][T16589] ? __pfx_policy_nodemask+0x10/0x10 [ 1548.903918][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.903952][T16589] ? __lock_acquire+0x747/0x2de0 [ 1548.903991][T16589] alloc_pages_mpol+0x21e/0x390 [ 1548.904037][T16589] alloc_pages_noprof+0xb1/0x2b0 [ 1548.904079][T16589] pte_alloc_one+0x22/0x370 [ 1548.904118][T16589] __pte_alloc+0x25/0x1a0 [ 1548.904154][T16589] do_pte_missing+0x2db7/0x34b0 [ 1548.904183][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.904227][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.904260][T16589] ? do_raw_spin_unlock+0xf5/0x200 [ 1548.904309][T16589] ? __pmd_alloc+0x40a/0x5c0 [ 1548.904354][T16589] handle_mm_fault+0x1a53/0x3750 [ 1548.904395][T16589] ? mt_find+0x186/0x630 [ 1548.904449][T16589] ? handle_mm_fault+0xf1/0x3750 [ 1548.904503][T16589] ? __pfx_handle_mm_fault+0x10/0x10 [ 1548.904558][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.904598][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.904642][T16589] __get_user_pages+0x1675/0x2750 [ 1548.904726][T16589] get_user_pages_remote+0x307/0xb10 [ 1548.904782][T16589] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1548.904826][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.904860][T16589] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 1548.904903][T16589] copy_string_kernel+0x2f9/0x5f0 [ 1548.904962][T16589] ? __pfx_copy_string_kernel+0x10/0x10 [ 1548.905004][T16589] ? do_raw_spin_unlock+0xf5/0x200 [ 1548.905051][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.905084][T16589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.905122][T16589] do_execveat_common+0x373/0x670 [ 1548.905163][T16589] __x64_sys_execve+0x97/0xc0 [ 1548.905194][T16589] do_syscall_64+0x166/0x520 [ 1548.905233][T16589] ? trace_irq_disable+0x3b/0x140 [ 1548.905264][T16589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.905300][T16589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.905328][T16589] RIP: 0033:0x7f94fef9e159 [ 1548.905352][T16589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.905375][T16589] RSP: 002b:00007f94ffd92028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1548.905404][T16589] RAX: ffffffffffffffda RBX: 00007f94ff225fa0 RCX: 00007f94fef9e159 [ 1548.905426][T16589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1548.905444][T16589] RBP: 00007f94ff03506b R08: 0000000000000000 R09: 0000000000000000 [ 1548.905462][T16589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.905479][T16589] R13: 00007f94ff226038 R14: 00007f94ff225fa0 R15: 00007ffda2c8b3e8 [ 1548.905521][T16589] [ 1549.001879][T16592] trusted_key: encrypted_key: insufficient parameters specified [ 1549.007492][T16592] Could not find key with description: [syz] [ 1549.007509][T16592] process_request_key_err: No key [ 1549.007521][T16592] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1549.007536][T16592] One or more global auth toks could not properly register; rc = [-2] [ 1549.007644][T16592] Error validating options; rc = [-2] [ 1549.266072][T16594] net_ratelimit: 13 callbacks suppressed [ 1549.266094][T16594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.314742][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.326083][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.366341][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.572368][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.628609][ T1143] bond0 (unregistering): Released all slaves [ 1550.157645][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.158093][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.243361][T16600] jffs2: notice: (16600) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1550.317061][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.402555][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.087003][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.111955][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.112119][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.949296][T16625] comedi comedi0: No hardware detected at I/O base 0x300 [ 1553.976089][ T1143] hsr_slave_0: left promiscuous mode [ 1553.998544][ T1143] hsr_slave_1: left promiscuous mode [ 1553.999669][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.999690][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.053311][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.053341][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.115697][ T1143] veth1_macvtap: left promiscuous mode [ 1554.115743][ T1143] veth0_macvtap: left promiscuous mode [ 1554.115860][ T1143] veth1_vlan: left promiscuous mode [ 1554.125357][ T1143] veth0_vlan: left promiscuous mode [ 1554.462062][ T5767] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1554.612029][ T5767] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1554.614182][ T5767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.621035][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.621061][ T5767] usb 5-1: Product: syz [ 1554.621078][ T5767] usb 5-1: Manufacturer: syz [ 1554.621097][ T5767] usb 5-1: SerialNumber: syz [ 1554.642134][ T9661] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1554.662502][ T5767] usb 5-1: config 0 descriptor?? [ 1554.685554][ T5767] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 1554.694181][T16658] net_ratelimit: 13 callbacks suppressed [ 1554.694199][T16658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.726027][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.726523][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.729390][ T5767] usb 5-1: Direct firmware load for dvb-usb-digivox-02.fw failed with error -2 [ 1554.729421][ T5767] usb 5-1: Falling back to sysfs fallback for: dvb-usb-digivox-02.fw [ 1554.748674][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.792080][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.821474][ T9661] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1554.822946][ T9661] usb 6-1: config 0 has no interfaces? [ 1554.830315][ T9661] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.830345][ T9661] usb 6-1: Product: syz [ 1554.830364][ T9661] usb 6-1: Manufacturer: syz [ 1554.830383][ T9661] usb 6-1: SerialNumber: syz [ 1554.862421][ T9661] usb 6-1: config 0 descriptor?? [ 1555.224725][T16647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.273551][T16647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.521839][T16647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.530512][T16647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.581321][T16647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.581832][T16647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.777337][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.778179][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.780540][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.815011][T15455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.815919][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.935025][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1555.975025][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1556.366405][T16679] jffs2: notice: (16679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1556.549613][ T9] usb 6-1: USB disconnect, device number 13 [ 1558.587663][T16697] trusted_key: encrypted_key: insufficient parameters specified [ 1558.599409][T16697] Could not find key with description: [syz] [ 1558.599427][T16697] process_request_key_err: No key [ 1558.599438][T16697] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1558.599453][T16697] One or more global auth toks could not properly register; rc = [-2] [ 1558.599518][T16697] Error validating options; rc = [-2] [ 1559.251376][T16710] FAULT_INJECTION: forcing a failure. [ 1559.251376][T16710] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1559.251420][T16710] CPU: 0 UID: 0 PID: 16710 Comm: syz.2.1647 Tainted: G L syzkaller #0 PREEMPT(full) [ 1559.251455][T16710] Tainted: [L]=SOFTLOCKUP [ 1559.251467][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1559.251485][T16710] Call Trace: [ 1559.251496][T16710] [ 1559.251508][T16710] dump_stack_lvl+0xe8/0x150 [ 1559.251555][T16710] should_fail_ex+0x410/0x560 [ 1559.251595][T16710] get_futex_key+0x1b4/0x1580 [ 1559.251630][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.251663][T16710] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 1559.251708][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.251744][T16710] ? __pfx_get_futex_key+0x10/0x10 [ 1559.251778][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.251811][T16710] ? trace_event_buffer_commit+0x258/0x7a0 [ 1559.251863][T16710] futex_wait_setup+0x4a/0x590 [ 1559.251898][T16710] ? __futex_wait+0xdf/0x400 [ 1559.251931][T16710] __futex_wait+0x15f/0x400 [ 1559.251966][T16710] ? __pfx___futex_wait+0x10/0x10 [ 1559.251999][T16710] ? __pfx_futex_wake_mark+0x10/0x10 [ 1559.252050][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.252084][T16710] ? try_to_wake_up+0x8c5/0x14d0 [ 1559.252131][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.252170][T16710] futex_wait+0x121/0x390 [ 1559.252201][T16710] ? __pfx_futex_wait+0x10/0x10 [ 1559.252267][T16710] do_futex+0x3e7/0x4e0 [ 1559.252318][T16710] ? __pfx_do_futex+0x10/0x10 [ 1559.252367][T16710] __se_sys_futex+0x3a8/0x450 [ 1559.252412][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.252447][T16710] ? __pfx___se_sys_futex+0x10/0x10 [ 1559.252486][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.252519][T16710] ? kmem_cache_free+0x182/0x650 [ 1559.252558][T16710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1559.252591][T16710] ? __x64_sys_futex+0x21/0xf0 [ 1559.252634][T16710] do_syscall_64+0x166/0x520 [ 1559.252674][T16710] ? trace_irq_disable+0x3b/0x140 [ 1559.252704][T16710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.252739][T16710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.252767][T16710] RIP: 0033:0x7f30a339e159 [ 1559.252792][T16710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.252816][T16710] RSP: 002b:00007f30a41ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1559.252844][T16710] RAX: ffffffffffffffda RBX: 00007f30a3625fa8 RCX: 00007f30a339e159 [ 1559.252866][T16710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30a3625fa8 [ 1559.252884][T16710] RBP: 00007f30a3625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1559.252903][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.252920][T16710] R13: 00007f30a3626038 R14: 00007ffd67005b30 R15: 00007ffd67005c18 [ 1559.252961][T16710] [ 1559.752395][T16711] comedi comedi0: No hardware detected at I/O base 0x300 [ 1559.916059][T14638] net_ratelimit: 16 callbacks suppressed [ 1559.916086][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.560041][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.333508][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.333900][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.333987][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.375473][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.432450][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.432584][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.432860][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.457917][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.561925][ T9] net_ratelimit: 7 callbacks suppressed [ 1565.561998][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.562698][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.726116][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.762372][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.775634][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.791039][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.006156][T16752] jffs2: notice: (16752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1566.110616][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 1566.255748][T16759] binder: 16758:16759 ioctl c0306201 200000000080 returned -14 [ 1566.791525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.791763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.791979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.792232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.911670][T16789] comedi comedi0: No hardware detected at I/O base 0x300 [ 1571.122016][ T5766] net_ratelimit: 228 callbacks suppressed [ 1571.122044][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.122259][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.184580][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.080377][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.202660][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.202894][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.232747][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.446199][T16822] jffs2: notice: (16822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1572.519444][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.548395][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.548802][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.145750][T16842] net_ratelimit: 27 callbacks suppressed [ 1576.145780][T16842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.251802][T14638] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1576.350490][T16854] FAULT_INJECTION: forcing a failure. [ 1576.350490][T16854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1576.350538][T16854] CPU: 1 UID: 0 PID: 16854 Comm: syz.4.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 1576.350576][T16854] Tainted: [L]=SOFTLOCKUP [ 1576.350588][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1576.350606][T16854] Call Trace: [ 1576.350617][T16854] [ 1576.350630][T16854] dump_stack_lvl+0xe8/0x150 [ 1576.350681][T16854] should_fail_ex+0x410/0x560 [ 1576.350723][T16854] strncpy_from_user+0x36/0x2c0 [ 1576.350763][T16854] __se_sys_add_key+0xdb/0x420 [ 1576.350797][T16854] ? __pfx___se_sys_add_key+0x10/0x10 [ 1576.350828][T16854] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1576.350870][T16854] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1576.350903][T16854] ? __x64_sys_add_key+0x20/0xc0 [ 1576.350934][T16854] do_syscall_64+0x166/0x520 [ 1576.350975][T16854] ? trace_irq_disable+0x3b/0x140 [ 1576.351007][T16854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.351048][T16854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.351077][T16854] RIP: 0033:0x7f454c19e159 [ 1576.351102][T16854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.351127][T16854] RSP: 002b:00007f454cfba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1576.351157][T16854] RAX: ffffffffffffffda RBX: 00007f454c425fa0 RCX: 00007f454c19e159 [ 1576.351180][T16854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.351197][T16854] RBP: 00007f454c23506b R08: ffffffffffffffff R09: 0000000000000000 [ 1576.351217][T16854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1576.351234][T16854] R13: 00007f454c426038 R14: 00007f454c425fa0 R15: 00007ffc859924d8 [ 1576.351276][T16854] [ 1576.414605][T14638] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1576.416859][T14638] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1576.416891][T14638] usb 6-1: config 1 has no interface number 0 [ 1576.416939][T14638] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1576.416974][T14638] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1576.417009][T14638] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.425726][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.427424][T14638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.427454][T14638] usb 6-1: Product: syz [ 1576.427473][T14638] usb 6-1: Manufacturer: syz [ 1576.427492][T14638] usb 6-1: SerialNumber: syz [ 1576.458663][T16848] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1576.826873][T16863] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1576.894827][T16861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 1577.892814][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.919587][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.146184][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.146851][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.414052][T14638] usb 6-1: Incompatible driver and firmware versions [ 1578.442690][T14638] usb 6-1: USB disconnect, device number 14 [ 1578.555469][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.180745][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.181184][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.181436][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.882887][ T31] audit: type=1800 audit(1790601538.938:66): pid=16883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1691" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 1580.224431][T16890] jffs2: notice: (16890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1580.368806][T16895] tipc: Started in network mode [ 1580.368846][T16895] tipc: Node identity 363474a787fc, cluster identity 4711 [ 1580.369009][T16895] tipc: Enabled bearer , priority 0 [ 1580.409840][T16895] tipc: Resetting bearer [ 1580.443235][T16894] tipc: Disabling bearer [ 1581.811518][T15108] net_ratelimit: 15 callbacks suppressed [ 1581.811551][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.843769][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.845418][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.290574][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.291395][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.291561][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.317349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.894414][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.895340][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.895491][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.954471][T15108] net_ratelimit: 17 callbacks suppressed [ 1586.954506][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.991554][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.992066][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.402198][T16954] jffs2: notice: (16954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1588.022718][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.255992][ T9904] Bluetooth: hci7: command 0x0406 tx timeout [ 1588.701124][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.513786][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.514048][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.514681][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.514829][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.520311][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.715604][T16987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.764023][ T31] audit: type=1800 audit(1790601548.808:67): pid=16989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1716" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 1590.039689][T16994] FAULT_INJECTION: forcing a failure. [ 1590.039689][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.039743][T16994] CPU: 0 UID: 0 PID: 16994 Comm: syz.5.1718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1590.039781][T16994] Tainted: [L]=SOFTLOCKUP [ 1590.039793][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1590.039811][T16994] Call Trace: [ 1590.039823][T16994] [ 1590.039835][T16994] dump_stack_lvl+0xe8/0x150 [ 1590.039886][T16994] should_fail_ex+0x410/0x560 [ 1590.039929][T16994] should_failslab+0xa8/0x100 [ 1590.039972][T16994] __kmalloc_cache_noprof+0xa3/0x600 [ 1590.040007][T16994] ? nf_tables_commit+0x906/0xad60 [ 1590.040048][T16994] ? nf_tables_commit+0x906/0xad60 [ 1590.040096][T16994] nf_tables_commit+0x906/0xad60 [ 1590.040145][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040179][T16994] ? nf_tables_register_hook+0x88/0x200 [ 1590.040227][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040281][T16994] ? __pfx_nf_tables_commit+0x10/0x10 [ 1590.040350][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040389][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040422][T16994] ? lock_acquire+0x115/0x350 [ 1590.040463][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040520][T16994] nfnetlink_rcv+0x1caf/0x28c0 [ 1590.040606][T16994] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1590.040669][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040702][T16994] ? ref_tracker_free+0x689/0x830 [ 1590.040776][T16994] ? skb_clone+0x246/0x3a0 [ 1590.040826][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040861][T16994] ? __netlink_deliver_tap+0x811/0x860 [ 1590.040898][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.040935][T16994] ? netlink_deliver_tap+0x2e/0x1b0 [ 1590.040965][T16994] ? netlink_deliver_tap+0x2e/0x1b0 [ 1590.041002][T16994] netlink_unicast+0x7bd/0x940 [ 1590.041061][T16994] netlink_sendmsg+0x813/0xb40 [ 1590.041099][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.041128][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041155][T16994] ? apparmor_socket_sendmsg+0x98/0x360 [ 1590.041191][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041221][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.041242][T16994] sock_sendmsg_nosec+0x13a/0x180 [ 1590.041269][T16994] ____sys_sendmsg+0x54e/0x850 [ 1590.041306][T16994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1590.041339][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041368][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041392][T16994] ? import_iovec+0x73/0xa0 [ 1590.041425][T16994] ___sys_sendmsg+0x2a5/0x360 [ 1590.041454][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041478][T16994] ? __lock_acquire+0x747/0x2de0 [ 1590.041508][T16994] ? __pfx____sys_sendmsg+0x10/0x10 [ 1590.041543][T16994] ? futex_wait+0x2a2/0x390 [ 1590.041592][T16994] ? __fget_files+0x2a/0x420 [ 1590.041621][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041645][T16994] ? __fget_files+0x3a2/0x420 [ 1590.041686][T16994] __x64_sys_sendmsg+0x1b1/0x290 [ 1590.041716][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041743][T16994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1590.041782][T16994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1590.041817][T16994] do_syscall_64+0x166/0x520 [ 1590.041847][T16994] ? trace_irq_disable+0x3b/0x140 [ 1590.041869][T16994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.041896][T16994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.041917][T16994] RIP: 0033:0x7f1948f9e159 [ 1590.041936][T16994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.041955][T16994] RSP: 002b:00007f1949f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1590.041977][T16994] RAX: ffffffffffffffda RBX: 00007f1949225fa0 RCX: 00007f1948f9e159 [ 1590.041993][T16994] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1590.042008][T16994] RBP: 00007f194903506b R08: 0000000000000000 R09: 0000000000000000 [ 1590.042022][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.042035][T16994] R13: 00007f1949226038 R14: 00007f1949225fa0 R15: 00007fff6befa508 [ 1590.042078][T16994] [ 1590.522972][ T1143] IPVS: starting estimator thread 0... [ 1590.613819][T16999] IPVS: using max 30 ests per chain, 72000 per kthread [ 1590.734576][T17002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1592.169386][T17026] jffs2: notice: (17026) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1592.245244][T17026] input: syz0 as /devices/virtual/input/input16 [ 1592.551723][ T9] net_ratelimit: 13 callbacks suppressed [ 1592.551754][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.551897][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.552019][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.552280][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.624434][ T9904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1592.628315][ T9904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1592.638747][ T9904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1592.652633][ T9904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1592.669314][ T9904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1592.821269][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.821812][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.822116][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.995884][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.996063][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.996205][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.056292][T17050] syzkaller0: entered promiscuous mode [ 1594.056316][T17050] syzkaller0: entered allmulticast mode [ 1594.812580][ T5624] Bluetooth: hci3: command tx timeout [ 1596.876448][ T5624] Bluetooth: hci3: command tx timeout [ 1597.225813][ T9904] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1597.229482][ T9904] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1597.230276][ T9904] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1597.242948][ T9904] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1597.250419][ T9904] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1597.440051][T17065] comedi comedi0: No hardware detected at I/O base 0x300 [ 1597.825073][ T5766] net_ratelimit: 8 callbacks suppressed [ 1597.825102][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.825428][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.827971][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.071528][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.877917][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.878815][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.878985][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.951903][ T5624] Bluetooth: hci3: command tx timeout [ 1598.960249][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.977689][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.154295][ T1154] Bluetooth: (null): Invalid header checksum [ 1599.360322][ T5624] Bluetooth: hci8: command tx timeout [ 1599.362938][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.556154][ T5624] Bluetooth: hci3: command tx timeout [ 1601.556211][ T5624] Bluetooth: hci8: command tx timeout [ 1602.935180][ T5766] net_ratelimit: 13 callbacks suppressed [ 1602.935215][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.935740][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.947079][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.591393][ T9904] Bluetooth: hci8: command tx timeout [ 1604.933468][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.939979][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.940355][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.940716][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.561244][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.561425][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.671164][ T9904] Bluetooth: hci8: command tx timeout [ 1605.728118][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.728286][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.728460][T17035] bridge_slave_0: entered allmulticast mode [ 1605.735532][T17035] bridge_slave_0: entered promiscuous mode [ 1605.847228][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.847353][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.847526][T17035] bridge_slave_1: entered allmulticast mode [ 1605.877360][T17035] bridge_slave_1: entered promiscuous mode [ 1605.994485][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.024365][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1606.042403][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1606.058631][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1606.071276][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1606.092532][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1606.644856][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.026413][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.094421][ T59] IPVS: starting estimator thread 0... [ 1607.120630][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.191335][T17139] IPVS: using max 27 ests per chain, 64800 per kthread [ 1607.621074][T17035] team0: Port device team_slave_0 added [ 1607.647455][T17035] team0: Port device team_slave_1 added [ 1607.992003][ T9661] net_ratelimit: 9 callbacks suppressed [ 1607.992037][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.033127][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.034127][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.034374][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.086423][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.086916][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.118448][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.231327][ T5624] Bluetooth: hci9: command tx timeout [ 1608.252804][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.252827][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.252864][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.551588][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.551866][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.632997][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.633277][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.103768][T17035] hsr_slave_0: entered promiscuous mode [ 1609.108058][T17035] hsr_slave_1: entered promiscuous mode [ 1609.117663][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.117955][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.313711][ T5624] Bluetooth: hci9: command tx timeout [ 1611.561751][T17197] comedi comedi0: No hardware detected at I/O base 0x300 [ 1612.867053][ T5624] Bluetooth: hci9: command tx timeout [ 1613.429480][T17066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.429592][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.429794][T17066] bridge_slave_0: entered allmulticast mode [ 1613.456466][T17066] bridge_slave_0: entered promiscuous mode [ 1613.604531][T17066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.604636][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.604829][T17066] bridge_slave_1: entered allmulticast mode [ 1613.623855][T17066] bridge_slave_1: entered promiscuous mode [ 1613.683755][ T6084] net_ratelimit: 17 callbacks suppressed [ 1613.683784][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.924016][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.982416][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.982689][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.128212][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.385510][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.707362][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.711206][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.711376][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.872760][ T5624] Bluetooth: hci9: command tx timeout [ 1614.952006][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.067075][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.067275][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.452443][T10277] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1615.609328][T10277] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 1615.630046][T10277] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.630076][T10277] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1615.648518][T10277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1615.648549][T10277] usb 6-1: SerialNumber: syz [ 1615.794672][T17066] team0: Port device team_slave_0 added [ 1615.940287][ T31] audit: type=1800 audit(1790601574.988:68): pid=17227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1761" name="syzkaller0" dev="sda1" ino=2052 res=0 errno=0 [ 1616.496376][T17066] team0: Port device team_slave_1 added [ 1616.969243][ T5767] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1617.012392][ T5767] usb 5-1: USB disconnect, device number 9 [ 1617.274851][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.274878][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.274910][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.358057][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.358081][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.358117][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.593963][ T9] usb 6-1: USB disconnect, device number 15 [ 1618.494852][T17066] hsr_slave_0: entered promiscuous mode [ 1618.515117][T17066] hsr_slave_1: entered promiscuous mode [ 1618.522991][T17066] debugfs: 'hsr0' already exists in 'hsr' [ 1618.523020][T17066] Cannot create hsr debugfs directory [ 1618.795837][ T1143] net_ratelimit: 19 callbacks suppressed [ 1618.795859][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.523821][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.529454][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.674618][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.202180][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.202312][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.202549][T17133] bridge_slave_0: entered allmulticast mode [ 1620.232144][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.252480][T17133] bridge_slave_0: entered promiscuous mode [ 1620.266884][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.267103][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.267334][T17133] bridge_slave_1: entered allmulticast mode [ 1620.269807][T17133] bridge_slave_1: entered promiscuous mode [ 1620.304213][T17260] syz_tun: entered allmulticast mode [ 1620.576415][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.576605][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.723989][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.793759][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.794031][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.567298][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.651586][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.831922][ T9] net_ratelimit: 6 callbacks suppressed [ 1623.831962][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.832256][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.081775][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.082065][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.121297][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.680132][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.709111][T17133] team0: Port device team_slave_0 added [ 1625.726599][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.726805][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.761967][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.771614][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.866582][ T9571] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1625.936057][T17133] team0: Port device team_slave_1 added [ 1626.018260][ T9571] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1626.025588][ T9571] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.025633][ T9571] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1626.056447][ T9571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.056483][ T9571] usb 6-1: Product: syz [ 1626.056502][ T9571] usb 6-1: Manufacturer: syz [ 1626.056522][ T9571] usb 6-1: SerialNumber: syz [ 1626.075908][ T9571] usb 6-1: config 0 descriptor?? [ 1626.117193][ T9571] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1626.215131][ T9571] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1626.217217][ T9571] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1626.217263][ T9571] usb 6-1: media controller created [ 1626.329086][ T9571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1626.367052][T17282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.367472][T17282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.466737][T17282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.467235][T17282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.537133][T17282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.564888][T17282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.729710][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.729729][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.729755][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.770059][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.770082][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.770116][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.931204][T17035] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1626.999646][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1627.018520][T17035] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1627.078296][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1627.165831][ T9571] DVB: Unable to find symbol tda10046_attach() [ 1627.165861][ T9571] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1627.165882][ T9571] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1627.169864][ T9571] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1627.182630][ T9571] usb 6-1: USB disconnect, device number 16 [ 1627.335864][T17035] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1627.398826][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1627.413105][T17035] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1627.463060][T17035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1629.362328][T17133] hsr_slave_0: entered promiscuous mode [ 1629.363928][T17133] hsr_slave_1: entered promiscuous mode [ 1629.364755][T17133] debugfs: 'hsr0' already exists in 'hsr' [ 1629.364786][T17133] Cannot create hsr debugfs directory [ 1629.373646][ T9516] net_ratelimit: 12 callbacks suppressed [ 1629.373693][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.374280][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.374554][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.433413][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.913701][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.164469][T17310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.198957][T17066] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.233789][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.316802][ T9546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.717033][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.717392][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.682966][T17066] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.284589][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'. [ 1632.498789][T17066] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.680988][T17066] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.801432][ T5767] net_ratelimit: 19 callbacks suppressed [ 1634.801472][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.304120][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.304268][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.304385][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.342186][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.433943][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.434374][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.434526][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.436107][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.460478][T15280] svc: failed to register nfsdv3 RPC service (errno 110). [ 1637.466226][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.875183][T17035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.036194][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.075567][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.075656][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.651083][ T5767] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1638.715730][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.715856][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.818049][ T5767] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1638.841971][ T5767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.842018][ T5767] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1638.872428][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.872466][ T5767] usb 5-1: Product: syz [ 1638.872486][ T5767] usb 5-1: Manufacturer: syz [ 1638.872534][ T5767] usb 5-1: SerialNumber: syz [ 1638.896285][ T5767] usb 5-1: config 0 descriptor?? [ 1638.949156][ T5767] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1638.967749][ T5767] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1638.989234][ T5767] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1638.989307][ T5767] usb 5-1: media controller created [ 1639.214445][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1639.255186][T17373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.255730][T17373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.399062][T17391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1792'. [ 1639.905582][ T5767] DVB: Unable to find symbol tda10046_attach() [ 1639.905607][ T5767] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1639.905629][ T5767] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1639.906358][ T5767] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1639.946189][ T5767] usb 5-1: USB disconnect, device number 10 [ 1640.392020][ T9516] net_ratelimit: 751 callbacks suppressed [ 1640.392047][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.392179][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.392378][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.472860][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.474379][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.553335][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.593314][T17408] binder: 17407:17408 ioctl c0306201 200000000080 returned -14 [ 1641.043531][T17416] fuse: Bad value for 'fd' [ 1641.431738][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.431915][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.432050][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.769217][T17066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1641.833787][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.865969][T17066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1641.867302][T17066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1641.908295][T17066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1641.923665][T17429] FAULT_INJECTION: forcing a failure. [ 1641.923665][T17429] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.923715][T17429] CPU: 1 UID: 0 PID: 17429 Comm: syz.5.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1641.923752][T17429] Tainted: [L]=SOFTLOCKUP [ 1641.923763][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1641.923780][T17429] Call Trace: [ 1641.923791][T17429] [ 1641.923803][T17429] dump_stack_lvl+0xe8/0x150 [ 1641.923862][T17429] should_fail_ex+0x410/0x560 [ 1641.923914][T17429] should_failslab+0xa8/0x100 [ 1641.923967][T17429] __kmalloc_cache_noprof+0xa3/0x600 [ 1641.924008][T17429] ? do_epoll_create+0x75/0x440 [ 1641.924052][T17429] ? do_epoll_create+0x75/0x440 [ 1641.924111][T17429] do_epoll_create+0x75/0x440 [ 1641.924159][T17429] __x64_sys_epoll_create1+0x37/0x40 [ 1641.924196][T17429] do_syscall_64+0x166/0x520 [ 1641.924255][T17429] ? trace_irq_disable+0x3b/0x140 [ 1641.924295][T17429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.924338][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.924372][T17429] RIP: 0033:0x7f1948f9e159 [ 1641.924402][T17429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.924433][T17429] RSP: 002b:00007f1949f39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1641.924468][T17429] RAX: ffffffffffffffda RBX: 00007f1949225fa0 RCX: 00007f1948f9e159 [ 1641.924494][T17429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 1641.924516][T17429] RBP: 00007f194903506b R08: 0000000000000000 R09: 0000000000000000 [ 1641.924538][T17429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.924559][T17429] R13: 00007f1949226038 R14: 00007f1949225fa0 R15: 00007fff6befa508 [ 1641.924606][T17429] [ 1641.935961][T17066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1642.086241][T17066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1642.107224][T17066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1643.170002][T17066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1644.493188][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1645.173836][T15108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1645.341566][T15108] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1645.346932][T15108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.346972][T15108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1645.349845][T15108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.349882][T15108] usb 5-1: Product: syz [ 1645.349906][T15108] usb 5-1: Manufacturer: syz [ 1645.349928][T15108] usb 5-1: SerialNumber: syz [ 1645.408513][T15108] usb 5-1: config 0 descriptor?? [ 1645.429376][ T9516] net_ratelimit: 15 callbacks suppressed [ 1645.429399][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.429532][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.430094][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.465391][T15108] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1645.492249][T15108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1645.493513][T15108] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1645.493575][T15108] usb 5-1: media controller created [ 1645.533364][T15108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1647.593854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.595957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.740893][T15108] DVB: Unable to find symbol tda10046_attach() [ 1647.740917][T15108] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1647.740937][T15108] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1647.744893][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.745050][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.745172][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.745698][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.759095][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.789293][T17066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.091903][T17066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.128598][T17133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1648.288621][T15108] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1648.322821][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1648.330654][T15108] usb 5-1: USB disconnect, device number 11 [ 1648.419935][ T9546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.420061][ T9546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.492511][T17133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1648.595994][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1648.616045][ T9546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.616154][ T9546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.650299][T17133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1648.708282][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.718732][T17133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1648.935855][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1651.019584][ T9] net_ratelimit: 1044 callbacks suppressed [ 1651.019615][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.019774][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.019897][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.069216][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.069360][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.069553][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.671452][T17035] veth0_vlan: entered promiscuous mode [ 1651.783835][T17035] veth1_vlan: entered promiscuous mode [ 1651.939677][T17035] veth0_macvtap: entered promiscuous mode [ 1651.984804][T17035] veth1_macvtap: entered promiscuous mode [ 1652.007336][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.007758][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.085719][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.085885][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.837738][ T9904] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1652.850467][ T9904] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1652.859843][ T9904] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1652.892920][ T9904] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1652.912497][ T9904] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1653.474556][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.568896][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1653.647753][T15454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.647872][T15454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.739384][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.739524][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.000238][T17527] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1654.000279][T17527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1654.000414][T17527] vhci_hcd vhci_hcd.0: Device attached [ 1654.234134][T15108] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1654.271126][ T5767] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1654.403268][T15108] usb 6-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 1654.403490][T15108] usb 6-1: no configurations [ 1654.403511][T15108] usb 6-1: can't read configurations, error -22 [ 1654.594702][T15108] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1654.772841][T15108] usb 6-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 1654.772892][T15108] usb 6-1: no configurations [ 1654.772909][T15108] usb 6-1: can't read configurations, error -22 [ 1654.774335][T15108] usb usb6-port1: attempt power cycle [ 1654.954789][ T5624] Bluetooth: hci10: command tx timeout [ 1655.133974][T15108] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1655.174296][T15108] usb 6-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 1655.174356][T15108] usb 6-1: no configurations [ 1655.174377][T15108] usb 6-1: can't read configurations, error -22 [ 1655.311336][T15108] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1655.406017][T15108] usb 6-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 1655.406068][T15108] usb 6-1: no configurations [ 1655.406083][T15108] usb 6-1: can't read configurations, error -22 [ 1655.408293][T15108] usb usb6-port1: unable to enumerate USB device [ 1656.234659][ T7325] net_ratelimit: 20 callbacks suppressed [ 1656.234680][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.234794][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.841571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.228874][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.229043][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.237270][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.253733][ T5624] Bluetooth: hci10: command tx timeout [ 1658.273519][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.273698][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.274452][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.274781][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.148275][T17529] vhci_hcd: connection reset by peer [ 1659.155709][ T3352] vhci_hcd vhci_hcd.5: stop threads [ 1659.155741][ T3352] vhci_hcd vhci_hcd.5: release socket [ 1659.155926][ T3352] vhci_hcd vhci_hcd.5: disconnect device [ 1659.424557][ T5767] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1659.753124][T17580] netlink: 34 bytes leftover after parsing attributes in process `syz.5.1820'. [ 1660.887371][ T9904] Bluetooth: hci10: command tx timeout [ 1661.690514][T10277] net_ratelimit: 7 callbacks suppressed [ 1661.690545][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.691027][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.691299][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.691627][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.699690][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.939940][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.945203][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.945746][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.978088][T10277] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1662.048177][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1662.068333][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1662.070602][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1662.115119][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1662.116565][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1662.133178][T10277] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1662.149793][T10277] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.149853][T10277] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1662.185930][T10277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.185960][T10277] usb 6-1: Product: syz [ 1662.185977][T10277] usb 6-1: Manufacturer: syz [ 1662.185994][T10277] usb 6-1: SerialNumber: syz [ 1662.312261][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.314779][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.422882][T10277] sisusb 6-1:1.0: Invalid USB2VGA device [ 1662.422923][T10277] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 1662.953173][ T5624] Bluetooth: hci10: command tx timeout [ 1664.153089][ T5624] Bluetooth: hci3: command tx timeout [ 1664.536071][T15455] bridge_slave_1: left allmulticast mode [ 1664.536102][T15455] bridge_slave_1: left promiscuous mode [ 1664.536337][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.592979][T15455] bridge_slave_0: left allmulticast mode [ 1664.593018][T15455] bridge_slave_0: left promiscuous mode [ 1664.612382][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.168017][ T9904] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1665.186754][ T9904] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1665.187824][ T9904] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1665.190132][ T9904] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1665.198497][ T9904] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1665.354821][T15108] usb 6-1: USB disconnect, device number 21 [ 1665.371371][ T7325] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1665.522373][ T7325] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1665.524533][ T7325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.524576][ T7325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1665.524632][ T7325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.638526][ T7325] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1665.741305][T17637] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1665.741342][T17637] Error validating options; rc = [-22] [ 1666.128867][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 1666.165168][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1666.188038][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1666.200593][T15455] bond0 (unregistering): Released all slaves [ 1666.230909][ T5624] Bluetooth: hci3: command tx timeout [ 1666.545358][T15455] hsr_slave_0: left promiscuous mode [ 1666.546700][T15455] hsr_slave_1: left promiscuous mode [ 1666.547761][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.549190][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.566973][T15455] veth1_macvtap: left promiscuous mode [ 1666.567025][T15455] veth0_macvtap: left promiscuous mode [ 1666.567175][T15455] veth1_vlan: left promiscuous mode [ 1666.567259][T15455] veth0_vlan: left promiscuous mode [ 1667.059558][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1667.089963][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1667.121149][ T7325] net_ratelimit: 22 callbacks suppressed [ 1667.121175][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.121373][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.121617][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.438633][ T5624] Bluetooth: hci8: command tx timeout [ 1667.452361][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.752751][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.752960][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.871642][ T9] usb 5-1: USB disconnect, device number 12 [ 1667.908446][ T9] idmouse 5-1:1.0: disconnected [ 1668.073258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.092859][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.100578][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.157631][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.157765][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.344773][ T5624] Bluetooth: hci3: command tx timeout [ 1668.782359][T17511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.782487][T17511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.782674][T17511] bridge_slave_0: entered allmulticast mode [ 1668.792504][T17511] bridge_slave_0: entered promiscuous mode [ 1668.848020][T17511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.848148][T17511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.848383][T17511] bridge_slave_1: entered allmulticast mode [ 1668.851568][T17511] bridge_slave_1: entered promiscuous mode [ 1669.611443][ T5624] Bluetooth: hci8: command tx timeout [ 1671.716465][ T5624] Bluetooth: hci3: command tx timeout [ 1671.716512][ T5624] Bluetooth: hci8: command tx timeout [ 1672.141938][T17511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.266338][T17511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.456617][T17511] team0: Port device team_slave_0 added [ 1672.498094][T17511] team0: Port device team_slave_1 added [ 1672.557109][T10277] net_ratelimit: 10 callbacks suppressed [ 1672.557142][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.559151][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.727428][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.727602][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.786297][T17511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.786325][T17511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.787946][T17511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.791665][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.877869][T17511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.877895][T17511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.877930][T17511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.181487][T17711] FAULT_INJECTION: forcing a failure. [ 1673.181487][T17711] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.181534][T17711] CPU: 1 UID: 0 PID: 17711 Comm: syz.3.1836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.181568][T17711] Tainted: [L]=SOFTLOCKUP [ 1673.181580][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1673.181597][T17711] Call Trace: [ 1673.181608][T17711] [ 1673.181621][T17711] dump_stack_lvl+0xe8/0x150 [ 1673.181681][T17711] should_fail_ex+0x410/0x560 [ 1673.181730][T17711] should_failslab+0xa8/0x100 [ 1673.181782][T17711] ? do_getname+0x2e/0x250 [ 1673.181838][T17711] kmem_cache_alloc_noprof+0xa1/0x600 [ 1673.181871][T17711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.181913][T17711] ? do_futex+0x3e7/0x4e0 [ 1673.181974][T17711] ? do_getname+0x2e/0x250 [ 1673.182031][T17711] do_getname+0x2e/0x250 [ 1673.182076][T17711] ? getname_flags+0x11/0x20 [ 1673.182125][T17711] do_sys_openat2+0xcc/0x200 [ 1673.182179][T17711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.182220][T17711] ? __se_sys_futex+0x3a8/0x450 [ 1673.182270][T17711] ? __pfx_do_sys_openat2+0x10/0x10 [ 1673.182325][T17711] ? rcu_is_watching+0x16/0xb0 [ 1673.182376][T17711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.182424][T17711] __x64_sys_openat+0x138/0x170 [ 1673.182481][T17711] do_syscall_64+0x166/0x520 [ 1673.182544][T17711] ? trace_irq_disable+0x3b/0x140 [ 1673.182589][T17711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.182632][T17711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.182667][T17711] RIP: 0033:0x7f94fef9e159 [ 1673.182696][T17711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.182727][T17711] RSP: 002b:00007f94ffd92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1673.182762][T17711] RAX: ffffffffffffffda RBX: 00007f94ff225fa0 RCX: 00007f94fef9e159 [ 1673.182790][T17711] RDX: 0000000000080801 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1673.182820][T17711] RBP: 00007f94ff03506b R08: 0000000000000000 R09: 0000000000000000 [ 1673.182844][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.182867][T17711] R13: 00007f94ff226038 R14: 00007f94ff225fa0 R15: 00007ffda2c8b3e8 [ 1673.182916][T17711] [ 1673.205555][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.211959][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.217195][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.229451][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.637418][T17511] hsr_slave_0: entered promiscuous mode [ 1673.638597][T17511] hsr_slave_1: entered promiscuous mode [ 1673.751526][ T9904] Bluetooth: hci8: command tx timeout [ 1673.756053][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.969221][T10277] net_ratelimit: 12 callbacks suppressed [ 1678.969253][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.969442][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.969980][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.004418][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.076075][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.076247][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.076375][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.076670][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.079364][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.079479][T17590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.079685][T17590] bridge_slave_0: entered allmulticast mode [ 1679.081568][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.140453][T17590] bridge_slave_0: entered promiscuous mode [ 1679.162960][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.518417][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.518545][T17590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.518772][T17590] bridge_slave_1: entered allmulticast mode [ 1679.523673][T17590] bridge_slave_1: entered promiscuous mode [ 1680.844073][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.847681][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.469913][T17590] team0: Port device team_slave_0 added [ 1681.570393][T17590] team0: Port device team_slave_1 added [ 1682.483913][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.484113][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.484147][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.579146][T17627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.579907][T17627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.580630][T17627] bridge_slave_0: entered allmulticast mode [ 1682.656809][T17627] bridge_slave_0: entered promiscuous mode [ 1685.699317][T14638] net_ratelimit: 22 callbacks suppressed [ 1685.699339][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.699468][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.700205][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.766054][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.771713][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.771952][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.772538][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.777032][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.781477][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.792857][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.793786][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.793805][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.793841][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.909052][T17627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.909194][T17627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.909359][T17627] bridge_slave_1: entered allmulticast mode [ 1685.934079][T17627] bridge_slave_1: entered promiscuous mode [ 1687.527644][T17627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.816303][T17627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.100212][ T9516] net_ratelimit: 11 callbacks suppressed [ 1691.100242][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.100505][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.101228][ T9516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.136205][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.159653][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.614309][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.746495][T17590] hsr_slave_0: entered promiscuous mode [ 1691.749575][T17590] hsr_slave_1: entered promiscuous mode [ 1691.751868][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.752051][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.752199][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.795223][T17590] debugfs: 'hsr0' already exists in 'hsr' [ 1691.795251][T17590] Cannot create hsr debugfs directory [ 1691.921142][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.037005][T17627] team0: Port device team_slave_0 added [ 1692.137515][T17627] team0: Port device team_slave_1 added [ 1694.047200][T17627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.047227][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.047263][T17627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.057285][T17627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.057308][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.057343][T17627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.908887][T17627] hsr_slave_0: entered promiscuous mode [ 1694.913124][T17627] hsr_slave_1: entered promiscuous mode [ 1694.921043][T17627] debugfs: 'hsr0' already exists in 'hsr' [ 1694.921068][T17627] Cannot create hsr debugfs directory [ 1696.378346][ T7325] net_ratelimit: 14 callbacks suppressed [ 1696.378382][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.378547][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.379405][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.874171][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.437452][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.437624][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.437795][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.673144][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.831247][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.837989][T17511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1697.886057][T17511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1697.928701][T17511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1700.129733][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.250556][T15280] svc: failed to register nfsaclv3 RPC service (errno 110). [ 1700.250588][T15280] failed to unregister tcp with rpcbind [ 1700.284570][T17511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1700.285493][T15280] svc: failed to register nfsdv3 RPC service (errno 97). [ 1700.287410][T15280] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1700.287431][T15280] failed to unregister tcp with rpcbind [ 1700.400200][T17511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1700.417134][T17511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1700.573441][T17511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1700.600657][T17511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1700.860068][T15455] bridge_slave_1: left allmulticast mode [ 1700.860103][T15455] bridge_slave_1: left promiscuous mode [ 1700.860370][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.899906][T15455] bridge_slave_0: left allmulticast mode [ 1700.899945][T15455] bridge_slave_0: left promiscuous mode [ 1700.900284][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.989461][T15455] bridge_slave_1: left allmulticast mode [ 1700.989499][T15455] bridge_slave_1: left promiscuous mode [ 1700.989732][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.005265][T15455] bridge_slave_0: left allmulticast mode [ 1701.005315][T15455] bridge_slave_0: left promiscuous mode [ 1701.005573][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.172009][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1701.332271][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1701.333781][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1701.333815][ T9] usb 6-1: config 0 has no interface number 0 [ 1701.338904][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.338943][ T9] usb 6-1: Product: syz [ 1701.338968][ T9] usb 6-1: Manufacturer: syz [ 1701.338991][ T9] usb 6-1: SerialNumber: syz [ 1701.395497][T14638] net_ratelimit: 13 callbacks suppressed [ 1701.395521][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.395769][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.457452][ T9] usb 6-1: config 0 descriptor?? [ 1701.724471][ T9] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1701.766194][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1701.766543][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1701.767229][ T9] usb 6-1: media controller created [ 1701.815201][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1702.049253][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.076922][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.096683][T15455] bond0 (unregistering): Released all slaves [ 1702.312330][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.332538][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.332736][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.615295][ T9] i2c i2c-7: ec100: i2c rd failed=-71 reg=33 [ 1702.638071][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.815262][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.820221][ T9] usb 6-1: USB disconnect, device number 22 [ 1702.891234][ T5766] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1703.191562][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.351791][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.458080][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.513983][ T5766] usb 5-1: Using ep0 maxpacket: 16 [ 1704.414027][ T5766] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1704.543819][ T5766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.545285][ T5766] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1704.547687][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.853758][ T5766] usb 5-1: config 0 descriptor?? [ 1705.759757][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.795517][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.799193][T15455] bond0 (unregistering): Released all slaves [ 1705.839707][ T5766] usbhid 5-1:0.0: can't add hid device: -71 [ 1705.839824][ T5766] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1706.819883][ T9] net_ratelimit: 7 callbacks suppressed [ 1706.820098][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.821108][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.861020][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.861303][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.862766][ T7325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.891843][ T5766] usb 5-1: USB disconnect, device number 13 [ 1707.753074][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.776552][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.911406][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.911545][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.914652][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.132185][T15455] hsr_slave_0: left promiscuous mode [ 1711.158321][T15455] hsr_slave_1: left promiscuous mode [ 1711.173572][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1711.208676][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1711.245721][T15455] hsr_slave_0: left promiscuous mode [ 1711.397462][T15455] hsr_slave_1: left promiscuous mode [ 1711.398696][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1711.468458][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1712.977108][T10277] net_ratelimit: 13 callbacks suppressed [ 1712.977203][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.836865][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.841906][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.867352][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.867570][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.867982][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.925220][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.072904][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.857282][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.857439][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.526416][T17974] jffs2: notice: (17974) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1716.691867][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1716.738924][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1716.757018][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1716.758132][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1716.761047][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1716.782360][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1716.782641][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1717.992719][ T9579] net_ratelimit: 11 callbacks suppressed [ 1717.992765][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.992910][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.043996][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.956720][ T9904] Bluetooth: hci9: command tx timeout [ 1719.035054][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.036033][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.279248][T15454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.287196][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.294921][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.071652][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.071829][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.021980][T10277] net_ratelimit: 5 callbacks suppressed [ 1723.022008][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.022291][ T9904] Bluetooth: hci9: command tx timeout [ 1723.466727][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.466928][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.480022][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.480151][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.480241][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.480435][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.484294][ T9546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.485031][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.489652][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.611110][ T9904] Bluetooth: hci9: command tx timeout [ 1727.731173][ T5624] Bluetooth: hci9: command tx timeout [ 1728.053737][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1728.063563][T15108] net_ratelimit: 11 callbacks suppressed [ 1728.063593][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.064211][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.071331][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.360590][ T9904] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1728.380148][ T9904] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1728.391287][ T9904] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1728.413337][ T9904] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1728.423767][ T9904] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1728.491975][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1728.706452][T18014] Bluetooth: MGMT ver 1.23 [ 1728.991500][ T5624] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1729.021316][ T5624] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1729.028654][ T5624] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1729.061253][ T5624] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1729.066442][ T5624] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1729.355484][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.359057][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.359268][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.359599][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.513144][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.603225][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.603490][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.603619][T10277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.606933][T18035] jffs2: notice: (18035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1730.050976][T18041] syz.3.1887 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1730.581796][ T9904] Bluetooth: hci11: command tx timeout [ 1730.803037][ T32] INFO: task syz.0.1688:16860 blocked for more than 144 seconds. [ 1730.803224][ T32] Tainted: G L syzkaller #0 [ 1730.803242][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1730.803255][ T32] task:syz.0.1688 state:D stack:28464 pid:16860 tgid:16859 ppid:14821 task_flags:0x400040 flags:0x00080002 [ 1730.803975][ T32] Call Trace: [ 1730.804127][ T32] [ 1730.804146][ T32] __schedule+0x17db/0x58f0 [ 1730.804369][ T32] ? __pfx___schedule+0x10/0x10 [ 1730.804577][ T32] ? schedule+0x90/0x2b0 [ 1730.807075][ T32] schedule+0x164/0x2b0 [ 1730.807283][ T32] schedule_preempt_disabled+0x13/0x30 [ 1730.807321][ T32] rwsem_down_read_slowpath+0x6ba/0x920 [ 1730.807496][ T32] ? rwsem_down_read_slowpath+0x57f/0x920 [ 1730.807628][ T32] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1730.807731][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.807886][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.808072][ T32] down_read+0x9c/0x330 [ 1730.808252][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.808285][ T32] ? super_lock+0xe0/0x3d0 [ 1730.808471][ T32] super_lock+0x2d6/0x3d0 [ 1730.808690][ T32] ? __pfx_super_lock+0x10/0x10 [ 1730.808924][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1730.809260][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.809908][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.991904][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.992125][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1730.992182][ T32] __iterate_supers+0x26b/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1730.992393][ T32] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1730.992430][ T32] ? __pfx___iterate_supers+0x10/0x10 [ 1730.992655][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1730.992695][ T32] __ia32_sys_sync+0xa0/0x120 [ 1730.992935][ T32] ? __pfx___ia32_sys_sync+0x10/0x10 [ 1730.992972][ T32] ? do_syscall_64+0xc8/0x520 [ 1730.993153][ T32] do_syscall_64+0x166/0x520 [ 1730.993321][ T32] ? trace_irq_disable+0x3b/0x140 [ 1730.993467][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.993611][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.993753][ T32] RIP: 0033:0x7f9e0379e159 [ 1730.993780][ T32] RSP: 002b:00007f9e046c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1730.993935][ T32] RAX: ffffffffffffffda RBX: 00007f9e03a25fa0 RCX: 00007f9e0379e159 [ 1730.993956][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.994113][ T32] RBP: 00007f9e03a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1730.994132][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1730.994150][ T32] R13: 00007f9e03a26038 R14: 00007f9e03a25fa0 R15: 00007ffe492351f8 [ 1731.160642][ T32] [ 1731.163984][ T32] INFO: task syz.9.1698:16908 blocked for more than 144 seconds. [ 1731.164156][ T32] Tainted: G L syzkaller #0 [ 1731.164172][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1731.164185][ T32] task:syz.9.1698 state:D stack:24400 pid:16908 tgid:16903 ppid:14776 task_flags:0x400140 flags:0x00080002 [ 1731.164653][ T32] Call Trace: [ 1731.164778][ T32] [ 1731.164905][ T32] __schedule+0x17db/0x58f0 [ 1731.165232][ T32] ? __pfx___schedule+0x10/0x10 [ 1731.165425][ T32] ? schedule+0x90/0x2b0 [ 1731.165624][ T32] schedule+0x164/0x2b0 [ 1731.165835][ T32] schedule_preempt_disabled+0x13/0x30 [ 1731.166069][ T32] rwsem_down_read_slowpath+0x6ba/0x920 [ 1731.166101][ T32] ? rwsem_down_read_slowpath+0x57f/0x920 [ 1731.166330][ T32] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1731.198708][ T9904] Bluetooth: hci12: command tx timeout [ 1731.308013][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.308138][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.308251][ T32] down_read+0x9c/0x330 [ 1731.308342][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.308465][ T32] ? super_lock+0xe0/0x3d0 [ 1731.308623][ T32] super_lock+0x2d6/0x3d0 [ 1731.308823][ T32] ? __pfx_super_lock+0x10/0x10 [ 1731.308962][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1731.309011][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.309176][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.309216][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.309249][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1731.309401][ T32] __iterate_supers+0x26b/0x420 [ 1731.309602][ T32] ? __pfx_quota_sync_one+0x10/0x10 [ 1731.309798][ T32] ? __pfx___iterate_supers+0x10/0x10 [ 1731.309842][ T32] ? __pfx_do_futex+0x10/0x10 [ 1731.310032][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.310152][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.310375][ T32] ? security_quotactl+0x7f/0x2d0 [ 1731.460163][ T32] __se_sys_quotactl+0x3a0/0x9f0 [ 1731.460395][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.460494][ T32] ? __se_sys_futex+0x3a8/0x450 [ 1731.460646][ T32] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1731.466285][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.466421][ T32] ? rcu_is_watching+0x16/0xb0 [ 1731.466591][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.466766][ T32] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 1731.466800][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.466962][ T32] do_syscall_64+0x166/0x520 [ 1731.467011][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.467176][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.467217][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.467427][ T32] RIP: 0033:0x7f423bd9e159 [ 1731.467453][ T32] RSP: 002b:00007f423cc92028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1731.467489][ T32] RAX: ffffffffffffffda RBX: 00007f423c026090 RCX: 00007f423bd9e159 [ 1731.467511][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 1731.467530][ T32] RBP: 00007f423be3506b R08: 0000000000000000 R09: 0000000000000000 [ 1731.467638][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1731.467840][ T32] R13: 00007f423c026128 R14: 00007f423c026090 R15: 00007ffde4420628 [ 1731.630913][ T32] [ 1731.631157][ T32] [ 1731.631157][ T32] Showing all locks held in the system: [ 1731.631173][ T32] locks held by kworker/0:0/9: 3, on CPU#0: [ 1731.631195][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.631540][ T32] #1: ffffc900000e7c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.631916][ T32] #2: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1731.632333][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1731.632354][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1731.633035][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1731.633056][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1731.633292][ T32] locks held by kworker/u8:2/40: 2, last CPU#0: [ 1731.633503][ T32] #0: ffff888035d4b940 ((wq_completion)wg-kex-wg0#27){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.774262][ T32] #1: ffffc90000b07c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.774500][ T32] locks held by kworker/u8:7/1111: 2, on CPU#0: [ 1731.774521][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.774979][ T32] #1: ffffc90005107c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.775248][ T32] locks held by kworker/u8:8/1143: 2, on CPU#0: [ 1731.775269][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.775646][ T32] #1: ffffc90005337c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.775973][ T32] locks held by kworker/u8:11/3352: 2, last CPU#0: [ 1731.775996][ T32] #0: ffff888035d4b940 ((wq_completion)wg-kex-wg0#27){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.884199][ T32] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1731.884299][ T32] locks held by udevd/4980: 2, last CPU#0: [ 1731.884320][ T32] #0: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1731.884398][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){... ** replaying previous printk message ** [ 1731.884398][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: prepend_path+0x4d/0x840 [ 1731.884477][ T32] locks held by dhcpcd/5275: 1, on CPU#0: [ 1731.884497][ T32] #0: ffffffff90254cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1cd/0x7a0 [ 1731.884569][ T32] locks held by getty/5366: 2, on CPU#1: [ 1731.884588][ T32] #0: ffff88803265c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1731.884656][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1731.884739][ T32] locks held by syz-executor/5599: 2, last CPU#0: [ 1731.884759][ T32] #0: ffff888021f76540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1731.884846][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x550 [ 1731.884915][ T32] locks held by kworker/u8:16/6083: 2, on CPU#0: [ 1731.884934][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.885021][ T32] #1: ffffc90003c8fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.885100][ T32] locks held by kworker/u8:17/6084: 3, last CPU#1: [ 1731.885119][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.885196][ T32] #1: ffffc90004d4fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.885275][ T32] #2: ffff88807e96e258 (&devlink->lock_key#72){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1731.885388][ T32] locks held by syz.7.1355/15280: 2, on CPU#0: [ 1731.885408][ T32] #0: ffff88802eef20e8 (&type->s_umount_key#88){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1731.885499][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1731.885576][ T32] locks held by syz-executor/15403: 2, last CPU#1: [ 1731.885595][ T32] #0: ffff88807f19c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1731.898550][ T32] #1: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1731.898646][ T32] locks held by kworker/u8:5/15455: 4, on CPU#0: [ 1731.898666][ T32] #0: ffff88801c2ce140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.898749][ T32] #1: ffffc9000413fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1731.898825][ T32] #2: ffffffff90246448 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1731.898908][ T32] #3: ffffffff90254cc0 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 1731.898986][ T32] locks held by syz-executor/15942: 2, on CPU#0: [ 1731.899006][ T32] #0: ffff88807ac3e0e8 (&type->s_umount_key#88){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1731.899099][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1731.899179][ T32] locks held by syz.0.1688/16860: 1, on CPU#0: [ 1731.899199][ T32] #0: ffff88802eef20e8 (&type->s_umount_key#88){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 1731.899286][ T32] locks held by syz.9.1698/16908: 1, on CPU#0: [ 1731.899306][ T32] #0: ffff88802eef20e8 (&type->s_umount_key#88){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 1731.899397][ T32] locks held by syz-executor/17590: 7, last CPU#0: [ 1731.899416][ T32] #0: ffff888012442460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1731.899488][ T32] #1: ffff888051aaf880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1731.899568][ T32] #2: ffff888029288788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1731.899651][ T32] #3: ffffffff8facc180 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1731.899725][ T32] #4: ffff88807a121128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1731.899806][ T32] #5: ffff88807a120258 (&devlink->lock_key#78){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1731.899895][ T32] #6: ffffffff90254cc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1731.917473][ T32] locks held by syz-executor/17627: 4, on CPU#0: [ 1731.917497][ T32] #0: ffff888012442460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1731.917573][ T32] #1: ffff888050818080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1731.917653][ T32] #2: ffff888029288788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1731.917737][ T32] #3: ffffffff8facc180 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1731.917820][ T32] locks held by syz.4.1886/18046: 2, on CPU#1: [ 1731.917840][ T32] #0: ffff88803226d960 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_release+0x76/0x220 [ 1731.917917][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1731.918004][ T32] locks held by syz.3.1887/18047: 2, last CPU#1: [ 1731.918024][ T32] #0: ffff88805a7a2800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1731.918111][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1731.918194][ T32] locks held by modprobe/18043: 1, last CPU#1: [ 1731.918214][ T32] #0: ffff88807be55900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1731.918294][ T32] locks held by modprobe/18049: 1, last CPU#1: [ 1731.918313][ T32] #0: ffff88807f3bd900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1731.918540][ T32] [ 1731.918548][ T32] ============================================= [ 1731.918548][ T32] [ 1731.918561][ T32] NMI backtrace for cpu 1 [ 1731.918582][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.918617][ T32] Tainted: [L]=SOFTLOCKUP [ 1731.918628][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1731.918644][ T32] Call Trace: [ 1731.918656][ T32] [ 1731.918667][ T32] dump_stack_lvl+0xe8/0x150 [ 1731.918713][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1731.918746][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.918783][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1731.918836][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1731.918873][ T32] sys_info+0x135/0x170 [ 1731.918904][ T32] watchdog+0xfd7/0x1030 [ 1731.918945][ T32] ? watchdog+0x1c7/0x1030 [ 1731.918987][ T32] kthread+0x38b/0x480 [ 1731.919017][ T32] ? __pfx_watchdog+0x10/0x10 [ 1731.919044][ T32] ? __pfx_kthread+0x10/0x10 [ 1731.919073][ T32] ret_from_fork+0x514/0xb70 [ 1731.919104][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1731.919130][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.919161][ T32] ? __switch_to+0xc89/0x1420 [ 1731.919208][ T32] ? __pfx_kthread+0x10/0x10 [ 1731.919237][ T32] ret_from_fork_asm+0x1a/0x30 [ 1731.919299][ T32] [ 1731.919356][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1731.919388][ C0] NMI backtrace for cpu 0 [ 1731.919405][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.919436][ C0] Tainted: [L]=SOFTLOCKUP [ 1731.919445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1731.919460][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 1731.919492][ C0] Code: 8b 3d 34 b5 a6 0c 48 89 de 5b e9 a3 82 64 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d c8 94 cd 11 65 48 8b 15 c8 94 cd 11 f7 c2 00 01 00 ff [ 1731.919513][ C0] RSP: 0018:ffffc900001578b0 EFLAGS: 00000046 [ 1731.919534][ C0] RAX: ffffffff857368df RBX: 0000000000000005 RCX: ffff88801def8000 [ 1731.919553][ C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: ffffffff9ad432c0 [ 1731.919568][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1731.919584][ C0] R10: dffffc0000000000 R11: ffffffff857368c0 R12: dffffc0000000000 [ 1731.919602][ C0] R13: 0000000000000000 R14: ffffffff9ad432c0 R15: 00000000000007ab [ 1731.919621][ C0] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 1731.919641][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1731.919658][ C0] CR2: 00007f4edc93a318 CR3: 000000006719c000 CR4: 0000000000350ef0 [ 1731.919678][ C0] Call Trace: [ 1731.919687][ C0] [ 1731.919696][ C0] io_serial_in+0x1f/0xc0 [ 1731.919732][ C0] wait_for_lsr+0x184/0x2f0 [ 1731.919764][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1731.919809][ C0] serial8250_console_write+0xaa1/0x1200 [ 1731.919838][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1731.919882][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1731.919911][ C0] ? __schedule+0x17f1/0x58f0 [ 1731.919950][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.919984][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1731.920029][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1731.920062][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.920090][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1731.920129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.920157][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1731.920192][ C0] nbcon_kthread_func+0x679/0x880 [ 1731.920225][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1731.920253][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1731.920281][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.920313][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1731.920355][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1731.920395][ C0] kthread+0x38b/0x480 [ 1731.920418][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1731.920444][ C0] ? __pfx_kthread+0x10/0x10 [ 1731.920469][ C0] ret_from_fork+0x514/0xb70 [ 1731.920500][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1731.920523][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.920552][ C0] ? __switch_to+0xc89/0x1420 [ 1731.920587][ C0] ? __pfx_kthread+0x10/0x10 [ 1731.920612][ C0] ret_from_fork_asm+0x1a/0x30 [ 1731.920662][ C0] [ 1731.943553][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1732.879117][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.889777][ T32] Tainted: [L]=SOFTLOCKUP [ 1732.894078][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1732.904114][ T32] Call Trace: [ 1732.907375][ T32] [ 1732.910286][ T32] vpanic+0x56d/0xa60 [ 1732.914266][ T32] ? __pfx___schedule+0x10/0x10 [ 1732.919133][ T32] ? __pfx_vpanic+0x10/0x10 [ 1732.923649][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.929296][ T32] panic+0xc5/0xd0 [ 1732.933017][ T32] ? __pfx_panic+0x10/0x10 [ 1732.937426][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1732.942877][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1732.948240][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1732.954384][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1732.960528][ T32] watchdog+0x1030/0x1030 [ 1732.964851][ T32] ? watchdog+0x1c7/0x1030 [ 1732.969261][ T32] kthread+0x38b/0x480 [ 1732.973315][ T32] ? __pfx_watchdog+0x10/0x10 [ 1732.977977][ T32] ? __pfx_kthread+0x10/0x10 [ 1732.982576][ T32] ret_from_fork+0x514/0xb70 [ 1732.987152][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1732.992247][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.997867][ T32] ? __switch_to+0xc89/0x1420 [ 1733.002542][ T32] ? __pfx_kthread+0x10/0x10 [ 1733.007119][ T32] ret_from_fork_asm+0x1a/0x30 [ 1733.011901][ T32] [ 1733.015226][ T32] Kernel Offset: disabled [ 1733.019537][ T32] Rebooting in 86400 seconds..