last executing test programs: 9.609674569s ago: executing program 2 (id=2815): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/98) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r3, &(0x7f0000000540), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdffffffadbf"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000002000079101100000000005f50000000000000950000000000000009"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3314) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 8.671136197s ago: executing program 2 (id=2820): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x400006, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x1004}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4000000, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x5d, 0x7}, @const={0xc, 0x0, 0x0, 0xa, 0x5}]}}, 0x0, 0x36, 0x0, 0x0, 0x4}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 8.477327704s ago: executing program 2 (id=2821): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3c00, 0x1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/224) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)=ANY=[@ANYBLOB="40c628de7089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010102}, {0x6, @random="18d9e3fab909"}, 0x66, {0x2, 0x4e22, @multicast2}, 'ip6erspan0\x00'}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x2001005, 0x3ffffffe, 0xffffffff, 0x4}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 6.214662933s ago: executing program 1 (id=2826): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(0x0, 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0xfe0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) 5.958310342s ago: executing program 3 (id=2827): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1d0, 0x8, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x194, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}, {0x54, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6c}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf0}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x28}]}}}, {0x5c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x61}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0xfffffffffffffed0, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x14}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xce, 0x7, 0x1, 0x0, "fb3313133901ae708adb643b7eb58c3caba9c46c6519722964c5805c9de20f3a105efc9eaef979c5f87916177131d053e32abb85ec88f918bef33198014b28f5329561c8d7b9fc0c0ecaa05d1984a48cb17efed5f6f33155a2e0325c56d47b009b4e166544737ee652af21f26017fb32dec28676866589910cbc52b81a652d3ab2e90fa3f3b3015eac1e331ed8bd84e6cbcf4fbe873a2227fe43e4ad0cecb84db0a1338f2df35cd046cbd5dafe2f75b2447d8da073aaad37820adddcdb144e0232"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "e9cbe827338dfd5ae06c9692666aa6b4e7ea68eb995a819f275d9834783ee7226285d46d854751ee6aec76a716b3db57e48ba12a46bf5a1cc03b007626fefbc9966a323775b796dbd9e187aacc6623790d95ddd4455e666f4286a396fa2a82aa064a1e96c7206aca51a589234365c92dd650f4ee87ba650501c9a187b0d82cafa1a02299a8d6618bd1965f00404ccd75"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3ac}}, 0x8000) r2 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1}, 0x5a8}], 0x1, 0x10000, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x4c00}}, 0x1c}}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x101442, 0x0) ioctl$TIOCSBRK(r4, 0x5427) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x387, 0x4e22, 0x7, 0xa, 0xa0, 0x20, 0x8, 0x0, 0xee00}, {0xf, 0xb72, 0x5, 0x1, 0x4, 0x1, 0x3, 0xa81b}, {0x5, 0x7fffffff, 0x2, 0x2}, 0x41, 0x6e6bb7, 0x0, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x3502, 0x3, 0x2, 0x6, 0xfffffeb5, 0x10001}}, 0xe4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000000000000001000008000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x110, 0x7, 0x0, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073798532000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 5.957546954s ago: executing program 0 (id=2828): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/98) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r3, &(0x7f0000000540), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdffffffadbf"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000002000079101100000000005f50000000000000950000000000000009"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3314) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5.857362497s ago: executing program 3 (id=2829): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) 5.065363642s ago: executing program 2 (id=2830): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r5, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x38}, 0x2, 0x34005}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) 4.824148374s ago: executing program 3 (id=2831): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3c00, 0x1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/224) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)=ANY=[@ANYBLOB="40c628de7089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) 4.816365945s ago: executing program 0 (id=2832): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/98) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r3, &(0x7f0000000540), 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdffffffadbf"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000002000079101100000000005f500000000000009500000000000000090971fa1067bbc262de8b6b276e79faa32df1ac248067d370073f2430"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3314) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3.944755854s ago: executing program 1 (id=2833): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) 3.940037343s ago: executing program 2 (id=2834): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc4af6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0x1000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) 3.770671926s ago: executing program 0 (id=2835): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {'GPL\x00'}, {'\\@'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) accept4(r2, 0x0, 0x0, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') map_shadow_stack(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x1) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x29, 0x102001, 0x801000, 0x1, 0x40, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.856936383s ago: executing program 3 (id=2836): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc4af6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) 2.73794447s ago: executing program 0 (id=2837): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1d0, 0x8, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x194, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}, {0x54, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6c}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf0}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x28}]}}}, {0x5c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x61}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0xfffffffffffffed0, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x14}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xce, 0x7, 0x1, 0x0, "fb3313133901ae708adb643b7eb58c3caba9c46c6519722964c5805c9de20f3a105efc9eaef979c5f87916177131d053e32abb85ec88f918bef33198014b28f5329561c8d7b9fc0c0ecaa05d1984a48cb17efed5f6f33155a2e0325c56d47b009b4e166544737ee652af21f26017fb32dec28676866589910cbc52b81a652d3ab2e90fa3f3b3015eac1e331ed8bd84e6cbcf4fbe873a2227fe43e4ad0cecb84db0a1338f2df35cd046cbd5dafe2f75b2447d8da073aaad37820adddcdb144e0232"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "e9cbe827338dfd5ae06c9692666aa6b4e7ea68eb995a819f275d9834783ee7226285d46d854751ee6aec76a716b3db57e48ba12a46bf5a1cc03b007626fefbc9966a323775b796dbd9e187aacc6623790d95ddd4455e666f4286a396fa2a82aa064a1e96c7206aca51a589234365c92dd650f4ee87ba650501c9a187b0d82cafa1a02299a8d6618bd1965f00404ccd75"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3ac}}, 0x8000) r2 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1}, 0x5a8}], 0x1, 0x10000, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x4c00}}, 0x1c}}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x101442, 0x0) ioctl$TIOCSBRK(r4, 0x5427) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x387, 0x4e22, 0x7, 0xa, 0xa0, 0x20, 0x8, 0x0, 0xee00}, {0xf, 0xb72, 0x5, 0x1, 0x4, 0x1, 0x3, 0xa81b}, {0x5, 0x7fffffff, 0x2, 0x2}, 0x41, 0x6e6bb7, 0x0, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x3502, 0x3, 0x2, 0x6, 0xfffffeb5, 0x10001}}, 0xe4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x110, 0x7, 0x0, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073798532000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.6339494s ago: executing program 0 (id=2838): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r6 = getpid() mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r6, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18efa698daa7173fad00000000000000cfe537ee9efabd9f611978000000f4ff9400000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @void}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.6326836s ago: executing program 2 (id=2839): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3c00, 0x1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/224) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)=ANY=[@ANYBLOB="40c628de7089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010102}, {0x6, @random="18d9e3fab909"}, 0x66, {0x2, 0x4e22, @multicast2}, 'ip6erspan0\x00'}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x2001005, 0x3ffffffe, 0xffffffff, 0x4}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 2.556227326s ago: executing program 1 (id=2840): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) 2.374721967s ago: executing program 1 (id=2841): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r6 = getpid() mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r6, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18efa698daa7173fad00000000000000cfe537ee9efabd9f611978000000f4ff9400000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @void}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.97959397s ago: executing program 3 (id=2842): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r5, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x38}, 0x2, 0x34005}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) 1.03525479s ago: executing program 0 (id=2843): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3c00, 0x1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/224) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)=ANY=[@ANYBLOB="40c628de7089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010102}, {0x6, @random="18d9e3fab909"}, 0x66, {0x2, 0x4e22, @multicast2}, 'ip6erspan0\x00'}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x2001005, 0x3ffffffe, 0xffffffff, 0x4}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) syz_usb_control_io(r3, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000400)) syz_usb_control_io(r3, 0x0, 0x0) 1.004781439s ago: executing program 3 (id=2844): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3c00, 0x1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/224) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) 871.466689ms ago: executing program 1 (id=2845): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {'GPL\x00'}, {'\\@'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) accept4(r2, 0x0, 0x0, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') map_shadow_stack(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x1) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x29, 0x102001, 0x801000, 0x1, 0x40, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=2846): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1d0, 0x8, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x194, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}, {0x54, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6c}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf0}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x28}]}}}, {0x5c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x61}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0xfffffffffffffed0, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x14}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xce, 0x7, 0x1, 0x0, "fb3313133901ae708adb643b7eb58c3caba9c46c6519722964c5805c9de20f3a105efc9eaef979c5f87916177131d053e32abb85ec88f918bef33198014b28f5329561c8d7b9fc0c0ecaa05d1984a48cb17efed5f6f33155a2e0325c56d47b009b4e166544737ee652af21f26017fb32dec28676866589910cbc52b81a652d3ab2e90fa3f3b3015eac1e331ed8bd84e6cbcf4fbe873a2227fe43e4ad0cecb84db0a1338f2df35cd046cbd5dafe2f75b2447d8da073aaad37820adddcdb144e0232"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "e9cbe827338dfd5ae06c9692666aa6b4e7ea68eb995a819f275d9834783ee7226285d46d854751ee6aec76a716b3db57e48ba12a46bf5a1cc03b007626fefbc9966a323775b796dbd9e187aacc6623790d95ddd4455e666f4286a396fa2a82aa064a1e96c7206aca51a589234365c92dd650f4ee87ba650501c9a187b0d82cafa1a02299a8d6618bd1965f00404ccd75"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3ac}}, 0x8000) r2 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1}, 0x5a8}], 0x1, 0x10000, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x4c00}}, 0x1c}}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x101442, 0x0) ioctl$TIOCSBRK(r4, 0x5427) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x387, 0x4e22, 0x7, 0xa, 0xa0, 0x20, 0x8, 0x0, 0xee00}, {0xf, 0xb72, 0x5, 0x1, 0x4, 0x1, 0x3, 0xa81b}, {0x5, 0x7fffffff, 0x2, 0x2}, 0x41, 0x6e6bb7, 0x0, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x3502, 0x3, 0x2, 0x6, 0xfffffeb5, 0x10001}}, 0xe4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x110, 0x7, 0x0, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073798532000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2378" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 518.577749][T14267] Bluetooth: hci4: command 0x0406 tx timeout [ 518.587767][ T1349] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 518.739651][ T1349] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 518.742341][ T1349] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.745486][ T1349] usb 5-1: config 1 has no interface number 0 [ 518.747412][ T1349] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 518.750424][ T1349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.817104][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.829254][T14418] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 518.898033][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.901589][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.908253][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.966100][T14425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.970081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.972796][T14427] batadv_slave_1: entered promiscuous mode [ 518.975607][T14426] batadv_slave_1: left promiscuous mode [ 519.079047][T14437] lo speed is unknown, defaulting to 1000 [ 519.090172][T14437] lo speed is unknown, defaulting to 1000 [ 519.093118][T14437] lo speed is unknown, defaulting to 1000 [ 519.095890][T14437] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 519.102127][T14437] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 519.108608][T14437] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 519.113484][T14437] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 519.190343][T14442] random: crng reseeded on system resumption [ 519.213362][T14437] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 519.369843][T14437] lo speed is unknown, defaulting to 1000 [ 519.391344][T14437] lo speed is unknown, defaulting to 1000 [ 519.404300][T14437] lo speed is unknown, defaulting to 1000 [ 519.419546][T14437] lo speed is unknown, defaulting to 1000 [ 519.434866][T14437] lo speed is unknown, defaulting to 1000 [ 520.010692][T14454] batadv_slave_1: entered promiscuous mode [ 520.068134][T14453] batadv_slave_1: left promiscuous mode [ 520.457628][ T50] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 520.609627][ T50] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 520.613608][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.625950][ T50] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 037 [ 521.032945][ T50] (null): failure reading functionality [ 521.037646][ T5529] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 521.187613][ T5529] usb 8-1: Using ep0 maxpacket: 8 [ 521.191293][ T5529] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.194472][ T5529] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.200534][ T5529] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 521.203403][ T5529] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.205896][ T5529] usb 8-1: Product: syz [ 521.207257][ T5529] usb 8-1: Manufacturer: syz [ 521.208875][ T5529] usb 8-1: SerialNumber: syz [ 521.216515][ T5529] usb 8-1: No union descriptors [ 521.220119][ T5529] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 521.222441][ T5529] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 521.300890][T12197] usb 5-1: USB disconnect, device number 54 [ 521.421636][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.425487][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.479059][T14474] random: crng reseeded on system resumption [ 522.727747][T11708] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.968140][ T1349] net_ratelimit: 6 callbacks suppressed [ 522.968157][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.050631][ T50] i2c i2c-2: failure reading functionality [ 523.050647][T14462] i2c i2c-2: failure writing data [ 523.054445][T14462] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 523.054718][ T50] i2c i2c-2: connected i2c-tiny-usb device [ 523.056926][T14462] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 523.062294][T14462] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 523.093496][ T50] usb 6-1: USB disconnect, device number 37 [ 523.103847][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2408'. [ 523.812527][ T5838] usb 8-1: USB disconnect, device number 53 [ 524.107986][ T50] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 524.149888][T14499] random: crng reseeded on system resumption [ 524.258189][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 524.290302][ T50] usb 6-1: config 9 has an invalid interface number: 249 but max is 2 [ 524.296095][ T50] usb 6-1: config 9 has an invalid interface number: 176 but max is 2 [ 524.300549][ T50] usb 6-1: config 9 has an invalid interface number: 118 but max is 2 [ 524.305504][ T50] usb 6-1: config 9 has no interface number 0 [ 524.310676][ T50] usb 6-1: config 9 has no interface number 1 [ 524.313607][ T50] usb 6-1: config 9 has no interface number 2 [ 524.316662][ T50] usb 6-1: config 9 interface 249 altsetting 9 bulk endpoint 0xE has invalid maxpacket 8 [ 524.323580][ T50] usb 6-1: config 9 interface 249 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 524.326920][ T50] usb 6-1: config 9 interface 249 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 524.331824][ T50] usb 6-1: config 9 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 524.335588][ T50] usb 6-1: config 9 interface 249 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 524.341692][ T50] usb 6-1: config 9 interface 176 altsetting 32 has a duplicate endpoint with address 0x2, skipping [ 524.345522][ T50] usb 6-1: config 9 interface 176 altsetting 32 has an endpoint descriptor with address 0x99, changing to 0x89 [ 524.350268][ T50] usb 6-1: config 9 interface 176 altsetting 32 endpoint 0x89 has invalid maxpacket 15882, setting to 64 [ 524.354127][ T50] usb 6-1: config 9 interface 176 altsetting 32 has a duplicate endpoint with address 0x1, skipping [ 524.358362][ T50] usb 6-1: config 9 interface 176 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 524.362621][ T50] usb 6-1: config 9 interface 176 altsetting 32 has an endpoint descriptor with address 0x94, changing to 0x84 [ 524.366894][ T50] usb 6-1: config 9 interface 176 altsetting 32 endpoint 0x84 has an invalid bInterval 189, changing to 11 [ 524.371644][ T50] usb 6-1: config 9 interface 176 altsetting 32 endpoint 0x84 has invalid maxpacket 16452, setting to 1024 [ 524.375587][ T50] usb 6-1: config 9 interface 176 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 524.380815][ T50] usb 6-1: config 9 interface 176 altsetting 32 has a duplicate endpoint with address 0x3, skipping [ 524.384465][ T50] usb 6-1: config 9 interface 176 altsetting 32 has a duplicate endpoint with address 0x4, skipping [ 524.391174][ T50] usb 6-1: config 9 interface 176 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 524.396515][ T50] usb 6-1: config 9 interface 176 altsetting 32 endpoint 0x6 has an invalid bInterval 60, changing to 9 [ 524.404060][ T50] usb 6-1: config 9 interface 176 altsetting 32 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 524.412176][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 524.416902][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 524.424382][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 524.429892][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 524.434675][ T50] usb 6-1: config 9 interface 118 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 524.440670][ T50] usb 6-1: config 9 interface 118 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 524.445910][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 524.452459][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 524.458050][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 524.462642][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 524.467252][ T50] usb 6-1: config 9 interface 118 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 524.472366][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 524.476036][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 524.479720][ T50] usb 6-1: config 9 interface 118 altsetting 7 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 524.483716][ T50] usb 6-1: config 9 interface 118 altsetting 7 has a duplicate endpoint with address 0x89, skipping [ 524.487638][ T50] usb 6-1: config 9 interface 118 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 524.492141][ T50] usb 6-1: config 9 interface 249 has no altsetting 0 [ 524.494461][ T50] usb 6-1: config 9 interface 176 has no altsetting 0 [ 524.496894][ T50] usb 6-1: config 9 interface 118 has no altsetting 0 [ 524.509446][ T50] usb 6-1: New USB device found, idVendor=12d1, idProduct=546f, bcdDevice=8a.b8 [ 524.513174][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.516618][ T50] usb 6-1: Product: å­á—«æ»¥å§‰Þ€ã¨‡æ–³êµ¥ç¤ºä£œí“œéš§ë¯¦æ—°â«ã©ã§ŽçŸâ„¸ážŽèŽ¬æ”‡ê¹­ç¢¬äœ£ç°¹î•šë«³å›˜ê†â›­ì²†ç»»éŒªè‹­ä‚Œ [ 524.522254][ T50] usb 6-1: Manufacturer: 槿옶ê©îˆ¹é¥°ë²ƒìƒ©í˜¿æŒ„嘯웮粫뾥⋚≦↗秤䞣אַ雑付윊â…☖鈦峟ᯔ覽ї暭輤í¡ãª¶êœç´ì®£ê¡å­©è­”ﷃ踙⺥站掎唃㉸汌缭쩼⯨禚ä·ç¡‚࡛姠 ï€å‚ˆä·´ì”¿ïŸŽèŽšïµŸæ¯°îœ¹â¿›éˆ†ã¨¤ãŸ«ì‡çƒã—‚ʓ㋿뾰鯆割ﹽ漒◚Ἥ亰ᵬᔤ뛈琉 [ 524.533882][ T50] usb 6-1: SerialNumber: syz [ 524.796877][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.799723][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.817990][ T50] usb 6-1: Interface #176 referenced by multiple IADs [ 524.829565][ T50] usb 6-1: Interface #118 referenced by multiple IADs [ 524.839007][T14493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.081205][T14493] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 525.084006][T14493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 525.091899][T14493] vhci_hcd vhci_hcd.0: Device attached [ 525.125737][T14507] vhci_hcd: connection closed [ 525.126126][ T5816] vhci_hcd vhci_hcd.1: stop threads [ 525.130795][ T50] option 6-1:9.249: GSM modem (1-port) converter detected [ 525.131406][ T5816] vhci_hcd vhci_hcd.1: release socket [ 525.135425][ T5816] vhci_hcd vhci_hcd.1: disconnect device [ 525.153253][ T50] usb 6-1: USB disconnect, device number 38 [ 525.163709][ T50] option 6-1:9.249: device disconnected [ 525.189316][ T5809] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 525.309454][T14516] random: crng reseeded on system resumption [ 525.415344][ T5809] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 525.418531][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.495963][ T5809] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 043 [ 525.849835][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.959641][ T5809] (null): failure reading functionality [ 526.099058][T14530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2421'. [ 526.301133][T14540] random: crng reseeded on system resumption [ 526.888005][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.819732][T14267] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 527.849404][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.928321][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.020467][T14502] i2c i2c-2: failure writing data [ 528.022460][T14502] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 528.024272][ T5809] i2c i2c-2: failure reading functionality [ 528.024695][T14502] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 528.035362][T14502] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 528.259138][T14562] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2431'. [ 528.497992][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.987393][ T5809] i2c i2c-2: connected i2c-tiny-usb device [ 528.993963][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.995091][ T5809] usb 7-1: USB disconnect, device number 43 [ 529.106773][T14580] netlink: 'syz.3.2438': attribute type 12 has an invalid length. [ 529.219242][T14584] random: crng reseeded on system resumption [ 529.231762][T14587] lo speed is unknown, defaulting to 1000 [ 529.742018][ T5887] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 530.218921][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.403750][ T5887] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 530.406719][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.476027][T14602] block nbd1: NBD_DISCONNECT [ 530.490445][T14602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.778509][T14607] tmpfs: Bad value for 'mpol' [ 530.887854][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.228500][ T5887] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 055 [ 531.288003][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.540054][T14619] random: crng reseeded on system resumption [ 531.835236][ T5887] (null): failure reading functionality [ 532.081094][T14622] trusted_key: encrypted_key: master key parameter 'ecrypð¨1strusted:trust‚Ø9' is invalid [ 532.327590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 532.375234][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.731605][T14633] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.2453'. [ 533.445478][T14640] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2455'. [ 533.458164][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.848261][T14586] i2c i2c-2: failure writing data [ 533.848357][ T5887] i2c i2c-2: failure reading functionality [ 533.849923][T14586] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 533.850038][T14586] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 533.860380][T14586] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 533.938420][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.966602][ T5887] i2c i2c-2: connected i2c-tiny-usb device [ 534.011005][ T5887] usb 5-1: USB disconnect, device number 55 [ 534.487755][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.715461][T14658] lo speed is unknown, defaulting to 1000 [ 535.072017][T14663] lo speed is unknown, defaulting to 1000 [ 535.534894][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.596504][T14675] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2464'. [ 536.575920][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.648324][T14691] can0: slcan on ptm0. [ 536.672502][T14690] random: crng reseeded on system resumption [ 536.977750][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.608072][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.641630][T14681] can0 (unregistered): slcan off ptm0. [ 537.730505][T14267] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 537.777005][T14718] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 537.784236][T14718] tcpci 0-0050: probe with driver tcpci failed with error -16 [ 537.786798][T14718] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 537.967730][ T5529] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 537.987283][T14728] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.2475'. [ 538.088313][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.117699][ T5529] usb 6-1: Using ep0 maxpacket: 32 [ 538.121393][ T5529] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 538.125544][ T5529] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 538.129481][ T5529] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.133732][ T5529] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 538.142328][ T5529] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 538.146360][ T5529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.147639][ T5838] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 538.149994][ T5529] usb 6-1: Product: syz [ 538.154535][ T5529] usb 6-1: Manufacturer: syz [ 538.156158][ T5529] usb 6-1: SerialNumber: syz [ 538.168407][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 538.180559][ T5529] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input30 [ 538.301796][ T5838] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 538.305115][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.309723][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.313930][ T5838] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.319242][ T5838] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.322328][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.327081][ T5838] usb 8-1: config 0 descriptor?? [ 538.377935][ T5529] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 538.381102][ T5529] (id 0x00) [ 538.438814][ T5529] rc_core: IR keymap rc-imon-pad not found [ 538.440928][ T5529] Registered IR keymap rc-empty [ 538.443021][ T5529] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 538.447003][ T5529] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 538.590992][ T5529] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 538.596968][ T5529] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input31 [ 538.607069][ T5529] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:39> initialized [ 538.677646][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.708158][ T50] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 538.737478][ T5838] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 538.769007][ T5838] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 538.807643][T14740] FAULT_INJECTION: forcing a failure. [ 538.807643][T14740] name failslab, interval 1, probability 0, space 0, times 0 [ 538.813269][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.0.2479 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.813289][T14740] Tainted: [L]=SOFTLOCKUP [ 538.813293][T14740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.813300][T14740] Call Trace: [ 538.813303][T14740] [ 538.813308][T14740] dump_stack_lvl+0x100/0x190 [ 538.813394][T14740] should_fail_ex.cold+0x5/0xa [ 538.813407][T14740] should_failslab+0xc2/0x120 [ 538.813423][T14740] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 538.813438][T14740] ? __alloc_skb+0x5b7/0x710 [ 538.813472][T14740] ? __alloc_skb+0x140/0x710 [ 538.813488][T14740] __alloc_skb+0x140/0x710 [ 538.813501][T14740] ? __alloc_skb+0x5b7/0x710 [ 538.813514][T14740] ? __pfx___alloc_skb+0x10/0x10 [ 538.813529][T14740] ? __lock_acquire+0x49f/0x1a40 [ 538.813548][T14740] alloc_skb_with_frags+0xdd/0x760 [ 538.813565][T14740] ? __lock_acquire+0x49f/0x1a40 [ 538.813584][T14740] sock_alloc_send_pskb+0x801/0x980 [ 538.813602][T14740] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 538.813615][T14740] ? is_bpf_text_address+0x8a/0x1a0 [ 538.813630][T14740] ? bpf_ksym_find+0x124/0x1c0 [ 538.813642][T14740] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 538.813659][T14740] ? is_bpf_text_address+0x94/0x1a0 [ 538.813674][T14740] ? kernel_text_address+0x8d/0x100 [ 538.813689][T14740] ? __lock_acquire+0x49f/0x1a40 [ 538.813707][T14740] unix_stream_sendmsg+0xda4/0x1310 [ 538.813726][T14740] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 538.813743][T14740] ? apparmor_socket_sendmsg+0x15b/0x270 [ 538.813778][T14740] sock_sendmsg+0x394/0x410 [ 538.813789][T14740] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 538.813802][T14740] ? __pfx_sock_sendmsg+0x10/0x10 [ 538.813812][T14740] ? do_sendfile+0xadc/0xe20 [ 538.813837][T14740] splice_to_socket+0xb3c/0x11a0 [ 538.813856][T14740] ? __pfx_splice_to_socket+0x10/0x10 [ 538.813868][T14740] ? lockdep_hardirqs_on+0x78/0x100 [ 538.813897][T14740] ? lockdep_init_map_type+0x5c/0x250 [ 538.813908][T14740] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 538.813926][T14740] ? __pfx_splice_to_socket+0x10/0x10 [ 538.813938][T14740] direct_splice_actor+0x192/0x690 [ 538.813951][T14740] splice_direct_to_actor+0x345/0xa30 [ 538.813964][T14740] ? __pfx_direct_splice_actor+0x10/0x10 [ 538.813978][T14740] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 538.813994][T14740] do_splice_direct+0x174/0x240 [ 538.814006][T14740] ? __pfx_do_splice_direct+0x10/0x10 [ 538.814022][T14740] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 538.814034][T14740] ? bpf_lsm_file_permission+0x9/0x10 [ 538.814044][T14740] ? security_file_permission+0x76/0x210 [ 538.814060][T14740] ? rw_verify_area+0xce/0x6d0 [ 538.814076][T14740] do_sendfile+0xadc/0xe20 [ 538.814095][T14740] ? __pfx_do_sendfile+0x10/0x10 [ 538.814113][T14740] ? __pfx___seccomp_filter+0x10/0x10 [ 538.814128][T14740] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 538.814162][T14740] ? fput+0x79/0x100 [ 538.814182][T14740] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 538.814200][T14740] ? ksys_write+0x1ac/0x250 [ 538.814222][T14740] __do_fast_syscall_32+0xe7/0x970 [ 538.814245][T14740] ? lockdep_hardirqs_on+0x78/0x100 [ 538.814266][T14740] do_fast_syscall_32+0x32/0x70 [ 538.814283][T14740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.814297][T14740] RIP: 0023:0xf6fdefec [ 538.814311][T14740] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 538.814316][T14740] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 538.814327][T14740] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 538.814333][T14740] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 538.814340][T14740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.814346][T14740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 538.814353][T14740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.814366][T14740] [ 538.955195][ T5838] usb 8-1: USB disconnect, device number 54 [ 538.981446][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.984166][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 538.986825][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.992478][ T50] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 538.995646][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 538.998580][ T50] usb 7-1: Product: syz [ 538.999963][ T50] usb 7-1: Manufacturer: syz [ 539.001682][ T50] usb 7-1: SerialNumber: syz [ 539.189214][T14748] lo speed is unknown, defaulting to 1000 [ 539.222393][ T50] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 539.419612][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2477'. [ 539.430286][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2477'. [ 539.508807][ T5838] usb 7-1: USB disconnect, device number 44 [ 539.512699][ T5838] usblp1: removed [ 539.533595][T14764] netlink: 'syz.3.2484': attribute type 10 has an invalid length. [ 539.537077][T14765] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 539.545370][T14764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.550122][T14764] team0: Port device netdevsim1 added [ 539.592196][T14769] FAULT_INJECTION: forcing a failure. [ 539.592196][T14769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.596353][T14769] CPU: 1 UID: 0 PID: 14769 Comm: syz.3.2485 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.596374][T14769] Tainted: [L]=SOFTLOCKUP [ 539.596378][T14769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 539.596386][T14769] Call Trace: [ 539.596390][T14769] [ 539.596395][T14769] dump_stack_lvl+0x100/0x190 [ 539.596412][T14769] should_fail_ex.cold+0x5/0xa [ 539.596425][T14769] _copy_from_iter+0x1f4/0x1690 [ 539.596444][T14769] ? __asan_memset+0x23/0x50 [ 539.596456][T14769] ? __pfx__copy_from_iter+0x10/0x10 [ 539.596473][T14769] ? __pfx___alloc_skb+0x10/0x10 [ 539.596492][T14769] netlink_sendmsg+0x808/0xda0 [ 539.596507][T14769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.596521][T14769] ? apparmor_socket_sendmsg+0x15b/0x270 [ 539.596536][T14769] ____sys_sendmsg+0xa4d/0xbe0 [ 539.596546][T14769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.596559][T14769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.596576][T14769] ___sys_sendmsg+0x190/0x1e0 [ 539.596589][T14769] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.596607][T14769] ? find_held_lock+0x2b/0x80 [ 539.596630][T14769] __sys_sendmsg+0x160/0x210 [ 539.596658][T14769] ? __pfx___sys_sendmsg+0x10/0x10 [ 539.596677][T14769] ? __pfx_ksys_write+0x10/0x10 [ 539.596691][T14769] __do_fast_syscall_32+0xe7/0x970 [ 539.596705][T14769] ? lockdep_hardirqs_on+0x78/0x100 [ 539.596720][T14769] do_fast_syscall_32+0x32/0x70 [ 539.596753][T14769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.596768][T14769] RIP: 0023:0xf7fd2fec [ 539.596782][T14769] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 539.596787][T14769] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 539.596798][T14769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 539.596805][T14769] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.596811][T14769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.596818][T14769] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 539.596824][T14769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.596838][T14769] [ 539.688126][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.835563][T14774] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2486'. [ 540.009113][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.698868][T14788] imon:vfd_write: invalid payload size [ 540.738623][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.747681][ T5838] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 540.880435][ T50] usb 6-1: USB disconnect, device number 39 [ 540.919808][ T5838] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 540.923896][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 540.927894][ T5838] usb 5-1: Product: syz [ 540.930097][ T5838] usb 5-1: Manufacturer: syz [ 540.932296][ T5838] usb 5-1: SerialNumber: syz [ 540.940177][ T5838] usb 5-1: config 0 descriptor?? [ 540.944653][ T5838] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 540.948974][ T5838] dvb-usb: bulk message failed: -22 (2/0) [ 540.957383][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.961681][ T5838] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 540.964730][ T5838] usb 5-1: media controller created [ 540.974183][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.153973][T14785] cxusb: i2c wr: len=78 is too big! [ 541.153973][T14785] [ 541.168655][ T5838] cxusb: set interface failed [ 541.170392][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 541.197025][ T5838] DVB: Unable to find symbol mt352_attach() [ 541.200177][ T5838] dvb-usb: bulk message failed: -22 (5/0) [ 541.202716][ T5838] zl10353_read_register: readreg error (reg=127, ret==-121) [ 541.205624][ T5838] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 541.267909][ T5838] rc_core: IR keymap rc-dvico-mce not found [ 541.270395][ T5838] Registered IR keymap rc-empty [ 541.273372][ T5838] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 541.279724][ T5838] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input33 [ 541.285819][ T5838] dvb-usb: schedule remote query interval to 100 msecs. [ 541.288824][ T5838] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 541.295999][ T5838] usb 5-1: USB disconnect, device number 56 [ 541.413917][ T5838] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 541.526318][T14803] lo speed is unknown, defaulting to 1000 [ 541.566663][T14803] »»»»»»: renamed from vlan0 (while UP) [ 541.633349][T14808] FAULT_INJECTION: forcing a failure. [ 541.633349][T14808] name failslab, interval 1, probability 0, space 0, times 0 [ 541.638653][T14808] CPU: 0 UID: 0 PID: 14808 Comm: syz.1.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.638682][T14808] Tainted: [L]=SOFTLOCKUP [ 541.638689][T14808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 541.638700][T14808] Call Trace: [ 541.638707][T14808] [ 541.638715][T14808] dump_stack_lvl+0x100/0x190 [ 541.638742][T14808] should_fail_ex.cold+0x5/0xa [ 541.638760][T14808] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 541.638782][T14808] should_failslab+0xc2/0x120 [ 541.638807][T14808] kmem_cache_alloc_noprof+0x91/0x6a0 [ 541.638830][T14808] ? skb_clone+0x190/0x400 [ 541.638859][T14808] skb_clone+0x190/0x400 [ 541.638882][T14808] netlink_deliver_tap+0xaed/0xcc0 [ 541.638909][T14808] netlink_unicast+0x62b/0x850 [ 541.638934][T14808] ? __pfx_netlink_unicast+0x10/0x10 [ 541.638970][T14808] netlink_sendmsg+0x8b0/0xda0 [ 541.638995][T14808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.639019][T14808] ? apparmor_socket_sendmsg+0x15b/0x270 [ 541.639045][T14808] ____sys_sendmsg+0xa4d/0xbe0 [ 541.639063][T14808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.639084][T14808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.639114][T14808] ___sys_sendmsg+0x190/0x1e0 [ 541.639136][T14808] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.639168][T14808] ? find_held_lock+0x2b/0x80 [ 541.639208][T14808] __sys_sendmsg+0x160/0x210 [ 541.639235][T14808] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.639267][T14808] ? __pfx_ksys_write+0x10/0x10 [ 541.639291][T14808] __do_fast_syscall_32+0xe7/0x970 [ 541.639315][T14808] ? lockdep_hardirqs_on+0x78/0x100 [ 541.639338][T14808] do_fast_syscall_32+0x32/0x70 [ 541.639362][T14808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.639385][T14808] RIP: 0023:0xf7fb2fec [ 541.639405][T14808] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 541.639414][T14808] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 541.639432][T14808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 541.639444][T14808] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.639454][T14808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.639465][T14808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 541.639476][T14808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.639502][T14808] [ 541.771205][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.928774][T14816] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.2498'. [ 542.077641][ T50] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 542.267819][ T6266] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 542.287728][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 542.292438][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.296629][ T50] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 542.301689][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.314049][ T50] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 542.318647][ T50] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 542.322010][ T50] usb 5-1: Product: syz [ 542.323809][ T50] usb 5-1: Manufacturer: syz [ 542.325749][ T50] usb 5-1: SerialNumber: syz [ 542.331037][ T50] usb 5-1: config 0 descriptor?? [ 542.397812][ T50] rc_core: IR keymap rc-imon-rsc not found [ 542.400448][ T50] Registered IR keymap rc-empty [ 542.403967][ T50] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 542.409815][ T50] input: iMON Station as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 542.421530][ T6266] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 542.430347][ T6266] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.439874][ T6266] usb 8-1: config 1 has no interface number 0 [ 542.446206][ T6266] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 542.453319][ T6266] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.613017][T14812] file system registered [ 542.809208][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.922026][T12155] usb 5-1: USB disconnect, device number 57 [ 543.047835][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.237741][ T40] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 543.409444][ T40] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 543.412320][ T40] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.415622][ T40] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 543.419122][ T40] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.424384][ T40] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 543.427730][ T40] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.430398][ T40] usb 6-1: Product: syz [ 543.431787][ T40] usb 6-1: Manufacturer: syz [ 543.438218][ T40] cdc_wdm 6-1:1.0: skipping garbage [ 543.439992][ T40] cdc_wdm 6-1:1.0: skipping garbage [ 543.442351][ T40] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 543.453188][ T5744] ffs_data_put(): freeing [ 543.635659][T14838] tipc: Enabled bearer , priority 0 [ 543.643871][T14838] syzkaller0: MTU too low for tipc bearer [ 543.645784][T12197] usb 6-1: USB disconnect, device number 40 [ 543.646287][T14838] tipc: Disabling bearer [ 543.847985][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.987814][T14844] random: crng reseeded on system resumption [ 544.430416][T14849] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 544.564090][T14850] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 544.567144][T14850] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2509'. [ 544.961208][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.992351][ T5892] usb 8-1: USB disconnect, device number 55 [ 545.091693][T14855] random: crng reseeded on system resumption [ 545.413292][T14866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.418371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.527686][T14868] lo speed is unknown, defaulting to 1000 [ 546.021663][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.088694][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.279614][T14881] Invalid ELF header magic: != ELF [ 546.311385][T14880] random: crng reseeded on system resumption [ 546.407745][T14878] loop9: detected capacity change from 0 to 2640 [ 546.417974][T14878] buffer_io_error: 323 callbacks suppressed [ 546.417986][T14878] Buffer I/O error on dev loop9, logical block 0, async page read [ 546.427076][T14878] Buffer I/O error on dev loop9, logical block 0, async page read [ 546.429647][T14878] Buffer I/O error on dev loop9, logical block 0, async page read [ 546.434441][T14878] Buffer I/O error on dev loop9, logical block 0, async page read [ 546.439708][T14883] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 546.439728][T14878] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 546.444133][T14878] loop9: partition table partially beyond EOD, truncated [ 546.447189][T14883] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 546.461411][T14883] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 546.465680][T14883] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 546.468857][T14883] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 546.471677][T14883] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 546.472741][T14878] loop9: p1 size 1237888941 extends beyond EOD, truncated [ 546.539259][T13438] udevd[13438]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 546.610059][T14885] Invalid logical block size (4608) [ 547.048666][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.172874][ T42] audit: type=1326 audit(1785126283.262:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14899 comm="syz.2.2525" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefec code=0x0 [ 547.688953][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.097970][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.253093][T14913] lo speed is unknown, defaulting to 1000 [ 548.416462][T14921] random: crng reseeded on system resumption [ 548.853978][T14927] random: crng reseeded on system resumption [ 549.127842][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.167508][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.115430][T14942] FAULT_INJECTION: forcing a failure. [ 550.115430][T14942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.119389][T14942] CPU: 3 UID: 0 PID: 14942 Comm: syz.3.2538 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.119406][T14942] Tainted: [L]=SOFTLOCKUP [ 550.119411][T14942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 550.119417][T14942] Call Trace: [ 550.119421][T14942] [ 550.119426][T14942] dump_stack_lvl+0x100/0x190 [ 550.119443][T14942] should_fail_ex.cold+0x5/0xa [ 550.119456][T14942] _copy_from_user+0x2e/0xd0 [ 550.119473][T14942] get_compat_msghdr+0xb3/0x480 [ 550.119490][T14942] ? __pfx_get_compat_msghdr+0x10/0x10 [ 550.119508][T14942] ? rcu_is_watching+0x12/0xc0 [ 550.119525][T14942] ? ___sys_recvmsg+0x177/0x1a0 [ 550.119537][T14942] ? kfree+0x1e5/0x6c0 [ 550.119546][T14942] ? __lock_acquire+0x49f/0x1a40 [ 550.119564][T14942] ___sys_recvmsg+0x193/0x1a0 [ 550.119576][T14942] ? __pfx____sys_recvmsg+0x10/0x10 [ 550.119596][T14942] ? __pfx___might_resched+0x10/0x10 [ 550.119615][T14942] do_recvmmsg+0x54d/0x740 [ 550.119629][T14942] ? __pfx_do_recvmmsg+0x10/0x10 [ 550.119641][T14942] ? find_held_lock+0x2b/0x80 [ 550.119654][T14942] ? ksys_write+0x190/0x250 [ 550.119664][T14942] ? ksys_write+0x190/0x250 [ 550.119679][T14942] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.119695][T14942] __sys_recvmmsg+0x21f/0x270 [ 550.119711][T14942] ? __pfx___sys_recvmmsg+0x10/0x10 [ 550.119727][T14942] ? ksys_write+0x1ac/0x250 [ 550.119739][T14942] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 550.119757][T14942] ? __do_fast_syscall_32+0x98/0x970 [ 550.119771][T14942] ? lockdep_hardirqs_on+0x78/0x100 [ 550.119783][T14942] __do_fast_syscall_32+0xe7/0x970 [ 550.119808][T14942] ? lockdep_hardirqs_on+0x78/0x100 [ 550.119825][T14942] do_fast_syscall_32+0x32/0x70 [ 550.119839][T14942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.119854][T14942] RIP: 0023:0xf7fd2fec [ 550.119868][T14942] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 550.119873][T14942] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 550.119884][T14942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80 [ 550.119891][T14942] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.119897][T14942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 550.119903][T14942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.119910][T14942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.119923][T14942] [ 550.178361][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.267678][ T6266] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 550.302328][T14944] syzkaller0: entered promiscuous mode [ 550.304881][T14944] syzkaller0: entered allmulticast mode [ 550.419257][ T6266] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 550.423134][ T6266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.435387][ T6266] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 041 [ 550.473652][T14960] binder: 14954:14960 ioctl 89fa 80000280 returned -22 [ 550.526328][ T5892] lo speed is unknown, defaulting to 1000 [ 550.609683][T14966] random: crng reseeded on system resumption [ 550.845473][ T6266] (null): failure reading functionality [ 551.217811][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.255960][ T6266] i2c i2c-2: failure reading functionality [ 551.263404][ T6266] i2c i2c-2: connected i2c-tiny-usb device [ 551.275542][ T6266] usb 6-1: USB disconnect, device number 41 [ 551.475103][T14973] Invalid logical block size (8445) [ 551.622334][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 551.626005][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2549'. [ 551.708952][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.711520][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.714270][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.719366][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.721958][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.727683][ T5892] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 551.902206][ T5892] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 551.905189][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.963504][ T5892] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 058 [ 552.180087][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.257765][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.462463][ T5892] (null): failure reading functionality [ 552.538968][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.660020][T15001] netlink: 'syz.1.2555': attribute type 2 has an invalid length. [ 552.724645][ T5892] i2c i2c-2: failure reading functionality [ 552.928780][T14976] i2c i2c-2: failure reading status [ 552.931367][T14976] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 552.934631][T14976] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 552.941057][T14976] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 553.521111][ T5892] i2c i2c-2: connected i2c-tiny-usb device [ 553.807816][ T1349] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 553.969487][ T1349] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 553.974426][ T1349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.985957][ T1349] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 042 [ 554.385823][ T1349] (null): failure reading functionality [ 554.506428][ T5838] usb 5-1: USB disconnect, device number 58 [ 554.591888][ T1349] i2c i2c-3: failure reading functionality [ 554.610197][ T1349] i2c i2c-3: connected i2c-tiny-usb device [ 554.613479][ T1349] usb 6-1: USB disconnect, device number 42 [ 554.737443][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 555.195115][T15036] FAULT_INJECTION: forcing a failure. [ 555.195115][T15036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.200952][T15036] CPU: 2 UID: 0 PID: 15036 Comm: syz.1.2566 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.200969][T15036] Tainted: [L]=SOFTLOCKUP [ 555.200974][T15036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 555.200980][T15036] Call Trace: [ 555.200984][T15036] [ 555.200989][T15036] dump_stack_lvl+0x100/0x190 [ 555.201009][T15036] should_fail_ex.cold+0x5/0xa [ 555.201028][T15036] _copy_from_user+0x2e/0xd0 [ 555.201051][T15036] move_addr_to_kernel+0x65/0x170 [ 555.201071][T15036] __sys_bind+0x11d/0x260 [ 555.201091][T15036] ? __pfx___sys_bind+0x10/0x10 [ 555.201108][T15036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 555.201142][T15036] ? ksys_write+0x1ac/0x250 [ 555.201160][T15036] ? __pfx_ksys_write+0x10/0x10 [ 555.201181][T15036] __ia32_sys_bind+0x71/0xb0 [ 555.201200][T15036] ? lockdep_hardirqs_on+0x78/0x100 [ 555.201222][T15036] __do_fast_syscall_32+0xe7/0x970 [ 555.201244][T15036] ? lockdep_hardirqs_on+0x78/0x100 [ 555.201265][T15036] do_fast_syscall_32+0x32/0x70 [ 555.201289][T15036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.201311][T15036] RIP: 0023:0xf7fb2fec [ 555.201332][T15036] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 555.201340][T15036] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 555.201358][T15036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 555.201369][T15036] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.201380][T15036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.201390][T15036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.201400][T15036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.201426][T15036] [ 555.367852][ T5892] net_ratelimit: 5 callbacks suppressed [ 555.367865][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.372321][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.408163][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.453617][T15056] lo speed is unknown, defaulting to 1000 [ 556.797655][ T5892] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 557.087744][ T5892] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 557.298499][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.801946][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.841806][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.852885][ T5892] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 045 [ 558.259396][ T5892] (null): failure reading functionality [ 558.409758][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.464311][ T5892] i2c i2c-2: failure reading functionality [ 558.467804][ T40] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 558.471131][ T5892] i2c i2c-2: connected i2c-tiny-usb device [ 558.475800][ T5892] usb 7-1: USB disconnect, device number 45 [ 558.627744][ T40] usb 5-1: Using ep0 maxpacket: 8 [ 558.632082][ T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.636436][ T40] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.642376][ T40] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 558.646221][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.649706][ T40] usb 5-1: Product: syz [ 558.651568][ T40] usb 5-1: Manufacturer: syz [ 558.653630][ T40] usb 5-1: SerialNumber: syz [ 558.661728][ T40] usb 5-1: config 0 descriptor?? [ 558.874447][ T40] usb 5-1: USB disconnect, device number 59 [ 558.887865][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.940394][T15090] lo speed is unknown, defaulting to 1000 [ 559.507747][ T5892] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 559.727656][ T5892] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 559.739716][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.888255][ T5892] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 043 [ 559.923904][T15106] openvswitch: netlink: nsh attr 363 is out of range max 3 [ 560.745945][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.746160][ T5892] (null): failure reading functionality [ 560.908847][ T5892] i2c i2c-2: failure reading functionality [ 560.912826][ T5892] i2c i2c-2: connected i2c-tiny-usb device [ 561.037675][ T5809] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 561.048192][ T50] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 561.112028][T15127] i2c i2c-2: failure reading status [ 561.113561][T15127] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 561.115563][T15127] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 561.118438][T15127] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 561.189056][ T5809] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 561.192287][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.198188][ T5809] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 060 [ 561.200798][ T50] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 561.204250][ T50] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 561.207185][ T50] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 561.209793][ T50] usb 7-1: config 220 has no interface number 1 [ 561.211977][ T50] usb 7-1: config 220 interface 0 has no altsetting 0 [ 561.214490][ T50] usb 7-1: config 220 interface 76 has no altsetting 0 [ 561.219488][ T50] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 561.222762][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.225472][ T50] usb 7-1: Product: syz [ 561.226671][ T50] usb 7-1: Manufacturer: syz [ 561.228168][ T50] usb 7-1: SerialNumber: syz [ 561.454238][ T50] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 561.456416][ T50] uvcvideo 7-1:220.0: No valid video chain found. [ 561.457751][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.460921][ T50] usb 7-1: USB disconnect, device number 46 [ 561.625473][T15134] random: crng reseeded on system resumption [ 561.637809][ T5809] (null): failure reading functionality [ 561.778582][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.826662][T15124] i2c i2c-2: Failed to register i2c client stm32g0-typec at 0x03 (-16) [ 562.078237][ T5809] i2c i2c-3: failure reading functionality [ 562.366164][ T50] usb 6-1: USB disconnect, device number 43 [ 562.408750][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.427697][ T1041] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 562.468466][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.473872][ T5809] i2c i2c-3: connected i2c-tiny-usb device [ 562.480452][ T5809] usb 5-1: USB disconnect, device number 60 [ 562.531806][T15141] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 562.586279][T15142] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2598'. [ 562.596246][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 562.602721][ T1041] usb 8-1: Using ep0 maxpacket: 8 [ 562.657870][ T1041] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.661156][ T1041] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.683506][ T1041] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 562.686462][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.690087][ T1041] usb 8-1: Product: syz [ 562.691442][ T1041] usb 8-1: Manufacturer: syz [ 562.693288][ T1041] usb 8-1: SerialNumber: syz [ 562.708102][ T1041] usb 8-1: config 0 descriptor?? [ 562.723545][T15142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2598'. [ 562.838151][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.841888][T12155] Process accounting resumed [ 562.950814][ T1041] usb 8-1: USB disconnect, device number 56 [ 563.629483][T15164] tipc: Enabled bearer , priority 0 [ 563.634682][T15164] tipc: Resetting bearer [ 563.847838][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.977628][ T1041] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 564.139047][ T1041] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 564.141934][ T1041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.150237][ T1041] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 057 [ 564.450711][T15163] tipc: Disabling bearer [ 564.487854][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.555796][ T1041] (null): failure reading functionality [ 564.713109][ T50] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 564.811943][T15180] random: crng reseeded on system resumption [ 564.957578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 565.097308][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.105344][ T50] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 565.109661][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.132177][ T1041] i2c i2c-2: failure reading functionality [ 565.152498][ T50] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 044 [ 565.331616][T15168] i2c i2c-2: failure reading status [ 565.333361][T15168] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 565.335621][T15168] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 565.340526][T15168] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 565.556994][ T50] (null): failure reading functionality [ 565.574870][ T1041] i2c i2c-2: connected i2c-tiny-usb device [ 565.617265][ T6511] vivid-000: reconnect [ 565.651821][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 565.659112][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 565.664656][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 565.672255][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 565.676900][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.751024][T15174] i2c i2c-2: Failed to register i2c client stm32g0-typec at 0x03 (-16) [ 565.754131][ T50] i2c i2c-3: failure reading functionality [ 565.759932][ T50] i2c i2c-3: connected i2c-tiny-usb device [ 565.767340][ T50] usb 6-1: USB disconnect, device number 44 [ 565.910699][T15185] lo speed is unknown, defaulting to 1000 [ 566.057820][ T5838] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 566.060060][T15185] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.062733][T15185] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.065074][T15185] bridge_slave_0: entered allmulticast mode [ 566.067980][T15185] bridge_slave_0: entered promiscuous mode [ 566.071378][T15185] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.073749][T15185] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.076257][T15185] bridge_slave_1: entered allmulticast mode [ 566.079255][T15185] bridge_slave_1: entered promiscuous mode [ 566.095031][T15185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.099956][T15185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.116277][T15185] team0: Port device team_slave_0 added [ 566.119769][T15185] team0: Port device team_slave_1 added [ 566.134266][T15185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.136447][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.144609][T15185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.148962][T15185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.152420][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.160377][T15185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.177969][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.186615][T15185] hsr_slave_0: entered promiscuous mode [ 566.189643][T15185] hsr_slave_1: entered promiscuous mode [ 566.192187][T15185] debugfs: 'hsr0' already exists in 'hsr' [ 566.194001][T15185] Cannot create hsr debugfs directory [ 566.207664][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 566.211405][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.214732][ T5838] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.220042][ T5838] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 566.223265][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.226568][ T5838] usb 5-1: Product: syz [ 566.228914][ T5838] usb 5-1: Manufacturer: syz [ 566.230916][ T5838] usb 5-1: SerialNumber: syz [ 566.235182][ T5838] usb 5-1: config 0 descriptor?? [ 566.326626][T15185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.460006][T15193] i2c i2c-2: failure reading functionality [ 566.461782][ T5809] usb 8-1: USB disconnect, device number 57 [ 566.462903][ T50] usb 5-1: USB disconnect, device number 61 [ 566.463092][T15185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.648853][T15185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.754296][T15185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.889246][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.913627][T15185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 566.918242][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.921425][T15185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 566.927186][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.931507][T15185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 566.936127][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.939049][T15185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 566.945316][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.181275][T15185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.207764][T15185] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.208521][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.231258][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.233513][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.248980][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.251562][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.391054][T15224] random: crng reseeded on system resumption [ 567.529041][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.769807][T14267] Bluetooth: hci0: command tx timeout [ 567.993874][T15185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.087431][T15185] veth0_vlan: entered promiscuous mode [ 568.128894][T15185] veth1_vlan: entered promiscuous mode [ 568.213998][T15185] veth0_macvtap: entered promiscuous mode [ 568.238264][T15185] veth1_macvtap: entered promiscuous mode [ 568.248861][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.291322][T15241] SET target dimension over the limit! [ 568.316910][T15242] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.320408][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2619'. [ 568.328575][T15185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.342154][T15185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.351499][T14594] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.363035][T14594] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.371363][T14594] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.378728][T14594] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.444608][T11708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.451377][T11708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.474222][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.481966][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.543728][T15249] FAULT_INJECTION: forcing a failure. [ 568.543728][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 568.547661][T15249] CPU: 0 UID: 0 PID: 15249 Comm: syz.2.2612 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.547679][T15249] Tainted: [L]=SOFTLOCKUP [ 568.547683][T15249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 568.547690][T15249] Call Trace: [ 568.547694][T15249] [ 568.547699][T15249] dump_stack_lvl+0x100/0x190 [ 568.547715][T15249] should_fail_ex.cold+0x5/0xa [ 568.547728][T15249] should_failslab+0xc2/0x120 [ 568.547743][T15249] __kmalloc_noprof+0xfc/0x820 [ 568.547758][T15249] ? kasan_save_track+0x14/0x30 [ 568.547776][T15249] ? ethnl_default_start+0x15a/0x3f0 [ 568.547797][T15249] ethnl_default_start+0x15a/0x3f0 [ 568.547814][T15249] ? __pfx_ethnl_default_start+0x10/0x10 [ 568.547830][T15249] genl_start+0x601/0x970 [ 568.547856][T15249] __netlink_dump_start+0x60e/0x990 [ 568.547879][T15249] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 568.547919][T15249] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 568.547947][T15249] ? __pfx_genl_get_cmd+0x10/0x10 [ 568.547966][T15249] ? __pfx_genl_start+0x10/0x10 [ 568.547985][T15249] ? __pfx_genl_dumpit+0x10/0x10 [ 568.547999][T15249] ? __pfx_genl_done+0x10/0x10 [ 568.548013][T15249] ? ____sys_sendmsg+0xa4d/0xbe0 [ 568.548024][T15249] ? ___sys_sendmsg+0x190/0x1e0 [ 568.548034][T15249] ? __radix_tree_lookup+0x217/0x2b0 [ 568.548050][T15249] genl_rcv_msg+0x471/0x800 [ 568.548065][T15249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.548078][T15249] ? __pfx_ethnl_default_start+0x10/0x10 [ 568.548088][T15249] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 568.548098][T15249] ? __pfx_ethnl_default_done+0x10/0x10 [ 568.548117][T15249] ? __lock_acquire+0x49f/0x1a40 [ 568.548137][T15249] netlink_rcv_skb+0x159/0x420 [ 568.548149][T15249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.548163][T15249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.548181][T15249] ? netlink_deliver_tap+0x1ae/0xcc0 [ 568.548194][T15249] genl_rcv+0x28/0x40 [ 568.548206][T15249] netlink_unicast+0x585/0x850 [ 568.548220][T15249] ? __pfx_netlink_unicast+0x10/0x10 [ 568.548236][T15249] netlink_sendmsg+0x8b0/0xda0 [ 568.548250][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.548264][T15249] ? apparmor_socket_sendmsg+0x15b/0x270 [ 568.548279][T15249] ____sys_sendmsg+0xa4d/0xbe0 [ 568.548289][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.548302][T15249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.548320][T15249] ___sys_sendmsg+0x190/0x1e0 [ 568.548333][T15249] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.548351][T15249] ? find_held_lock+0x2b/0x80 [ 568.548374][T15249] __sys_sendmsg+0x160/0x210 [ 568.548389][T15249] ? __pfx___sys_sendmsg+0x10/0x10 [ 568.548408][T15249] ? __pfx_ksys_write+0x10/0x10 [ 568.548426][T15249] __do_fast_syscall_32+0xe7/0x970 [ 568.548440][T15249] ? lockdep_hardirqs_on+0x78/0x100 [ 568.548454][T15249] do_fast_syscall_32+0x32/0x70 [ 568.548469][T15249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.548483][T15249] RIP: 0023:0xf7f53fec [ 568.548496][T15249] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 568.548501][T15249] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 568.548512][T15249] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 568.548519][T15249] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.548525][T15249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.548532][T15249] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 568.548538][T15249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.548552][T15249] [ 568.737635][ T5838] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 568.890164][ T5838] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 568.892968][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.901106][ T5838] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 045 [ 569.288366][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.303137][ T5838] (null): failure reading functionality [ 569.339015][ T9] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 569.517719][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 569.520942][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 569.857909][T14267] Bluetooth: hci0: command tx timeout [ 569.918038][ T9] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 569.920933][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.923460][ T9] usb 8-1: Product: syz [ 569.924883][ T9] usb 8-1: Manufacturer: syz [ 569.926446][ T9] usb 8-1: SerialNumber: syz [ 569.931550][ T9] usb 8-1: config 0 descriptor?? [ 569.963990][T15267] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.2626'. [ 570.248103][T15265] usb 8-1: USB disconnect, device number 58 [ 570.488257][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.569543][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.798426][T15275] Unsupported ieee802154 address type: 0 [ 570.893662][T15276] random: crng reseeded on system resumption [ 571.378582][T15245] i2c i2c-2: failure writing data [ 571.379335][ T5838] i2c i2c-2: failure reading functionality [ 571.381945][T15245] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 571.384348][T15245] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 571.387457][T15245] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 571.402028][ T5838] i2c i2c-2: connected i2c-tiny-usb device [ 571.410785][ T5838] usb 6-1: USB disconnect, device number 45 [ 571.429380][T15279] program syz.1.2630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.528579][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.835025][T15295] lo speed is unknown, defaulting to 1000 [ 571.927787][T14267] Bluetooth: hci0: command tx timeout [ 571.955526][T15296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2632'. [ 572.082990][T15306] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 572.533407][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.539247][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.578267][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.817819][ T5838] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 572.888071][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 572.968288][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 572.973097][ T5838] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.979131][ T5838] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 572.982927][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.986234][ T5838] usb 7-1: Product: syz [ 572.988160][ T5838] usb 7-1: Manufacturer: syz [ 572.990115][ T5838] usb 7-1: SerialNumber: syz [ 572.996639][ T5838] usb 7-1: config 0 descriptor?? [ 573.050333][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 573.053951][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.062522][ T9] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 046 [ 573.204382][ T5529] usb 7-1: USB disconnect, device number 47 [ 573.459907][T15317] FAULT_FLAG_ALLOW_RETRY missing 801 [ 573.461672][T15317] CPU: 0 UID: 0 PID: 15317 Comm: syz.0.2641 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.461691][T15317] Tainted: [L]=SOFTLOCKUP [ 573.461695][T15317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.461702][T15317] Call Trace: [ 573.461706][T15317] [ 573.461711][T15317] dump_stack_lvl+0x100/0x190 [ 573.461727][T15317] handle_userfault.cold+0x54/0x65 [ 573.461757][T15317] ? do_raw_spin_unlock+0x145/0x1e0 [ 573.461772][T15317] ? _raw_spin_unlock+0x28/0x50 [ 573.461783][T15317] ? __free_frozen_pages+0x751/0x1090 [ 573.461804][T15317] ? __pfx_handle_userfault+0x10/0x10 [ 573.461823][T15317] ? rcu_read_unlock+0x2d/0xb0 [ 573.461834][T15317] ? rcu_read_unlock+0x2d/0xb0 [ 573.461849][T15317] do_anonymous_page+0x1a56/0x2080 [ 573.461865][T15317] __handle_mm_fault+0x1d2c/0x2a00 [ 573.461879][T15317] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 573.461893][T15317] ? __pfx___handle_mm_fault+0x10/0x10 [ 573.461905][T15317] ? pte_offset_map_lock+0x174/0x320 [ 573.461920][T15317] ? find_held_lock+0x2b/0x80 [ 573.461938][T15317] ? follow_page_pte+0x4d0/0x13f0 [ 573.461956][T15317] handle_mm_fault+0x37b/0xa30 [ 573.461971][T15317] __get_user_pages+0x1178/0x32a0 [ 573.462019][T15317] ? __pfx___get_user_pages+0x10/0x10 [ 573.462046][T15317] populate_vma_page_range+0x267/0x3f0 [ 573.462065][T15317] ? __pfx_populate_vma_page_range+0x10/0x10 [ 573.462085][T15317] ? vma_set_page_prot+0xb1/0x120 [ 573.462103][T15317] mprotect_fixup+0x955/0xe30 [ 573.462119][T15317] ? __pfx_mprotect_fixup+0x10/0x10 [ 573.462141][T15317] ? __pfx_mas_prev+0x10/0x10 [ 573.462160][T15317] do_mprotect_pkey+0xa4b/0xef0 [ 573.462176][T15317] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 573.462193][T15317] ? find_held_lock+0x2b/0x80 [ 573.462206][T15317] ? __fget_files+0x215/0x3d0 [ 573.462227][T15317] __ia32_sys_mprotect+0x75/0xb0 [ 573.462238][T15317] ? lockdep_hardirqs_on+0x78/0x100 [ 573.462250][T15317] __do_fast_syscall_32+0xe7/0x970 [ 573.462268][T15317] do_fast_syscall_32+0x32/0x70 [ 573.462282][T15317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.462302][T15317] RIP: 0023:0xf6fdefec [ 573.462316][T15317] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 573.462322][T15317] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 000000000000007d [ 573.462334][T15317] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 573.462342][T15317] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 573.462349][T15317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.462355][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.462363][T15317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.462378][T15317] [ 573.462846][ T9] (null): failure reading functionality [ 573.470432][T15317] tmpfs: Bad value for 'mpol' [ 573.608061][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.621709][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.700661][T15324] random: crng reseeded on system resumption [ 574.007725][T14267] Bluetooth: hci0: command tx timeout [ 574.187667][ T5529] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 574.337628][ T5529] usb 8-1: Using ep0 maxpacket: 8 [ 574.342242][ T5529] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.346534][ T5529] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.354491][ T5529] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 574.358489][ T5529] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.361921][ T5529] usb 8-1: Product: syz [ 574.363716][ T5529] usb 8-1: Manufacturer: syz [ 574.365672][ T5529] usb 8-1: SerialNumber: syz [ 574.374068][ T5529] usb 8-1: No union descriptors [ 574.377500][ T5529] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 574.380314][ T5529] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 574.589542][T15329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.592633][T15329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.648962][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.528104][ T9] i2c i2c-2: failure reading functionality [ 575.529193][T15313] i2c i2c-2: failure writing data [ 575.531400][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 575.533232][T15313] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 575.536906][T15313] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 575.545118][T15313] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 575.556759][ T5529] usb 6-1: USB disconnect, device number 46 [ 575.688046][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.290052][T15356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.292949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.548028][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.649736][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.730755][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.960104][T12155] usb 8-1: USB disconnect, device number 59 [ 577.244592][T15371] random: crng reseeded on system resumption [ 577.699529][T12155] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 577.769473][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.850579][T12155] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 577.853468][T12155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.859077][T12155] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 062 [ 577.980513][T15381] xt_HMARK: spi-set and port-set can't be combined [ 578.077811][T15386] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.2657'. [ 578.260072][T12155] (null): failure reading functionality [ 578.308134][ T1349] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 578.819828][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.912157][T15402] ntfs3(nullb0): Primary boot signature is not NTFS. [ 578.915836][T15402] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 579.187731][ T5529] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 579.337634][ T5529] usb 7-1: Using ep0 maxpacket: 8 [ 579.341023][ T5529] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.344079][ T5529] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.350092][ T5529] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 579.352793][ T5529] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.355265][ T5529] usb 7-1: Product: syz [ 579.356531][ T5529] usb 7-1: Manufacturer: syz [ 579.358028][ T5529] usb 7-1: SerialNumber: syz [ 579.362398][ T5529] usb 7-1: No union descriptors [ 579.366200][ T5529] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 579.368250][ T5529] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 579.539513][T15418] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2665'. [ 579.565230][T15404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.570775][T15404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.688616][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.847985][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.341166][T12155] i2c i2c-2: failure reading functionality [ 580.343098][T15375] i2c i2c-2: failure writing data [ 580.344873][T15375] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 580.347898][T12155] i2c i2c-2: connected i2c-tiny-usb device [ 580.349891][T15375] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 580.353523][T15375] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 580.368839][ T5529] usb 5-1: USB disconnect, device number 62 [ 580.898092][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.004158][T15430] lo speed is unknown, defaulting to 1000 [ 581.927853][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.964955][ T5892] usb 7-1: USB disconnect, device number 48 [ 582.727928][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.967840][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.007845][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.057812][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.768020][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.087969][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.098005][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.728082][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.128026][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.178473][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.818350][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.011453][T15468] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2673'. [ 589.060526][T15463] random: crng reseeded on system resumption [ 589.876396][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.163520][T12155] IPVS: starting estimator thread 0... [ 590.247668][ T9] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 590.267656][T15487] IPVS: using max 44 ests per chain, 105600 per kthread [ 590.399355][ T9] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 590.402321][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.416032][ T9] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 060 [ 590.487771][ T5838] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 590.637775][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 590.644257][ T5838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.649117][ T5838] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.658671][ T5838] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 590.663854][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.666961][ T5838] usb 7-1: Product: syz [ 590.669788][ T5838] usb 7-1: Manufacturer: syz [ 590.671692][ T5838] usb 7-1: SerialNumber: syz [ 590.680486][ T5838] usb 7-1: No union descriptors [ 590.684056][ T5838] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 590.686636][ T5838] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 590.735596][T15493] lo speed is unknown, defaulting to 1000 [ 590.819420][ T9] (null): failure reading functionality [ 590.880405][T15489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.883141][T15489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.887799][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.592555][ T42] audit: type=1326 audit(1785126327.692:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2682" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fec code=0x0 [ 591.852959][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.938062][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.991714][T15512] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.2683'. [ 592.530008][T15515] random: crng reseeded on system resumption [ 592.831094][T12155] usb 7-1: USB disconnect, device number 49 [ 592.948040][ T9] i2c i2c-2: failure reading functionality [ 592.948066][T15472] i2c i2c-2: failure writing data [ 592.952744][T15472] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 592.960248][T15472] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 592.968335][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.968501][T15472] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 593.038000][T15520] fuse: Bad value for 'fd' [ 593.273381][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 593.279865][ T9] usb 8-1: USB disconnect, device number 60 [ 593.419119][T15536] lo speed is unknown, defaulting to 1000 [ 593.558598][ T5529] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 593.637674][ T5809] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 593.737641][ T5529] usb 6-1: Using ep0 maxpacket: 8 [ 593.741614][ T5529] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.747942][ T5529] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 593.751437][ T5529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.754773][ T5529] usb 6-1: Product: syz [ 593.756716][ T5529] usb 6-1: Manufacturer: syz [ 593.760743][ T5529] usb 6-1: SerialNumber: syz [ 593.765815][ T5529] usb 6-1: config 0 descriptor?? [ 593.788996][ T5809] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 593.791949][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.799849][ T5809] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 063 [ 593.977733][ T5887] usb 6-1: USB disconnect, device number 47 [ 594.008606][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.207852][ T5809] (null): failure reading functionality [ 594.362860][T15542] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2693'. [ 594.404445][T15546] fuse: Bad value for 'fd' [ 594.648609][T15551] random: crng reseeded on system resumption [ 595.050311][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.117931][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.482359][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.503390][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 595.518680][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 595.526727][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 595.535553][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 595.698900][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.794566][ T5752] syz_tun (unregistering): left allmulticast mode [ 596.086971][T15560] lo speed is unknown, defaulting to 1000 [ 596.090895][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.247927][ T5809] i2c i2c-2: failure reading functionality [ 596.247965][T15535] i2c i2c-2: failure writing data [ 596.252132][T15535] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 596.255329][T15535] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 596.260893][ T5809] i2c i2c-2: connected i2c-tiny-usb device [ 596.262056][T15535] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 596.268211][ T5887] usb 5-1: USB disconnect, device number 63 [ 596.295663][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.298899][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.301210][T15560] bridge_slave_0: entered allmulticast mode [ 596.304082][T15560] bridge_slave_0: entered promiscuous mode [ 596.309282][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.311949][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.314310][T15560] bridge_slave_1: entered allmulticast mode [ 596.316972][T15560] bridge_slave_1: entered promiscuous mode [ 596.343200][T15560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.350124][T15560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.368132][T15560] team0: Port device team_slave_0 added [ 596.371358][T15560] team0: Port device team_slave_1 added [ 596.385529][T15560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.387966][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.395747][T15560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.400607][T15560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.402812][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.410852][T15560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.438403][T15560] hsr_slave_0: entered promiscuous mode [ 596.440637][T15560] hsr_slave_1: entered promiscuous mode [ 596.442705][T15560] debugfs: 'hsr0' already exists in 'hsr' [ 596.444485][T15560] Cannot create hsr debugfs directory [ 596.688476][T15560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.775605][T15560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.848577][T15560] team0: Port device netdevsim1 removed [ 596.853308][T15560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.045812][T15560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.159375][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.269257][T15560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 597.281596][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.286149][T15560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 597.344796][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.349153][T15560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 597.362541][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.366648][T15560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 597.375438][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.444186][T15560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.451648][T15600] fuse: Bad value for 'fd' [ 597.455628][T15560] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.477096][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.479434][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.498122][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.500386][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.607920][T14267] Bluetooth: hci1: command tx timeout [ 597.709910][T15612] random: crng reseeded on system resumption [ 597.840421][T15560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.916760][T15560] veth0_vlan: entered promiscuous mode [ 597.922986][T15560] veth1_vlan: entered promiscuous mode [ 597.937802][ T5887] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 597.942140][T15560] veth0_macvtap: entered promiscuous mode [ 597.947189][T15560] veth1_macvtap: entered promiscuous mode [ 597.958339][T15560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.964206][T15560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.974632][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.977390][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.980820][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.983681][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.026535][T11708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.031012][T11708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.043094][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.045531][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.168333][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.171551][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.318058][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.407229][T15624] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.2709'. [ 598.411407][ T5892] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 598.577765][ T5892] usb 8-1: Using ep0 maxpacket: 8 [ 598.607439][ T5892] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.609677][ T5887] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 598.616000][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.627871][ T5887] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 050 [ 598.628662][ T5892] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.678292][ T5892] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 598.686036][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.694373][ T5892] usb 8-1: Product: syz [ 598.701356][ T5892] usb 8-1: Manufacturer: syz [ 598.708795][ T5892] usb 8-1: SerialNumber: syz [ 598.811994][ T5892] usb 8-1: No union descriptors [ 598.818902][ T5892] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 598.821926][ T5892] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 599.096790][T15620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.143418][T15620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.208745][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.267922][ T5887] (null): failure reading functionality [ 599.488566][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.502674][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.508337][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.518302][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.528333][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.688062][ T5747] Bluetooth: hci1: command tx timeout [ 599.858491][ T5744] syz_tun (unregistering): left allmulticast mode [ 599.934573][T15635] lo speed is unknown, defaulting to 1000 [ 600.095423][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.097772][T15635] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.100059][T15635] bridge_slave_0: entered allmulticast mode [ 600.102661][T15635] bridge_slave_0: entered promiscuous mode [ 600.105800][T15635] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.108151][T15635] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.110447][T15635] bridge_slave_1: entered allmulticast mode [ 600.112995][T15635] bridge_slave_1: entered promiscuous mode [ 600.129209][T15635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.133545][T15635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.149574][T15635] team0: Port device team_slave_0 added [ 600.152647][T15635] team0: Port device team_slave_1 added [ 600.165307][T15635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.167487][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.175977][T15635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.180266][T15635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.182484][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.190466][T15635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.212210][T15635] hsr_slave_0: entered promiscuous mode [ 600.214766][T15635] hsr_slave_1: entered promiscuous mode [ 600.215007][ T42] audit: type=1326 audit(1785126336.302:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15654 comm="syz.1.2712" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fec code=0x0 [ 600.216807][T15635] debugfs: 'hsr0' already exists in 'hsr' [ 600.226874][T15635] Cannot create hsr debugfs directory [ 600.248229][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.339541][T15635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.449801][T15635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.546352][T15635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.628322][T15635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.661293][ T5809] usb 8-1: USB disconnect, device number 61 [ 600.754942][T15635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 600.759126][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 600.762307][T15635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 600.766324][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.777638][T15635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 600.785427][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.788814][T15635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 600.792769][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.818316][T15635] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.820573][T15635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.822973][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.825121][T15635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.860363][T15635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.871431][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.875177][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.883553][T15635] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.892435][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.894540][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.900128][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.902168][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.189126][T15635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.209927][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.213765][T15635] veth0_vlan: entered promiscuous mode [ 601.222985][T15635] veth1_vlan: entered promiscuous mode [ 601.254339][T15635] veth0_macvtap: entered promiscuous mode [ 601.261115][T15635] veth1_macvtap: entered promiscuous mode [ 601.274041][T15635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.285307][T15635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.288306][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.298330][ T5887] i2c i2c-2: failure reading functionality [ 601.298365][T15604] i2c i2c-2: failure writing data [ 601.305615][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.305682][T15604] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 601.308125][ T5887] i2c i2c-2: connected i2c-tiny-usb device [ 601.309693][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.310953][T15604] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 601.318936][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.321334][T15604] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 601.323600][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.343082][T13766] usb 7-1: USB disconnect, device number 50 [ 601.387249][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.390463][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.452033][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.459373][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.610962][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 601.687707][ T5747] Bluetooth: hci3: command tx timeout [ 601.767701][ T5747] Bluetooth: hci1: command tx timeout [ 602.037988][T15697] random: crng reseeded on system resumption [ 602.213340][T15698] random: crng reseeded on system resumption [ 602.481668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.061165][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 603.207704][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 603.214218][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.217508][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.223359][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 603.226332][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.232230][ T24] usb 5-1: Product: syz [ 603.233575][ T24] usb 5-1: Manufacturer: syz [ 603.235120][ T24] usb 5-1: SerialNumber: syz [ 603.246059][ T24] usb 5-1: No union descriptors [ 603.252348][ T24] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 603.255725][ T24] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 603.447741][T15707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.452735][T15707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.534462][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.723042][T15725] lo speed is unknown, defaulting to 1000 [ 603.767670][ T5747] Bluetooth: hci3: command tx timeout [ 603.789520][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 603.847682][ T5747] Bluetooth: hci1: command tx timeout [ 604.497765][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.568540][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.049073][T15748] random: crng reseeded on system resumption [ 605.411532][T15753] random: crng reseeded on system resumption [ 605.848238][ T5747] Bluetooth: hci3: command tx timeout [ 605.850055][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.035755][ T9] usb 5-1: USB disconnect, device number 64 [ 606.482062][ T9] IPVS: starting estimator thread 0... [ 606.484213][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'. [ 606.577730][T15769] IPVS: using max 44 ests per chain, 105600 per kthread [ 606.889445][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.527961][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.667815][ T42] audit: type=1326 audit(1785126343.722:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.0.2739" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 607.860724][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.929317][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.987632][ T5747] Bluetooth: hci3: command tx timeout [ 608.507311][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.519889][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.969609][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.980241][T15796] random: crng reseeded on system resumption [ 609.052196][T15798] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.2744'. [ 609.299146][T13766] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 609.870102][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2745'. [ 609.967726][T13766] usb 7-1: Using ep0 maxpacket: 8 [ 609.971728][T13766] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.977737][T13766] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.984830][T13766] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 609.991132][T13766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.993968][T13766] usb 7-1: Product: syz [ 610.016640][T13766] usb 7-1: Manufacturer: syz [ 610.020073][T13766] usb 7-1: SerialNumber: syz [ 610.026507][T13766] usb 7-1: No union descriptors [ 610.029768][T13766] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 610.032357][T13766] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 610.060932][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.226728][T15793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.229634][T15793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.570701][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.054248][T15827] random: crng reseeded on system resumption [ 611.137738][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.868830][ T61] usb 7-1: USB disconnect, device number 51 [ 611.968101][T15841] random: crng reseeded on system resumption [ 612.020303][ T5887] IPVS: starting estimator thread 0... [ 612.023202][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'. [ 612.107692][T15845] IPVS: using max 44 ests per chain, 105600 per kthread [ 612.226136][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.610798][T15853] lo speed is unknown, defaulting to 1000 [ 613.292570][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.660265][T15869] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.2762'. [ 613.791141][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.917771][ T5887] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 614.067650][ T5887] usb 8-1: Using ep0 maxpacket: 8 [ 614.073379][ T5887] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.078310][ T5887] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.090290][ T5887] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 614.095140][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.100022][ T5887] usb 8-1: Product: syz [ 614.101316][ T5887] usb 8-1: Manufacturer: syz [ 614.106266][ T5887] usb 8-1: SerialNumber: syz [ 614.111008][ T5887] usb 8-1: No union descriptors [ 614.115348][ T5887] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 614.117400][ T5887] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 614.213107][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'. [ 614.311906][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.316867][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.337758][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.378317][T15891] random: crng reseeded on system resumption [ 615.267863][ T5809] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 615.272238][ T42] audit: type=1326 audit(1785126351.362:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.0.2772" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 615.455681][ T5809] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 615.459219][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.516827][ T5809] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 052 [ 615.561273][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.791591][T15907] random: crng reseeded on system resumption [ 615.893140][ T5809] (null): failure reading functionality [ 616.159067][ T5809] i2c i2c-2: failure reading functionality [ 616.166621][ T5809] i2c i2c-2: connected i2c-tiny-usb device [ 616.366761][T15900] i2c i2c-2: failure reading status [ 616.375802][T15900] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 616.379510][T15900] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 616.383131][T15900] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 616.712337][ T5809] usb 8-1: USB disconnect, device number 62 [ 616.723916][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.817900][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.437398][T15931] random: crng reseeded on system resumption [ 617.771164][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.961757][ T9] usb 7-1: USB disconnect, device number 52 [ 618.055952][T15940] syzkaller0: entered promiscuous mode [ 618.063434][T15940] syzkaller0: entered allmulticast mode [ 618.088080][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.179574][T15943] random: crng reseeded on system resumption [ 618.541566][ T42] audit: type=1326 audit(1785126354.632:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.0.2785" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 618.728794][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.730828][T11708] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.078860][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.200620][T15962] gfs2: error -5 reading superblock [ 619.352781][T15964] lo speed is unknown, defaulting to 1000 [ 619.812787][ T42] audit: type=1326 audit(1785126355.902:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.0.2792" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 619.847991][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.879562][T15974] random: crng reseeded on system resumption [ 619.937672][ T9] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 620.088064][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.100088][ T9] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 620.113798][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.130637][ T9] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 063 [ 620.529885][ T9] (null): failure reading functionality [ 620.788981][ T9] i2c i2c-2: failure reading functionality [ 620.802626][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 620.890344][T15985] lo speed is unknown, defaulting to 1000 [ 620.991597][T15968] i2c i2c-2: failure reading status [ 620.993292][T15968] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 621.000394][T15968] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 621.011294][T15968] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 621.128309][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.193647][T15993] random: crng reseeded on system resumption [ 621.254113][ T5887] usb 8-1: USB disconnect, device number 63 [ 621.766969][ T42] audit: type=1326 audit(1785126357.852:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15996 comm="syz.0.2800" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 621.848314][T13766] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 622.072665][T13766] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 622.658796][T13766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.888602][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.071729][T16015] random: crng reseeded on system resumption [ 623.301940][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.860292][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.863184][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.086819][T13766] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 053 [ 624.338489][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.358603][T13766] (null): failure reading functionality [ 624.363957][T16029] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.2808'. [ 624.477770][ T61] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 624.631974][T13766] i2c i2c-2: failure reading functionality [ 624.635871][T13766] i2c i2c-2: connected i2c-tiny-usb device [ 624.659154][ T61] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 624.662132][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.667822][ T61] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 064 [ 624.834442][T15995] i2c i2c-2: failure reading status [ 624.836135][T15995] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 624.838362][T15995] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 624.841357][T15995] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 624.846520][ T5892] usb 7-1: USB disconnect, device number 53 [ 624.914072][T16033] random: crng reseeded on system resumption [ 625.075387][ T61] (null): failure reading functionality [ 625.146788][ T5747] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 625.150191][ T5747] CPU: 3 UID: 0 PID: 5747 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.150212][ T5747] Tainted: [L]=SOFTLOCKUP [ 625.150217][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 625.150225][ T5747] Workqueue: hci3 hci_rx_work [ 625.150244][ T5747] Call Trace: [ 625.150248][ T5747] [ 625.150254][ T5747] dump_stack_lvl+0x100/0x190 [ 625.150271][ T5747] sysfs_warn_dup.cold+0x1c/0x28 [ 625.150299][ T5747] sysfs_create_dir_ns+0x24b/0x2b0 [ 625.150319][ T5747] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 625.150335][ T5747] ? find_held_lock+0x2b/0x80 [ 625.150352][ T5747] ? kobject_add_internal+0x25f/0x930 [ 625.150369][ T5747] ? kobject_add_internal+0x25f/0x930 [ 625.150387][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 625.150400][ T5747] kobject_add_internal+0x2c8/0x930 [ 625.150419][ T5747] kobject_add+0x16a/0x1e0 [ 625.150435][ T5747] ? __pfx_kobject_add+0x10/0x10 [ 625.150451][ T5747] ? class_to_subsys+0x10f/0x150 [ 625.150466][ T5747] ? kobject_put+0xb9/0x640 [ 625.150481][ T5747] ? _raw_spin_unlock+0x28/0x50 [ 625.150497][ T5747] device_add+0x294/0x1970 [ 625.150514][ T5747] ? __pfx_dev_set_name+0x10/0x10 [ 625.150533][ T5747] ? __pfx_device_add+0x10/0x10 [ 625.150551][ T5747] ? mgmt_send_event_skb+0x2fb/0x460 [ 625.150571][ T5747] hci_conn_add_sysfs+0x1a3/0x260 [ 625.150587][ T5747] le_conn_complete_evt+0x11eb/0x1f60 [ 625.150606][ T5747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 625.150619][ T5747] ? hci_event_packet+0x186/0xcd0 [ 625.150631][ T5747] ? hci_event_packet+0x186/0xcd0 [ 625.150647][ T5747] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 625.150662][ T5747] ? skb_pull_data+0x15f/0x1e0 [ 625.150675][ T5747] hci_le_meta_evt+0x34a/0x5f0 [ 625.150689][ T5747] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 625.150704][ T5747] hci_event_packet+0x51c/0xcd0 [ 625.150717][ T5747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 625.150731][ T5747] ? __pfx_hci_event_packet+0x10/0x10 [ 625.150746][ T5747] ? kcov_remote_start+0x384/0x670 [ 625.150762][ T5747] ? lockdep_hardirqs_on+0x78/0x100 [ 625.150778][ T5747] hci_rx_work+0x451/0xfc0 [ 625.150795][ T5747] process_one_work+0xa23/0x1940 [ 625.150817][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 625.150838][ T5747] ? __pfx_hci_rx_work+0x10/0x10 [ 625.150851][ T5747] worker_thread+0x5ef/0xe50 [ 625.150872][ T5747] ? kthread+0x13a/0x450 [ 625.150886][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 625.150901][ T5747] kthread+0x370/0x450 [ 625.150914][ T5747] ? __pfx_kthread+0x10/0x10 [ 625.150929][ T5747] ret_from_fork+0x72b/0xd50 [ 625.150943][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 625.150958][ T5747] ? __switch_to+0x800/0x10f0 [ 625.150975][ T5747] ? __pfx_kthread+0x10/0x10 [ 625.150990][ T5747] ret_from_fork_asm+0x1a/0x30 [ 625.151013][ T5747] [ 625.151074][ T5747] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 625.241663][ T5747] Bluetooth: hci3: failed to register connection device [ 625.411896][ T61] i2c i2c-2: failure reading functionality [ 625.419366][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.419900][ T61] i2c i2c-2: connected i2c-tiny-usb device [ 625.546342][ T42] audit: type=1326 audit(1785126361.632:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.2.2812" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f53fec code=0x0 [ 625.937777][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.488217][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.459275][T16027] i2c i2c-2: failure reading status [ 627.460995][T16027] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 627.463271][T16027] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 627.468492][T16027] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 627.487189][ T6266] usb 8-1: USB disconnect, device number 64 [ 627.528548][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.677655][ T5887] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 627.859133][ T5887] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 627.861953][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.869761][ T5887] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 065 [ 627.957900][ T6266] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 628.119352][ T6266] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 628.124099][ T6266] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 628.129813][ T6266] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 628.133403][ T6266] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.140626][T16060] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 628.149546][ T6266] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.246202][T16065] loop5: detected capacity change from 0 to 7 [ 628.254917][T16065] Dev loop5: unable to read RDB block 7 [ 628.257252][T16065] loop5: AHDI p1 p3 p4 [ 628.259012][T16065] loop5: partition table partially beyond EOD, truncated [ 628.263759][T16065] loop5: p1 size 100679680 extends beyond EOD, truncated [ 628.270545][T16065] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 628.274377][ T5887] (null): failure reading functionality [ 628.329375][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.337857][T16065] Dev loop5: unable to read RDB block 7 [ 628.339674][T16065] loop5: AHDI p1 p3 p4 [ 628.342250][T16065] loop5: partition table partially beyond EOD, truncated [ 628.344589][T16065] loop5: p1 size 100679680 extends beyond EOD, truncated [ 628.347794][T16065] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 628.352893][ T9] usb 8-1: USB disconnect, device number 65 [ 628.373455][T15476] udevd[15476]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 628.376631][T15474] udevd[15474]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 628.402101][T15476] udevd[15476]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 628.407192][T15490] udevd[15490]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 628.475393][ T5887] i2c i2c-2: failure reading functionality [ 628.480703][ T5887] i2c i2c-2: connected i2c-tiny-usb device [ 628.484514][ T5887] usb 5-1: USB disconnect, device number 65 [ 628.568224][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.647828][ T61] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 628.787008][T16077] netlink: 'syz.1.2822': attribute type 64 has an invalid length. [ 628.792524][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 628.795741][T16077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.799562][ T61] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 628.804734][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.815725][ T61] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 054 [ 628.979733][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.983600][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.220153][ T61] (null): failure reading functionality [ 629.553374][ T61] i2c i2c-2: failure reading functionality [ 629.562172][ T61] i2c i2c-2: connected i2c-tiny-usb device [ 629.645386][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.126325][T16093] random: crng reseeded on system resumption [ 630.648842][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.182906][T16106] random: crng reseeded on system resumption [ 631.742728][ T24] usb 7-1: USB disconnect, device number 54 [ 631.770694][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.007996][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.180931][T16115] random: crng reseeded on system resumption [ 632.297773][T16120] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.2830'. [ 632.569254][ T5529] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 632.751082][ T5529] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 632.755870][ T5529] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.835382][ T5529] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 066 [ 632.854302][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.227850][ T5529] (null): failure reading functionality [ 633.375355][T16131] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.2833'. [ 633.442295][ T5529] i2c i2c-2: failure reading functionality [ 633.796924][ T5529] i2c i2c-2: connected i2c-tiny-usb device [ 633.800265][ T5529] usb 8-1: USB disconnect, device number 66 [ 633.938210][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.490409][T16148] lo speed is unknown, defaulting to 1000 [ 634.547741][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 634.698602][T16154] lo speed is unknown, defaulting to 1000 [ 634.699298][ T9] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 634.704013][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.712253][ T9] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 055 [ 634.968084][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.078587][T16160] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2842'. [ 635.153950][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.227663][ T9] (null): failure reading functionality [ 635.821940][ T9] i2c i2c-2: failure reading functionality [ 635.828052][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 636.079908][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.118812][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 636.167653][ T5892] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 636.280312][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 636.284118][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.293360][ T24] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 066 [ 636.320102][ T5892] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 636.322995][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.330035][ T5892] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 067 [ 636.698298][ T24] (null): failure reading functionality [ 636.906086][ T24] i2c i2c-3: failure reading functionality [ 636.911518][ T24] i2c i2c-3: connected i2c-tiny-usb device [ 636.935318][T16165] i2c i2c-2: failure reading status [ 636.935470][ T9] usb 7-1: USB disconnect, device number 55 [ 636.936997][T16165] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 636.944675][T16165] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 636.949354][T16165] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 636.952744][T16165] CPU: 1 UID: 0 PID: 16165 Comm: syz.3.2844 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.956596][T16165] Tainted: [L]=SOFTLOCKUP [ 636.958334][T16165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 636.962293][T16165] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 636.964691][T16165] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 6d 42 09 66 66 2e 0f 1f 84 00 00 00 [ 636.971906][T16165] RSP: 0000:ffffc90005477518 EFLAGS: 00010286 [ 636.974360][T16165] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 636.977362][T16165] RDX: 0000000000000000 RSI: ffffffff81e4a344 RDI: dffffc0000000028 [ 636.980053][T16165] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 636.983169][T16165] R10: ffff88802822b3d3 R11: 0000000000000000 R12: ffffffff81e4a344 [ 636.986233][T16165] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 636.989388][T16165] FS: 0000000000000000(0000) GS:ffff888096ce3000(0063) knlGS:00000000f53cdb40 [ 636.992501][T16165] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 636.995157][T16165] CR2: 00000000f729e853 CR3: 0000000051fcc000 CR4: 0000000000352ef0 [ 636.998346][T16165] Call Trace: [ 636.999724][T16165] [ 637.000936][T16165] __kasan_check_byte+0x13/0x50 [ 637.002807][T16165] lock_acquire+0x132/0x370 [ 637.004370][T16165] ? __pfx___might_resched+0x10/0x10 [ 637.006524][T16165] down_write_nested+0x94/0x200 [ 637.008501][T16165] ? __simple_recursive_removal+0x7f/0x5c0 [ 637.010853][T16165] ? __pfx_down_write_nested+0x10/0x10 [ 637.013042][T16165] ? __simple_recursive_removal+0x3d/0x5c0 [ 637.015395][T16165] ? do_raw_spin_unlock+0x145/0x1e0 [ 637.017492][T16165] __simple_recursive_removal+0x7f/0x5c0 [ 637.019761][T16165] ? __pfx_remove_one+0x10/0x10 [ 637.021763][T16165] ? mntput+0x70/0xa0 [ 637.023437][T16165] debugfs_remove+0x5d/0x80 [ 637.024907][T16165] i2c_device_probe+0x6e2/0xd10 [ 637.026875][T16165] ? kernfs_put+0x3f/0x60 [ 637.028644][T16165] ? __pfx_i2c_device_probe+0x10/0x10 [ 637.030814][T16165] ? sysfs_create_link+0x68/0xc0 [ 637.032817][T16165] ? __pfx_i2c_device_probe+0x10/0x10 [ 637.034980][T16165] really_probe+0x241/0xa60 [ 637.036800][T16165] __driver_probe_device+0x20e/0x450 [ 637.038867][T16165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 637.041250][T16165] driver_probe_device+0x4a/0x140 [ 637.043061][T16165] __device_attach_driver+0x1df/0x320 [ 637.045253][T16165] ? __pfx___device_attach_driver+0x10/0x10 [ 637.047617][T16165] bus_for_each_drv+0x159/0x1e0 [ 637.049527][T16165] ? __pfx_bus_for_each_drv+0x10/0x10 [ 637.051690][T16165] ? lockdep_hardirqs_on+0x78/0x100 [ 637.053726][T16165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 637.055630][T16165] __device_attach+0x1e4/0x4d0 [ 637.057552][T16165] ? __pfx___device_attach+0x10/0x10 [ 637.059618][T16165] ? do_raw_spin_unlock+0x145/0x1e0 [ 637.061242][T16165] device_initial_probe+0xaf/0xd0 [ 637.062934][T16165] bus_probe_device+0x64/0x160 [ 637.064854][T16165] device_add+0x121d/0x1970 [ 637.066237][T16165] ? __pfx_device_add+0x10/0x10 [ 637.067969][T16165] ? lockdep_init_map_type+0x5c/0x250 [ 637.070068][T16165] ? __init_waitqueue_head+0xca/0x150 [ 637.072111][T16165] i2c_new_client_device+0x660/0xd30 [ 637.074199][T16165] new_device_store+0x20f/0x420 [ 637.076124][T16165] ? __lock_acquire+0x49f/0x1a40 [ 637.077928][T16165] ? __pfx_new_device_store+0x10/0x10 [ 637.079789][T16165] ? find_held_lock+0x2b/0x80 [ 637.081671][T16165] ? sysfs_file_kobj+0xe4/0x290 [ 637.083657][T16165] ? sysfs_file_kobj+0xe4/0x290 [ 637.085616][T16165] ? __pfx_new_device_store+0x10/0x10 [ 637.087793][T16165] dev_attr_store+0x58/0x80 [ 637.089198][T16165] ? __pfx_dev_attr_store+0x10/0x10 [ 637.091241][T16165] sysfs_kf_write+0xf2/0x150 [ 637.093116][T16165] kernfs_fop_write_iter+0x3e0/0x5f0 [ 637.095199][T16165] ? __pfx_sysfs_kf_write+0x10/0x10 [ 637.097109][T16165] vfs_write+0x6ac/0x1050 [ 637.098467][T16165] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 637.100752][T16165] ? __pfx_vfs_write+0x10/0x10 [ 637.102468][T16165] ? find_held_lock+0x2b/0x80 [ 637.103910][T16165] ksys_write+0x12a/0x250 [ 637.105625][T16165] ? __pfx_ksys_write+0x10/0x10 [ 637.107566][T16165] __do_fast_syscall_32+0xe7/0x970 [ 637.109584][T16165] do_fast_syscall_32+0x32/0x70 [ 637.111558][T16165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.113588][T16165] RIP: 0023:0xf6fdefec [ 637.114977][T16165] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 637.117596][T16165] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 637.120705][T16165] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000a00 [ 637.123833][T16165] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.126931][T16165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.128238][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.130043][T16165] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 637.130059][T16165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.130078][T16165] [ 637.130085][T16165] Modules linked in: [ 637.133835][T11708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.136650][T16165] [ 637.137660][T16165] ---[ end trace 0000000000000000 ]--- [ 637.140446][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.141385][T16165] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 637.145334][T12155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.157417][T16165] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 6d 42 09 66 66 2e 0f 1f 84 00 00 00 [ 637.165130][T16165] RSP: 0000:ffffc90005477518 EFLAGS: 00010286 [ 637.167680][T16165] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 637.170890][T16165] RDX: 0000000000000000 RSI: ffffffff81e4a344 RDI: dffffc0000000028 [ 637.174044][T16165] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 637.177180][T16165] R10: ffff88802822b3d3 R11: 0000000000000000 R12: ffffffff81e4a344 [ 637.180589][T16165] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 637.183736][T16165] FS: 0000000000000000(0000) GS:ffff888096ce3000(0063) knlGS:00000000f53cdb40 [ 637.187238][T16165] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 637.189941][T16165] CR2: 00000000f6fdf000 CR3: 0000000051fcc000 CR4: 0000000000352ef0 [ 637.193080][T16165] Kernel panic - not syncing: Fatal exception [ 637.196181][T16165] Kernel Offset: disabled [ 637.197919][T16165] Rebooting in 86400 seconds..