last executing test programs: 8m52.175737528s ago: executing program 1 (id=167): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) 8m51.258961076s ago: executing program 1 (id=168): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x8, 0x1, 0x154}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x11, 0x800000003, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1, 0xd, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 8m50.656656779s ago: executing program 1 (id=172): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x40000, 0x6, 0x12}, 0x18) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="040000000000000000000000000023e6059c633ba49d571a4ec75c9b002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000500"/28], 0x50) setreuid(0x0, 0xee00) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d7061d328b92d000000004c8537db9600f854c8a4487c752f7020847ff67dcae59ba172a685d0373f2cfc597650b0f6f46c3dff31a28a7d4c9846ca547d6196ae21463f928a6db09257485ce2b118c97338a50c1c58855954a0f8ec628e6e8d36ce0acb33a121d29fd3dfe75000000000000000b84a425792b472b240abfda8dec7fedf4a5b1b0d9b9e200c", 0xb6}], 0x1) 8m50.506980067s ago: executing program 1 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="5f6af9e6b4fd7d74bd910bba87684b55b235660b1d0413f984252ce3d1ed4d1ba92d41cc15e88061c1f5264379b10aec0ddd07224a35804829cf673680df847507e611c4c74eba1482d29b8078d24e443dff3b761f9db2e347ce2844b7343459437618709694f1f6fef7135ad4d1829be38e00a87dd56faab727213f4c8eb19d12265d9d7c99b422b0edac2746aea1a5c41dc879f12c156c6d14620ba76b912edd45408a4ffd94223e58159b9d54056caf6cec4f25645819b921bb98fa71fcfae59a76365cc9fe6065bc30fe334785e96855b6ba82b1d2e884464d46117501a62f25fb28", 0xe4, 0x800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) epoll_create1(0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x4) 8m50.118331574s ago: executing program 1 (id=176): listen(0xffffffffffffffff, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x60, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) 8m50.068924092s ago: executing program 1 (id=177): sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) syz_emit_ethernet(0x12, &(0x7f00000032c0)={@broadcast, @random="4e820f4f1563", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@mpls_mc}}, 0x0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) close(r2) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async) r5 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x7c9ce320e12d300) 8m49.901516496s ago: executing program 4 (id=179): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00670000007f00000000300000", @ANYRES32, @ANYBLOB="018000000000000000000000000000000000000008ea0c39385a79ad62adcafd5b3f97e2df5cf4b5be07d2d0077d683f01d9bf9a9e36e0dd3464111435d7ee2c6c1368743242134c277bfe7658116883a08306b21404349fca87791207655c09974d5e1e2555d5c44b27705ae826c2ff8848fd9d70bd15926c3fa2dcf2ac56ab93c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x40000080) (async) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) (async) syz_usb_disconnect(r2) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001680)="f31552c5", 0x4) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9402, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xe0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xe0}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d3000000000000000000000001400010076657468305f746f5f687372"], 0xfc}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) 8m49.420323455s ago: executing program 4 (id=181): inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r6, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x2, 0x7, 0x0, 0x80000001, 0x4, 0x1000007, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0xfffffffe, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x0, 0x1, 0x40], [0x6, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x8, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0xc, 0x86, 0x8, 0x7ff, 0x3e7, 0x2, 0x2, 0x202, 0x0, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x803, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x8, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x0, 0x2, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x2, 0x1, 0x1}}, 0x40) openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x84140, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x21) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000380)={{0x21, @rand_addr=0x64010101, 0x4e21, 0x4, 'rr\x00', 0x2, 0x7, 0x6c}, {@loopback, 0x4e24, 0x1, 0x7f, 0x5, 0x9}}, 0x44) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r8, 0x1, 0x2, &(0x7f0000000000)=""/166, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000080)={0x2, 0x5, 0x4, 0x0, 0x9, 0x0, 0x4}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) 8m48.552358462s ago: executing program 4 (id=182): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x15, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500"}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x3, [r7], [0x2b8], [0x0, 0x0, 0xfffffffd]}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r8, 0x540b, 0x2) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r9, 0x4605, 0x20000000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xaece, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) read$eventfd(r12, &(0x7f0000000080), 0x8) 8m47.094923523s ago: executing program 4 (id=188): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xd, 0x1}, 'syz1\x00', 0x55}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0xc000) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB], 0xf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) socket$inet6(0xa, 0x6, 0x4) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0xf231, 0x4000) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) r4 = io_uring_setup(0x497c, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x11, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 8m46.44538595s ago: executing program 4 (id=193): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x104) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x4001838c3, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6ad085a78214bb71, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) 8m46.356817047s ago: executing program 4 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x8844) 8m34.941616608s ago: executing program 32 (id=177): sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) syz_emit_ethernet(0x12, &(0x7f00000032c0)={@broadcast, @random="4e820f4f1563", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@mpls_mc}}, 0x0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) close(r2) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async) r5 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x7c9ce320e12d300) 8m30.993279892s ago: executing program 33 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x8844) 1m16.394306761s ago: executing program 2 (id=1862): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x6be00000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="02"], 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x0) 1m15.524704721s ago: executing program 2 (id=1867): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002d000000150000000000000045000000000000209500000000000000e5558e22cea1bf0f3f3e82bddd95106b8ebfc11f271d214118ab739ab200c12344308892805a6b874de28abfd134"], &(0x7f0000000140)='GPL\x00', 0x4, 0x8e, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 1m15.215370139s ago: executing program 2 (id=1873): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 54.000030087s ago: executing program 2 (id=1873): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 31.953865702s ago: executing program 2 (id=1873): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 13.24977901s ago: executing program 2 (id=1873): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 12.572961777s ago: executing program 0 (id=2099): syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x2}, 0x6e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)="3f000000010040", 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)) 9.424336814s ago: executing program 0 (id=2111): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xffffffffffff0000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0xc4e}, &(0x7f0000000440)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002efa0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfff}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) io_setup(0x8, &(0x7f0000002740)) 8.721175544s ago: executing program 0 (id=2114): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x5}, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x60142, 0x0) syz_io_uring_setup(0x45a2, &(0x7f0000000240)={0x0, 0x1cc4, 0x800, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000002c0)) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffffff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x200000000000012e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x4008040) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6001412f00071100be8000"/36], 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x1261, 0x3) mknod$loop(0x0, 0x0, 0x1) 7.049364695s ago: executing program 5 (id=2117): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88801) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x1066, 0x0, 0x0, 0x0, 0x0) 6.913248704s ago: executing program 3 (id=2118): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000100070000000900020073797a30000000000c00078008"], 0x58}, 0x1, 0x0, 0x0, 0x4080000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (fail_nth: 10) 6.312921075s ago: executing program 5 (id=2121): syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x2}, 0x6e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)="3f000000010040", 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)) 6.200452282s ago: executing program 3 (id=2122): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r2, 0x1ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="1080", 0x2, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800"], 0x3c8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd0, &(0x7f0000000280)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19a, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r7, 0x0, r7, 0x0, 0x9, 0x0) memfd_secret(0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) 4.958354028s ago: executing program 3 (id=2124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}, 0x1, 0x1f00000000000000}, 0x0) 4.304176785s ago: executing program 3 (id=2126): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) write$cgroup_pid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0xbf8, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x53, 0xe4, 0xe8, 0x8, 0xbfd, 0x10c, 0xf5fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe6, 0x3, 0x9, 0x5, 0x40, 0x40, [{{0x9, 0x4, 0xb8, 0x8, 0xf, 0x2e, 0xb5, 0x3d, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xfffb, 0xaa}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x1, 's'}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xac}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x5, 0x7, 0x401, 0x7}]}], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0xd, 0x2, 0xa2, [@generic={0x80, 0x4, "c8457b7aec9aa4e794288a1fb8a4a7ee814405d1a495751430d17b5861f0ebd4f3a21a15da4e7fbf6bc21f6d2697ecff242d83e38c0e14f9d52998f24655c57f7f674ab18372c767d06fae66e30b099c61788f3de0099df685c1319076d99c693aafc254d0189c668f0055749ff6e9fd2926b72b643d47dac007d5cba998"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x81, 0x35, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x0, 0x0, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0xff, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa4, 0x4}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0xee, 0x80, 0x30, [@generic={0xd1, 0x22, "373519f13c8435b1ecb37a30318fbe6b83481688b98f5de2a7a954858b7fcd4fc42c16966d86e6382efc73806f285a5f864d4579619da510ce2f6c86099bbcecbb79eb7aefd7f9dbe8bcafab3761f3fc5b4a07d14c4b8b62a9cf312c41067a4dbe02d3c04682fdf38dc521640a3917b8829be7f048fdc005ae96aa5cde872b7d27920b9709fd753447e0745b0c886badb2bec4532e08dfdec645b229cac4e580e6d3f6688b0ce5cbb97f6c1434ab96af25746040183725934cefed7fa2a388a7d3e033f6d33162505b9c56231c46b1"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x5, 0x1, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x96}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x40, 0x2, 0x8, [@generic={0xb4, 0x6, "5d111a6cfd99bcc2960f2d5528592f9162bcb7df17b6f9b29514169a995a1cc676d8a93000b6acc19e1bac3a08e06e9d7f288820070e892de390531bd6e3d3f77b29c2335d29738c20b8ff677696d91597fe46d760633ce978249d1511ec01c706373ba323051740c5a2ec313e926414cb7d5a21edb98246d49b697ce1a3fb6d2762b37652b8254f24a7a48c01127818ee80f6d28a215e3b8e5787d32d436516e39bf6eb087fca1ced4d473c8ee27441a01a"}, @generic={0xb3, 0x22, "1fbe2cca679ff1f7bffd5799ec51f4c1687b64fa9924e9399e397e2d8ab4ffc43746a64e9ac77a2e4feb734bbd0b43e91bc81ebf3cbcf83ad34e7df8c1854c8d7866521cbae2e02d64e628b7852b1dba61253673bde85ceccf85ef45b0457c266c0ffdd2adb51ce18a06a343cd8f1f1cfb4fc996cd9c359f3309b74dfb26233cc0bc09384df4a71be474db81fa031dba892e0392927e2edc1dbf8fa83145d86c44611046c705569e7993966337fc30fa21"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xb9, 0xb, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x200}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x1, 0xf, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x10, 0x2, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x92}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x5e, 0x5, 0x10, [@generic={0xc2, 0x5, "0a51432a5b12ff3b67f161476455608acb5f7b6862c8c48310e77ac6ad91516df70c66e01662302f91044a71bbbdef8f48491a584b6ac85405c26dba40d729c20d7d914a8f15cc114695bbebbf9d853e7b704faad2808c2334fe6cd34e72bce97b73b0e7d2ada7aaa3ede68196b994813ce32b8b9c9d9d327d93fd192c5c5da0298ac6daf44890ea65b04f408e74b6b1873355ac29bca5ae2156b26ded929b713e659030a4c72a107ea6f913153548ed6fadfb5731c1752f477b65f903cc1658"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x0, 0xa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x200}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x3, 0x1, 0x9d, [@generic={0xe1, 0x10, "6656e956300f2084214e9b5d19dc742ae71452fc773996808f717fd2de351e664280eb90b63bbe2fa41adc5fce39600891e6eec115bf3f68f5f40b4c1421d5171f35e90c965f52b95cd2257285279da5f8a3c8e4f107a4204319d7cef04f32e1d5ca6134d2f0781314e7719efb72d3bce1760976dfa443e032b2fb1abc212911f1788b0cf652264ef446f6007b59139a31456912133587aaae86ee1b16ae10f4bd17fc201d6abb2b6daef8bbd1d60cd4aa40a2b6caceacbea5afcabdc67d4c1db73a54a0a91102954254f38d228fae96bf781ee2da77e45f8d89f78418fe4c"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x2}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x4, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x8, 0x8, 0xde, [@generic={0x1c, 0xf, "9dda6eddc4a71ae69e84eeee8a656a7cb3b05fb7b43572b011e4"}]}}]}}, {{0x9, 0x4, 0x1c, 0x6, 0x7, 0x1, 0x1e, 0xce, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x91, 0x1}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x4, 0x1}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x3, "68bbe9"}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x5, "fb"}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x8, 0xf1, "6b3c6e9975"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xc29}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x9, 0x4, 0xf4}, [@acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x5, 0x3}, @acm={0x4, 0x24, 0x2, 0xc}]}], [{{0x9, 0x5, 0x0, 0x4, 0x40, 0x7, 0x1, 0x6, [@generic={0x100, 0x0, "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"}, @generic={0x55, 0x23, "9bbfd7f662fc06724e70f472868c4d892085630d9d1b52b26986d30eb92e0147c2b5235ec3acd6d17bb6d0d64efb9ebbd1c27d8f10a5ad08aa7ae876a4b781ddc26186944a652db1db99ab224d3282e5acf8ac"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7, 0xf2, 0x2, [@generic={0xb, 0x9, "23219bc31793f159e4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xc18}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x9, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x76, 0x6}, @generic={0xb8, 0x24, "3fd7b2c35f2a0f5c5aba3b4895c9efdf308c5e25a26860ba8841811d8b2c8e2222a1c04128ed3fd283ec7c6c3dc5f258f2f091aa394e4a4ba51e23ab9763d171124d535221409e27b5d9848d639c31f8bdce651b922fe5aef90fd7f08b7156663e4ea41f3dea48127aacd968890c606725ab492ee6d425143ea0f5b256f431eb4b1d135a67c76553649153e2927791c2f952988dc7d6886850087dd20395f039faa737dbde8c0d9529b86d99ecdff74f8accf218158a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x9, 0x3, 0x6, [@generic={0xc2, 0x31, "60587523da9116d970046dc6363147cfc17f7b967a209cf6279611f1fce5bae06bd7647578acdac10804026ba71c7df95f5305613b21d38915d29cde0c76a2423ec50dbcfa7f994f458276740b23f70dd34640eed30832e581d5974a48eb30b81fa5b735e5865dd23f9a9db2c8f837461776ca7e82923d1d2419cadcd03710b4436bde91ad41da3c3b7520b0f428bbb9e502fd17abf63b8f1e8d891240ea97f261a21a92178ec17bb3ddd1f19d41f87e3cacaf1a3ebdc84f6a04a15286ea184f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x6, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x7ff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0xe6, 0x3, 0xf, [@generic={0x28, 0x4, "1f14b99d78166e4bb8acb51379ab3a4f3b7f47fe618f7b94f048a6b4151b84fc9a3c9afc33a2"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x6, 0x86, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x5}, @generic={0xcd, 0x9, "f8dbd6f58edeecf7596caf94cbb0689d12680d47f268c91cbd58004d3f174b5d7a262bea577d7a270b8bca4f0498dc87830cdc68dc6233e09f5f7535c20f5346d28fcef0b96673a1d4f8673e847ea7e6b5626ee8f8d9dc355b934658af3de2f80c1b2ce3da14657d1b6913f5b023dbf193576e9900a75841f7c65d0aa6e7fdb0c69bee78b6d0fe33fee549e6e9f7fc00626dcb9302434212a3d333ed279c3d9e29fc508700ec480c3ac89162f94bd9507089c0aaa415047781685ef39ab0d32299294640d68dd46723391d"}]}}]}}, {{0x9, 0x4, 0xa2, 0x7, 0x6, 0x74, 0x60, 0xb, 0x2, [@hid_hid={0x9, 0x21, 0x4, 0xce, 0x1, {0x22, 0x4b3}}], [{{0x9, 0x5, 0x1e1d0c384f18cdef, 0x1, 0x20, 0x1, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x5f}, @generic={0x50, 0x22, "36251fa3bb15fff38962fbfca3d5133a3551fb2c3a41c1ef3a35737a3c113e2efa566bbd9c0d5182f68498bb9fd438759532ea5193f41b29d31517ab7c433a806bf6c8fb0933d7da15a3840aa47b"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x1, 0x0, 0x8, [@generic={0x95, 0xa, "d0014743dc1b80f77628c7e5cd892c0a91d1043a8d238e5272d12e499623184d183f9602d8356453c34517187f97de5aa52d6314a94b7ac3da7837d71d929052d35706f338e981065fa0fc9986de4744d22c294b35871186176b1a6d6d2d8687b06fb5f71a25df4e6bd8356791d94e282fdd8aef891c63c5bbf2c9ced02594d74e2faeeb94fd3ad80e4a0515922d9ec6ee6ea1"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x8, 0xf, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xea, 0x2}]}}, {{0x9, 0x5, 0x2, 0xa, 0x400, 0x6, 0x1, 0x7, [@generic={0x1c, 0x22, "bccf99496f16c6e85ba2c16b94ff7a0a9fe537c92b656f93aa21"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0xa5, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x7, 0x20, 0x200, 0x1, 0x4, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x4}, @generic={0x81, 0xb, "d0efcde9d903002419d05c3a528f5aec07edf63d146164dbf2bf6ad0afa7a08c2674bdd4fd18322ebae27abba8ace7dd525e2cdaf64a8dc33eb2c45ab7fb573694ee3886da9c4120b6802db1d9a55e9fc96a0554bb13fd6c4d85a6a8fe9970b8d34f263f0edb8494657967a1733b028e073db83bb977eb6b2c0426e713b750"}]}}]}}]}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x4, 0x8, 0x20, 0x16}, 0x89, &(0x7f0000000340)={0x5, 0xf, 0x89, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xf, 0x9, 0x1}, @generic={0x7a, 0x10, 0xa, "a6dc3a9f65c4fab0b541e2d7f5364a7b90133484e2fbf4ad1188802a9ac45d40e5495877d6d781e3a1a90e784e4ca8be698c985ae52f93c97b87cf4fae4972163c17aa6f939337b28a66777f9840ca951b549dc573c5ca71ac41276b6eb88f01276367b5cb689126c31a540ad8e5dc4aab42a7e81e0130"}]}, 0x3, [{0xf3, &(0x7f0000000400)=@string={0xf3, 0x3, "e2166864648ccb3c1945e9a4a2742ec55e4153846aff9269885eb4f303ae03e6721515adaf77371509d5d5c0a609d658f6fa7b5976eb0962279c29f828aacc5675dfd036f40ebb6df42c83286b9c078838a47e947eb053366673ad5753f64747c8d4bf3284c6b7996a81ea203cbadbb56a3fa02f0faf2bed0d13e736bbba6a2fe2aee9b4e0217b33ee0bb652c9e09339d710e38e0adea56605d458a4d1aaa180b6b284c3638db97f875bcc480b3501930b760bd10af59f127e3f3e5832eb5bb89117be9bee93e6e0294a2aaf4f8a66acf1338b14f466c64233c428105dc024def8118a9aed85b6a242f80f6c244cafe136"}}, {0x63, &(0x7f0000000280)=@string={0x63, 0x3, "7aabecc4dddbf19e1750539958b9660ad1c283b8a2659f84a432d7ddcbf06b6589a59b99549778fe8f7b1cbb9b56b4e845f151d3580d5c948fd577a346132edfde321a90c57e81a7835c3484d0f0c6e63a2abc268254244f5e3eba8ffcb96d7814"}}, {0x42, &(0x7f0000000540)=@string={0x42, 0x3, "0629860b66718e8d609192eafdd9dc0f7147c70bca966d07e39bb7192b30000bf52623cac2186ea6f9171a7bdc2f13f5279e87f50e4f171163276dddf50765f4"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000640)={0x14, &(0x7f00000000c0)={0x20, 0xf, 0x16, {0x16, 0xd, "0406269d1c54e6b4a8b3b315d6bde16ebd490dd0"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000001580)={0x44, &(0x7f0000001380)={0x20, 0xf, 0x6e, "207249d7f462fc85e05831f12e062c062e75dd5140971915428c1bad2209989e37a521f5a57649a5941d7ee824f282c445c17c9aac909ea0411623f3a32ca8b24b6be12754f3e0214fe22c820ff8392fd10621df760e145c85307209860b65169ecab99ebbfb433032473a914794"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001440)={0x20, 0x81, 0x3, "8d2349"}, &(0x7f0000001480)={0x20, 0x82, 0x3, "86386e"}, &(0x7f00000014c0)={0x20, 0x83, 0x2, "1ef9"}, &(0x7f0000001500)={0x20, 0x84, 0x2, "8449"}, &(0x7f0000001540)={0x20, 0x85, 0x3, "c4b2e2"}}) r4 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x316}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000140), &(0x7f0000000500)=0x0, &(0x7f0000000240)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2001"], 0x0}) 4.171878149s ago: executing program 6 (id=2127): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x3856, &(0x7f00000003c0)={0x0, 0x10d, 0x0, 0x3}, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) close(r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 3.933984643s ago: executing program 6 (id=2128): syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbb9daaaaaaaaaa00810000000200000000000000000000000000ffff020000000000000000000000000001d800907800"/63], 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1328, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r0, 0x6}, 0x8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xe302) fcntl$dupfd(r1, 0x0, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) syz_open_dev$media(&(0x7f00000001c0), 0x4, 0x0) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) socket(0xa, 0x40000000002, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x86c, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)={[{@dyn}]}) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 3.809093408s ago: executing program 0 (id=2129): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) socket$kcm(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002500)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1000, 0x200, &(0x7f0000000400)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 3.288771276s ago: executing program 0 (id=2130): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) close_range(r7, 0xffffffffffffffff, 0x0) 3.219680529s ago: executing program 5 (id=2131): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x21}}], 0x48}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) unlink(&(0x7f0000000340)='./file0\x00') 2.508861111s ago: executing program 0 (id=2132): syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x20, 0xc6, 0x96, 0x40, 0xdf6, 0x61c, 0xe4e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xa1, 0x8c}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x0) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000000c0)=""/210, &(0x7f00000001c0)=0x18) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000000000000000001000000040000000c000180cafc000005470000080002"], 0x78}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000200)={0x20, 0x0, 0x6, "020d9662bcb3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000500)={0x0, 0x0, 0x2, "3da9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.460845847s ago: executing program 5 (id=2133): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e085", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x101300, 0x0) socket$kcm(0x11, 0x0, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) bind$alg(r0, 0xfffffffffffffffd, 0x0) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) r3 = socket(0x0, 0x80005, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) connect$inet6(r3, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) preadv(r2, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000140)=""/39, 0x27}], 0x2, 0x0, 0xa13c996b) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000), 0x4) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x1, 0x3, 0x2, 0x2}}, 0x2e) close_range(r1, 0xffffffffffffffff, 0x0) 1.719002432s ago: executing program 5 (id=2134): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000780)=0x2, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', &(0x7f0000002080), 0x800) syz_open_dev$sndctrl(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) acct(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008"]) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvfrom$inet6(r6, 0x0, 0x1000000, 0x0, 0x0, 0x0) 908.734295ms ago: executing program 3 (id=2135): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5a000000, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) 908.361809ms ago: executing program 3 (id=2136): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 789.850076ms ago: executing program 6 (id=2137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x2, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x10008, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x400, 0x6, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x25fe, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x7ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x1, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0x0, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x4, 0x4, 0xfffffffc, 0x0, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x40, 0x7, 0x200000, 0x8008, 0x3, 0xc, 0x6, 0x4, 0x9, 0xb99, 0x6, 0x7ff, 0x7fffffff, 0x9, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0x0, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x15, 0x2, 0x1, 0x0, 0xac, 0x8, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x80, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x3, 0x9c7, 0x1, 0x6, 0x7, 0x1, 0x8, 0xa, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9bb247db, 0x8d93, 0x8000, 0x14b, 0x9, 0x7, 0x6, 0xffffff81, 0x6, 0x21, 0x8006, 0x7, 0xfffffffc, 0xffffffff, 0x1, 0x2, 0x7, 0x40, 0x7, 0x0, 0x6, 0xfed, 0x9, 0xffffffff, 0x6, 0x4, 0x3, 0x6186, 0x8, 0x3, 0x3, 0x8fc, 0x3ff, 0xe, 0x7f, 0xfffffffc, 0x9, 0x7, 0x9, 0x2, 0x3, 0x8, 0x5, 0x10001, 0xfffffe65, 0x50b3, 0x4, 0x80, 0xd2840000, 0x25, 0x3, 0xffffff22, 0x7fffffff, 0x7f, 0x7fffffff, 0x3, 0x1ff, 0xffff090f, 0x4, 0x80000001, 0xf62, 0x8, 0x2, 0x100, 0x2, 0x2, 0x9, 0x3, 0xb362, 0xffff, 0xe82d, 0x5, 0x7348, 0x5, 0x2, 0x7fb5, 0x5621, 0x0, 0x9, 0x15bc896a, 0x1, 0x0, 0x100, 0x2, 0x3, 0x80, 0x4, 0x1ff, 0x0, 0x3, 0xf, 0xf3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x5, 0xb5b7, 0x8, 0x10001, 0x0, 0x3, 0x0, 0x1cf0, 0x101, 0x7, 0x481, 0x9eb, 0x0, 0x0, 0x0, 0x3, 0x13, 0x0, 0xbb1, 0x1000, 0x7ff, 0x8000, 0x6, 0x7f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xb7a, 0xfffffffb, 0x202, 0x5, 0x4, 0x1, 0x3, 0xc7, 0x0, 0x6, 0x7, 0x9, 0x1, 0x7, 0x8, 0x9, 0x2, 0x0, 0x1, 0x10001, 0x54000000, 0x6, 0x400, 0x7, 0x400, 0x400051, 0x80, 0x5, 0xd6, 0x0, 0x1, 0x400, 0x5, 0x17, 0x10000005, 0x5b, 0x5, 0xfffffffe, 0x8000, 0xdeaa, 0x3, 0x1dc8, 0x3, 0x55, 0x9, 0x4, 0x4, 0x1000000a, 0x1, 0xdf4, 0x2, 0xc, 0x4, 0x3c, 0xae, 0x0, 0x0, 0x0, 0x7317, 0x1000, 0x9, 0x3, 0x7, 0x5, 0x5, 0x7fff, 0xe, 0x3, 0xcd, 0x3200, 0xb, 0x5, 0x6, 0x5, 0xffff, 0x3, 0x1537, 0x1, 0x6, 0x0, 0x9, 0x560d, 0x4, 0x2, 0x81, 0xe, 0x5, 0x5, 0x5, 0xd, 0x5, 0x7ff, 0x7, 0xc17, 0xd2bd, 0xb4, 0x5, 0x3, 0x200, 0x9, 0xe, 0x1, 0x9, 0x100, 0x7, 0x0, 0x6, 0x0, 0x4, 0xf1c, 0x80f, 0x7ff, 0x10000, 0x0, 0xd7d, 0x8, 0x7, 0x1, 0x1, 0x7, 0x7, 0x2f7, 0x5, 0xf8be, 0x8001]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0xfbff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x40000000, 0x8000}) 607.382017ms ago: executing program 5 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x5}, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x60142, 0x0) syz_io_uring_setup(0x45a2, &(0x7f0000000240)={0x0, 0x1cc4, 0x800, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000000180), 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffffff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x200000000000012e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x4008040) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6001412f00071100be8000"/36], 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x1261, 0x3) mknod$loop(0x0, 0x0, 0x1) 507.985666ms ago: executing program 6 (id=2139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000157, 0x40002342, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, '\x00', {0x0, @reserved}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x7f7, &(0x7f0000000440)={0x0, 0x0, 0x1000, 0x1, 0x2c0}, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, &(0x7f0000000280)={0x0}) write$binfmt_script(r6, 0x0, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x8c77) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 507.566145ms ago: executing program 6 (id=2140): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x21}}], 0x48}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) unlink(&(0x7f0000000340)='./file0\x00') sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001940)=@ipv6_newnexthop={0x18, 0x68, 0x200, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x2, 0x0, 0x1a}}, 0x18}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="617f10a98c61466c14acc5ac73af992785ead53cd6663888615d0626486250fad124ca0c8ef8ff7b27382c56c4f08f661d72a09f782673570467fb31df44387ec4f4baa18fcee6ae6131a342d95d15fe55e769ffbf1d57c787b675ad6afc498a3991625b875fa1dc1653e12555f550451a4d7e334a008d98a1dc14b3e60fd1141c31ad0b4301015ed7b134d10826402aba905192d5fa85ccf1d3d19478d5788ccdacc0ec4f770516b9ebadd9ceb2c2e44cffe296abc832beeb63aa610dbdf392adf4338c48f0d76152", 0xc9}, {&(0x7f00000004c0)="6a2d3cd614e2c0bb828c1e07e8bcbcb8c9b63f1b5aa63ce79af523473f3f11e72151f7c6b42048808292f915753ed688fa8f006b5e709491021e895bb1d7722a4d9a983e62dd0601d37dcc01e673371be82c945339807d07f9acbfdd2b27df84f3d4a61cf26d8dd4c3db698775a5a35d374092001f9082d62449584a411178875e0396b94acd98987bb0ceb42a391a96b1ad7789c88d20f009252242865c92cbbeb80c73c7292331b02c8de431ba04c68bf7c470a2409c9bee5629153abd586c04f91b2173204f07585245f2e59cab413a1b37f5f2e4816102c60ffec220afa2b1d9a46fc0d7d997cd1836c3cdb5bfef7941c530f4860c78d3106454c98a853dc0fa48ad5797cc773200976d050852cc00bbb4fe989f68c80a24a97ab3ba2755ac6f7321c331cfa7ef6061f6d24d1b35b3aac180995b2ed13e1d5124c048b44f66816598d106e76b79002daf7fc6b45fd752323092fc18b2dad8202d6cd5b1469743cc43b09734f35d02767a2530610720965cc8631a4692a85303f0a4e8259213e141aa6c6168bdf8f08ec9eb0de7c75414cdf7395a7725f9c11de361f0e68e454ad5fc749ec9f75642ae83a08d82db2d0fb3de989135b22ab0a8b51d5d10c9b61b5de1e342df15c262ae2d7c35ef37b13c78df152dc1dfd63e01a72489de859f4f198cdd5be3407e5a8d97b538ce199efa64dd00223260f76ef44c17afda14e4c987df7e72b9577961a90630de3e6b4d910f64df04a30f79345e6e1e39da5af240e56e8fe9323ec390f19a4e844e9f2a24fb40cd831d1e1ff5761be18027e9e7758e0e7f7bf1da9970db3c886aaac20d5a13128c0492305b5062807cbc721f8d1328461352b79b3ef9df09e9288e7bfcd75f26e9ed7fcfe8804ab6ba37178258185d11e9ac9ac825a269792f7a712021144ca01a01f26adb824b3fa05d373462ed532fd53f5c4aa2c6c30457990bcebad99d0f7df1a5c3a41520daaa801276afd42ba54b2566f98d94371d5ac0bb4809491b7d726518045e1aadef3ff4bd4e3b48f6c2adaec63c90a4f32ce03e1f8f3316d9e21afd4bed65a19d14f348038cd1ab6e2c072454e38d845326061c75660ca839291f1a0ea8ada276e3c3894a436568b382842f0cfc62be27440bca7b15762a36d853104b3504d38fb3bafd27ff79cf93bb17a61beb3755b944d0a16fa02baca583948cf4c4eafdc5a5c70da86bbd55076baa587cc531f3be6889ce8872da4112c1e67c1bc2bfe87393c3107d3aea6ff82357b8946f2f49761c04d66cca2c1998f66c177dd8e676c629c1e4cad8a186ac1ea6026c6c6b0832cb0654bc0f87941ee52ceef23622c2f330da08e0a312871c4ea7b2e403c61a8f450a0b87320c0c9d8fbf91b80e4c9185dc068053cf294af387dfda2211f4ede398fc26bc126209402f1c24d4c0fead87551cc6cd65d908134e80e3f5a23014243da27623319b848a07bd3cd67f933539708417e52c816a8a1c6cfe30d10a5bd0f219b3c0fc7fdd48c9b0460ee23b64664bcde94f1b6490b713343651ca8f926a44eb8816c6faddad93de4a07135a2ba2d0f4abb65469b38c23f64ee36d269403f6830579f5fdccb9e6704d68f6f99062dca163297bb2c0afa2ab19bade53b182c21812afa85ee6b0c6a775d7b464a665589c2bbf5440bb2817715ef11649c2b24f946ca6d733b59838233933c8bdcd89ae8778744923b0da3138e489312f02cbdd586884dd7a71ae063b2681cd8310d1497d228edf4a6a1d863b5a5addb0b60ab55678a074e376eb0e89d145fe94402d84f5345b1e00b639166f786f7687c2b2deef2895873e7618904026a799b750eecebdb4ecd306c72ad62c23356313cb5294313f60ee759ce8fc8285038eecb74a0fe7d601fc45759ff67876829e872e90468aed7882313e72d1118024b76b2ca75e8def15e8716909b4b7322d9497ae51a9ec6911c3fda2ddab3e05f690109c77c77fce48de5eb14e3e157c49cbb521d46da71d789fa5e89903b3f64ebfb1e2643cbf3f122977f2a2c86dc3610e0a1deb35fa0ccbeb01e63ebca46623dc140f67795c3cd7632c3a204391a0fe64bb7b36127d10ea4e8a3671c1ad53a64919a3968fedd6a36f4d739506bed095b117fa2cd51fe9edbaf9e3608a9db933405377dfcb99205142fa8f959210f53eb006c60c34d9b143e2b31e9c650461ae92397af28ce7cfcca70e5bc5bf4225296db44796f9da44e7f9dfa356ea68e53282f599a75915840f8a396924c7d6a597f87cd04f4736a3e9640585a5bc1b4c36814c0f84ad0d5752528b458df2b5062255cb8f6949d4b121b16dfc70c7f18eb1c1c9d11fd6c1d195922d88bf49aa6ed600ece08e907b40cbc8bca67bfe84245f852f1b6ca256f638dd305dfbcd3a04c1dd521c2750c5d6050c062485801274d6bc3aaceedfe0b060349f8d09350a87d449701805eb7fd632d52fe6219090fa96f8f41d58d776a78c9d0f3ad81cda6832fafb9b65aea19d7f0255fd3a3c7b9685fa577c52c800df3e2e7621fbd2e88fd07c0205c674383ff784f793c8b9cb43bdfb7e907593ad4dfb66938e50d5498e92de9405574bf56bac4719bc6100e5c4f2ac7d8591131c68243263fc299245c2c2e239ff4efdd2b6f8f3012477ad981ba32b39a954457b91c2e91b3e9b14348ac2bd43feee73d5a2de91c9a4d6cd185ca0d9a5ba5e27fec184277898d29deb27f1c58c1c66501521bf0b2f158442cfadfdc3b836f076677c3c103e5b9df37507c3e7b3bf62f690cf796a1ca22e0d4d5ebc2c0af97bb440dbbf777610d93db240086e6b8c55da49f2735ed77c39483a0017e4e5e8e085b9c8b590867e24370ddac54c19c88bfff5ee463285a93d8b132928e4dc5fd825edb3c6f6f4f7c5a7ffdda48f1743b14dd5cbcb3f14b5de9f390c6ce48c6a7f23b010a324bf18d75a59caa87977b4a2f2a3989c859c054ffe28f0d8ab822a94452299daf9baaec220d17b7509a7aa5ab1fd0a231e15c487c74b7803165919cbe71e23f8f38296b788a3d6ccaaf245dd2ef7bf747508b7a4a075e31cfc38368ad542a249eded8e6319f241c954213cb3396be5ba63cacf823a821daae75e33757bd525acf97553dc5ae766a57994077e261a50e14296e318b840ab880ff6376d6f4ee32105afa994e3136fb387bc74434f65618c2d73e7d8cacb6401d23f8a6216acdf84a1e696c6e3b6110103c574795bc585907137017ca95b6c5ff567866be1f62dcc778f81767790d4077a0104b09efcf3c0cd1b7a78d81cd59adf3b062292fd36ff6bcc1deae9260d55ddfd9155fef9e3e5d30be0a86754f0c39c97cf8c18993035abc0752229675bead346e7d935e2a19b30f7f4eb3eb65675cd85fa725b913b389a3f10966f571bf5051c208d032716a7f0874b4f83cc60d24a3a67d88a7bf2260803598cee2e08c2b10190818041efe963aa4f8f49dde5ee47dab24fd0a290171e60f461c7fd4500e3e6ac314731cd18ad1eec0175768a92de22e94dfab8dc39fc8032f74c430369cc0ee4ab43112d74eaa98677ad3fb34959421b9b4111ea8805c54684c3f1bd298eeea6da78386ceab3b76bd89690b4d4b93ab5eae0d70295cecdd5f5f2b01f5313b5c97dfbb16f97e919bd8fc4d64c0111747cb8f079bc6a36ddf4b82b192443056b91e06b847194d6e7066624ea3ef13bc5dd160fc7ae736b513017b5421a3ddc6522ce8107e062bb54fe0135538f3fc7331f0dc6e8a9979028bd9cea1c5be58d10374747265d7a4c4f1eafcf7cc300816f9b433d13cb3b66085ea5a94d74da49ffdc5a7c221778c30d5257b5df06b344dc95d6a3191ce9a4126d6f60c553ee95f135644cdac6ae2de2e7bcad40005c5afcb193506b2ac19b43d575a44c42348423001744b92d5141b425d26d305fffa20399baede55b1a62790d9f6aee09086a95f6540727cb4d53d5478007e19ba487c26421b09de4655f0794c6c0fd362d69c1b9dc0430b9442cb2e58d359d392e4a4b2239cbded2754793aea1a2348ad4bd85b7cc1e5106e9de1db5bf848f1af6838fcea78d4a09137b6daee91d35eb42b6b03e38db945720ab6dced97322a20fa463d004c4afd457f13dcb75910a5a0a40cbe3bd0abaa876b30aa095b8c0b63a209332ca447d26c8476a3907d6ddd2a1fd13c59a3d20f89e4647b0c6f99a111071198bf5f4ac58c338382f7cbf11c9d9fa2cb5cbb944b44de098fdac26b63a20748f6490f5881260ee3d785713c83505787a89b5bb67121a49e6935841051f8d6fecfc8b9236df35559a41130175f31000338419fbddcebfc5b108567d4fdd51e21de4c6f6973fe9ae48360f7d4de27e8b34f4ac537eb691844c080a3c4b8f1550520eb394e16ab5c55ea932d03807063d2ef6654af853bd1ecd0a5be1567de316d921f8dd09da0bae24a279b041b8a9e5296a46e0f935bdcae646457ad10aa57d6c9b1e10de2a26ed8062c08a9375b6c46ee0cbb53447bd71aecc8f4cde0b6b7ebd84d436c624de54a8c3cbafdc04bca6b1749e4fb612fdb04dd05df215ce0d66da29d461ec9464f0765f660914d7ee7593e80dfcd40e1318363965cf4e50910d19397cb362dc45759e35e8c9819cc830acd6acb752035faf0ced48d3d7c8b77514bdc7c986a27922a88c3da6b6df688c4c4678aeaaaea342a7f2f7f2072937ec9609283218c672d13321691bd03e7242188131a0bd466ccb9504e3507da93c7b3dc844177d3f51d559c2ad577f8014395069526dc233ab69ea3116633037aa09d6e8e44aa613b5372c6c744aea5ee8780c2d2820a8562ee0f6a5a95b4ce6406b494b1ae4c55f95c45fac0642b0ff73663648a04fc92256d8d20e975ec3c1bf02e6a7aca987a98e501f506ec4d6b2c9f13589a3263caf02fc0a67475acad3884c745902e958c98e6a5e37ee93dd5785bda5130569b90c40d1bf50d288ac237c514698acbdd02cff50e3accb6f2a59915df0d743365cd8904f1634eda880bcbd5b63771b2add1a4bc9e914c425a579c6ca3baefae8c125e8c0d26f86d8b8c7518218413a24066de7db7224b108bce12363a261c26de765a70bcedf472056f0b301a6a877bab31d34aa44ec18ac868321b604f283ab2a97893869b203b3760def0035dcfc894cf78846abfe328c564038dd8eefe4c11865d9663f82eac4273b41065dd224c05f920576170523f63dcb72755ff59f989a56e3e2cd69e952d1c64fc574eadc81b97ee7b58205decf66c9ffeef84bf2a4fd45c85c5a7b31c542b9c8a2122e66ac00485d279e8318891373b8b1b7bb3afb1f169375b1a3b1bf9d83d5f159c423e393e0f9c0337fda65fd62e8eb32114de1048e9dae1d73f8a97b96d74fe1c40d0a5a3b2d3913e1e3caad3c626fd002c6d13cdaca989a4706d9f4b3dfa1f40f10e67d26155f1f38789aafa63ce56a263e0f331a851d15d7f400594dee3d9d1e15244a2cdb4540b6a9c9bc1e215fd8535fc9bd13cd41988cc0f0753df93574ccbb094da4b931c4a759ba93df993b47ad8ba638ef3a2f39a2f03ab58d2dcee6b622fd888b360c88a89eba029a7e59888f73e106cb5e9a7afb55a09f7946af3da40d1cd8ec2c3da47bc069d2e6ffa02fc7579eb465e8d2e699680e0710d3d5d7dd9698b8b27cf4c9cfc51c242b32d5d03b4e0f032e2953cc48de657054de02fdd19fff5bb5daf321b8e562be11e90b3af913ec05eab9cccecade9e27bd65ce93debbd58b93debdfe8c37ce5c44870dd884eb4ab95d3737a15a3cad9e3588d6c9d2ec1f9acb4529", 0x1000}], 0x2, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x18}, 0x20040040) 0s ago: executing program 6 (id=2141): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x109080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x800) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0xef88) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = open(&(0x7f0000000680)='.\x00', 0x880, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000000)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x1a) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) timerfd_create(0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x288d00) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 524.349403][T12782] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 525.215205][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1691'. [ 526.053719][ T29] audit: type=1400 audit(1731016453.985:1839): avc: denied { accept } for pid=12784 comm="syz.6.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 526.338084][ T2141] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 526.540085][ T2141] usb 6-1: Using ep0 maxpacket: 16 [ 526.549335][ T2141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.671747][ T9] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 526.699915][ T2141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.713761][ T2141] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.727036][ T2141] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 526.736452][ T2141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.746337][ T2141] usb 6-1: config 0 descriptor?? [ 526.980779][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 527.037353][T12818] tipc: Started in network mode [ 527.042340][T12818] tipc: Node identity ac14142f, cluster identity 4711 [ 527.049258][T12818] tipc: New replicast peer: 0.0.0.0 [ 527.056395][T12818] tipc: Enabled bearer , priority 10 [ 527.065704][T12818] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1699'. [ 527.790892][T12258] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.930925][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 527.949445][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 527.957540][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 527.981352][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 528.000662][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 528.084197][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 528.176099][ T963] tipc: Node number set to 2886997039 [ 528.302820][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.509536][T12803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.596635][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.605837][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.613939][ T9] usb 4-1: Product: syz [ 528.618164][ T9] usb 4-1: Manufacturer: syz [ 528.622888][ T9] usb 4-1: SerialNumber: syz [ 528.696371][ T2141] usbhid 6-1:0.0: can't add hid device: -71 [ 528.721471][ T2141] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 528.939702][ T2141] usb 6-1: USB disconnect, device number 34 [ 529.067405][ T29] audit: type=1326 audit(1731016456.955:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 529.095480][ T29] audit: type=1326 audit(1731016456.955:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 529.126015][ T29] audit: type=1326 audit(1731016456.955:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 529.152208][ T29] audit: type=1326 audit(1731016456.955:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 529.338796][ T9] usb 4-1: 0:2 : does not exist [ 529.357940][ T9] usb 4-1: USB disconnect, device number 43 [ 529.384615][ T29] audit: type=1326 audit(1731016456.955:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 529.409187][ T5823] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 529.435406][ T29] audit: type=1326 audit(1731016456.955:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a1c77e753 code=0x7ffc0000 [ 529.615129][ T5823] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 529.722507][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.851492][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 529.888040][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 529.906226][ T29] audit: type=1326 audit(1731016456.955:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a1c77e753 code=0x7ffc0000 [ 529.929710][ T29] audit: type=1326 audit(1731016456.975:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 529.947787][ T5823] usb 3-1: config 0 descriptor?? [ 529.953581][ T29] audit: type=1326 audit(1731016456.975:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 529.953620][ T29] audit: type=1326 audit(1731016456.975:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a1c77e753 code=0x7ffc0000 [ 530.135672][T12852] mkiss: ax0: crc mode is auto. [ 530.186948][T12857] IPVS: Error connecting to the multicast addr [ 530.313906][T12865] netlink: 'syz.5.1713': attribute type 1 has an invalid length. [ 530.875775][T12871] syz.3.1715: attempt to access beyond end of device [ 530.875775][T12871] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 530.888669][T12871] exFAT-fs (nbd3): unable to read boot sector [ 530.894928][T12871] exFAT-fs (nbd3): failed to read boot sector [ 530.901156][T12871] exFAT-fs (nbd3): failed to recognize exfat type [ 531.300481][ T5823] usb 3-1: Cannot set autoneg [ 531.322661][ T5823] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 531.427118][T12886] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 531.618262][ T5917] usb 3-1: USB disconnect, device number 68 [ 532.599871][ T963] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 532.640435][ T5823] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 532.763753][ T963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.800043][ T5823] usb 7-1: Using ep0 maxpacket: 16 [ 532.856559][ T5823] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 532.877807][ T963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.901510][ T5823] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 532.949891][ T963] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 532.959149][ T5823] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.007149][ T963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.030986][ T5823] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.042932][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.051488][T12252] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 533.055537][ T963] usb 4-1: config 0 descriptor?? [ 533.064058][ T5823] usb 7-1: Product: syz [ 533.068238][ T5823] usb 7-1: Manufacturer: syz [ 533.076869][ T5823] usb 7-1: SerialNumber: syz [ 533.240773][T12921] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1732'. [ 533.255371][T12919] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1732'. [ 533.691470][T12255] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 533.703809][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 533.798160][ T963] hid (null): bogus close delimiter [ 533.811065][ T963] usb 4-1: string descriptor 0 read error: -22 [ 533.939686][ T5823] usb 7-1: 0:2 : does not exist [ 533.958654][ T5823] usb 7-1: USB disconnect, device number 34 [ 535.034376][ T963] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000C/input/input26 [ 535.061280][T12047] udevd[12047]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.910141][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 535.912434][T12255] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 535.927060][ T963] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 535.965583][ T963] usb 4-1: USB disconnect, device number 44 [ 536.337898][T12948] syz.2.1739: attempt to access beyond end of device [ 536.337898][T12948] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 536.352813][T12948] exFAT-fs (nbd2): unable to read boot sector [ 536.359661][T12948] exFAT-fs (nbd2): failed to read boot sector [ 536.366828][T12948] exFAT-fs (nbd2): failed to recognize exfat type [ 536.501012][T10778] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 536.514895][ T963] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 536.547958][T12953] Invalid logical block size (3) [ 536.692162][T10778] usb 6-1: Using ep0 maxpacket: 16 [ 536.701819][T10778] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 536.715694][T10778] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 536.742695][T10778] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.793352][T10778] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.802814][T10778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.908728][T10778] usb 6-1: Product: syz [ 536.919190][T10778] usb 6-1: Manufacturer: syz [ 536.929890][T10778] usb 6-1: SerialNumber: syz [ 537.107316][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 537.108358][ T29] audit: type=1400 audit(1731016465.035:1879): avc: denied { connect } for pid=12958 comm="syz.3.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 538.172362][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 538.494446][T10778] usb 6-1: 0:2 : does not exist [ 538.517408][T10778] usb 6-1: USB disconnect, device number 35 [ 539.422628][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 539.450368][T12258] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 539.460088][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 539.655609][T12992] syz.2.1753: attempt to access beyond end of device [ 539.655609][T12992] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 539.668625][T12992] exFAT-fs (nbd2): unable to read boot sector [ 539.674878][T12992] exFAT-fs (nbd2): failed to read boot sector [ 539.681116][T12992] exFAT-fs (nbd2): failed to recognize exfat type [ 539.749953][T10778] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 539.930002][T10778] usb 6-1: Using ep0 maxpacket: 16 [ 539.938510][T10778] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 539.947311][T10778] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 539.957458][T10778] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.975487][T10778] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.985015][T10778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.993180][T10778] usb 6-1: Product: syz [ 539.997449][T10778] usb 6-1: Manufacturer: syz [ 540.003632][T10778] usb 6-1: SerialNumber: syz [ 540.463528][T13008] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1757'. [ 540.466875][T10778] usb 6-1: 0:2 : does not exist [ 540.497323][T10778] usb 6-1: USB disconnect, device number 36 [ 540.912430][T12044] udevd[12044]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.383369][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 541.403101][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 542.011708][T12252] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 542.087550][T13037] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 544.057060][T12252] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 544.270927][T13067] FAULT_INJECTION: forcing a failure. [ 544.270927][T13067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.299838][T13067] CPU: 0 UID: 0 PID: 13067 Comm: syz.2.1774 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 544.310644][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.320716][T13067] Call Trace: [ 544.324001][T13067] [ 544.326938][T13067] dump_stack_lvl+0x16c/0x1f0 [ 544.331627][T13067] should_fail_ex+0x497/0x5b0 [ 544.336341][T13067] _copy_from_user+0x2e/0xd0 [ 544.340943][T13067] dev_ethtool+0x150/0x57e0 [ 544.345459][T13067] ? kernel_text_address+0x8d/0x100 [ 544.350693][T13067] ? __kernel_text_address+0xd/0x40 [ 544.355906][T13067] ? unwind_get_return_address+0x59/0xa0 [ 544.361550][T13067] ? arch_stack_walk+0xa7/0x100 [ 544.366394][T13067] ? __pfx_dev_ethtool+0x10/0x10 [ 544.371321][T13067] ? hlock_class+0x4e/0x130 [ 544.375820][T13067] ? hlock_class+0x4e/0x130 [ 544.380396][T13067] ? mark_lock+0xb5/0xc60 [ 544.384747][T13067] ? __pfx_mark_lock+0x10/0x10 [ 544.389502][T13067] ? __pfx_mark_lock+0x10/0x10 [ 544.394252][T13067] ? __pfx___lock_acquire+0x10/0x10 [ 544.399439][T13067] ? kasan_save_stack+0x42/0x60 [ 544.404277][T13067] ? kasan_save_stack+0x33/0x60 [ 544.409113][T13067] ? kasan_save_track+0x14/0x30 [ 544.413951][T13067] ? kasan_save_free_info+0x3b/0x60 [ 544.419160][T13067] ? __kasan_slab_free+0x51/0x70 [ 544.424089][T13067] ? kfree+0x14f/0x4b0 [ 544.428148][T13067] ? hlock_class+0x4e/0x130 [ 544.432638][T13067] ? __lock_acquire+0xbdd/0x3ce0 [ 544.437570][T13067] ? __pfx___lock_acquire+0x10/0x10 [ 544.442764][T13067] ? __pfx___lock_acquire+0x10/0x10 [ 544.447949][T13067] ? avc_has_extended_perms+0x902/0xf70 [ 544.453489][T13067] ? find_held_lock+0x2d/0x110 [ 544.458241][T13067] ? dev_load+0x8e/0x240 [ 544.462487][T13067] ? __pfx_lock_release+0x10/0x10 [ 544.467494][T13067] ? trace_lock_acquire+0x14a/0x1d0 [ 544.472681][T13067] ? full_name_hash+0xbc/0x110 [ 544.477437][T13067] dev_ioctl+0x2a2/0x10c0 [ 544.481760][T13067] sock_do_ioctl+0x19e/0x280 [ 544.486339][T13067] ? __pfx_sock_do_ioctl+0x10/0x10 [ 544.491441][T13067] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 544.497935][T13067] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 544.504435][T13067] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 544.511287][T13067] sock_ioctl+0x228/0x6c0 [ 544.515605][T13067] ? __pfx_sock_ioctl+0x10/0x10 [ 544.520448][T13067] ? selinux_file_ioctl+0x180/0x270 [ 544.525632][T13067] ? selinux_file_ioctl+0xb4/0x270 [ 544.530728][T13067] ? __pfx_sock_ioctl+0x10/0x10 [ 544.535567][T13067] __x64_sys_ioctl+0x18f/0x220 [ 544.540325][T13067] do_syscall_64+0xcd/0x250 [ 544.544811][T13067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.550694][T13067] RIP: 0033:0x7fc7de17e719 [ 544.555093][T13067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.574690][T13067] RSP: 002b:00007fc7def08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.583091][T13067] RAX: ffffffffffffffda RBX: 00007fc7de335f80 RCX: 00007fc7de17e719 [ 544.591053][T13067] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000005 [ 544.599008][T13067] RBP: 00007fc7def08090 R08: 0000000000000000 R09: 0000000000000000 [ 544.606962][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.615017][T13067] R13: 0000000000000000 R14: 00007fc7de335f80 R15: 00007ffd3eb7ac98 [ 544.622983][T13067] [ 544.626064][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.810343][T10778] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 544.969901][T10778] usb 4-1: Using ep0 maxpacket: 32 [ 545.212876][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 545.226900][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 545.501450][T10778] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 545.513111][T10778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.521331][T10778] usb 4-1: Product: syz [ 545.525510][T10778] usb 4-1: Manufacturer: syz [ 545.533383][T10778] usb 4-1: SerialNumber: syz [ 546.218901][T10778] usb 4-1: config 0 descriptor?? [ 546.400706][T13091] trusted_key: encrypted_key: master key parameter '' is invalid [ 547.131345][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 547.138667][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 547.148239][T10778] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 4124463711 serial D97FF0BA.87F06A87 (2 channels) [ 547.159127][T10778] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 547.166192][T10778] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 547.173285][ T29] audit: type=1400 audit(1731016475.095:1880): avc: denied { map } for pid=13106 comm="syz.5.1785" path="socket:[38293]" dev="sockfs" ino=38293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 547.771618][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 548.387051][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1791'. [ 548.479841][ T29] audit: type=1400 audit(1731016476.385:1881): avc: denied { getopt } for pid=13125 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 548.533630][T10778] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 548.591723][T10778] usb 4-1: USB disconnect, device number 45 [ 548.920758][ T5941] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 548.939844][T10778] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 549.083207][ T29] audit: type=1400 audit(1731016477.005:1882): avc: denied { connect } for pid=13143 comm="syz.5.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 549.103810][T10778] usb 4-1: Using ep0 maxpacket: 16 [ 549.119865][ T5941] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.140271][T10778] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 549.159113][ T5941] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 549.181709][T10778] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 549.199206][ T5941] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.215010][T10778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.221745][T13151] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 549.224125][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.248077][T10778] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.258385][T10778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.277307][T13134] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 549.285684][T10778] usb 4-1: Product: syz [ 549.292170][ T5941] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.297910][ T29] audit: type=1400 audit(1731016477.225:1883): avc: denied { accept } for pid=13150 comm="syz.0.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.299551][T10778] usb 4-1: Manufacturer: syz [ 549.318944][ T963] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 549.376647][T10778] usb 4-1: SerialNumber: syz [ 549.393879][ T29] audit: type=1400 audit(1731016477.265:1884): avc: denied { read } for pid=13150 comm="syz.0.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.501414][ T963] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 549.525914][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 549.546151][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 549.565098][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 549.587595][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 549.613790][ T963] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 549.648848][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 549.669332][T13134] fuse: Bad value for 'fd' [ 549.674420][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 549.684696][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 549.696070][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 549.706370][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 549.732873][ T963] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 549.761266][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 549.798346][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 549.818548][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 549.846045][ T963] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 549.857445][T10778] usb 4-1: 0:2 : does not exist [ 549.888289][T10778] usb 4-1: USB disconnect, device number 46 [ 549.897169][ T963] usb 6-1: string descriptor 0 read error: -22 [ 549.908517][ T963] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 549.916605][T12044] udevd[12044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 549.933954][ T963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.973701][ T963] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 550.013501][ T5823] usb 7-1: USB disconnect, device number 35 [ 550.857924][ T9] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 550.972315][T12258] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 550.986215][T12258] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 551.027719][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 551.043685][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 551.077079][ T9] usb 4-1: config 255 has an invalid descriptor of length 36, skipping remainder of the config [ 551.118201][ T9] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 551.152698][ T9] usb 4-1: string descriptor 0 read error: -22 [ 551.159880][ T9] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 551.177353][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.437782][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.456082][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.588576][T13171] binder: 13170:13171 ioctl 4018620d 0 returned -22 [ 551.633085][T13171] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 551.647495][T13171] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1805'. [ 551.751638][ T29] audit: type=1400 audit(1731016479.675:1885): avc: denied { listen } for pid=13172 comm="syz.2.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 551.789277][ T29] audit: type=1400 audit(1731016479.705:1886): avc: denied { accept } for pid=13172 comm="syz.2.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 551.969977][ T5917] usb 6-1: USB disconnect, device number 37 [ 552.163107][T13182] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 552.687772][T13193] syz.5.1810: attempt to access beyond end of device [ 552.687772][T13193] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 552.701371][T13193] exFAT-fs (nbd5): unable to read boot sector [ 552.707533][T13193] exFAT-fs (nbd5): failed to read boot sector [ 552.713821][T13193] exFAT-fs (nbd5): failed to recognize exfat type [ 552.893942][T12258] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 552.901449][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 553.054463][ T5917] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 553.223806][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 553.241155][ T5917] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 553.256188][ T5917] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 553.274120][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.323043][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.332222][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.340458][ T5917] usb 3-1: Product: syz [ 553.351944][ T5917] usb 3-1: Manufacturer: syz [ 553.356536][ T5917] usb 3-1: SerialNumber: syz [ 554.111415][ T5941] usb 4-1: USB disconnect, device number 47 [ 554.170552][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 554.281545][ T5917] usb 3-1: 0:2 : does not exist [ 554.285200][T13212] sg_write: data in/out 25/70 bytes for SCSI command 0x5-- guessing data in; [ 554.285200][T13212] program syz.3.1817 not setting count and/or reply_len properly [ 554.294994][ T5917] usb 3-1: USB disconnect, device number 69 [ 554.571185][T13202] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.693900][T13213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1817'. [ 554.780629][T12044] udevd[12044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.453044][T12258] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 555.491251][T13202] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.207396][T13202] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.434570][T13238] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.443581][T13238] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.452447][T13238] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.461376][T13238] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.516178][T13238] vxlan0: entered promiscuous mode [ 556.528374][T13238] vxlan0: entered allmulticast mode [ 556.546209][T13238] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.555170][T13238] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.564108][T13238] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.573182][T13238] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.666064][T13202] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.730395][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 556.808615][T13202] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.817545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.854088][T13202] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.896164][T13202] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.926214][T13202] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.129820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.286065][T10778] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 557.359983][ T5941] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 557.613112][T13269] openvswitch: netlink: Actions may not be safe on all matching packets [ 557.706838][T10778] usb 7-1: Using ep0 maxpacket: 32 [ 557.718662][T10778] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 557.764978][T10778] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=20.79 [ 557.810713][T10778] usb 7-1: New USB device strings: Mfr=2, Product=236, SerialNumber=0 [ 557.849895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.866993][T10778] usb 7-1: Product: syz [ 557.890339][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 557.908775][ T5941] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 557.919911][ T2141] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 557.943430][T12252] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 557.950827][ T5941] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 558.011383][T12258] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 558.036333][T10778] usb 7-1: Manufacturer: syz [ 558.049934][ T2141] usb 4-1: device descriptor read/64, error -71 [ 558.071611][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.169841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.173624][T10778] usb 7-1: config 0 descriptor?? [ 558.246934][ T5941] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.289449][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.297706][ T2141] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 558.329557][T13252] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 558.440091][ T2141] usb 4-1: device descriptor read/64, error -71 [ 558.490098][ T5941] usb 6-1: Product: syz [ 558.503479][ T5941] usb 6-1: Manufacturer: syz [ 558.533802][ T5941] usb 6-1: SerialNumber: syz [ 558.550590][ T2141] usb usb4-port1: attempt power cycle [ 558.817203][T13278] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1837'. [ 558.889832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.920624][ T2141] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 559.018688][ T2141] usb 4-1: device descriptor read/8, error -71 [ 559.075449][ T5823] usb 7-1: USB disconnect, device number 36 [ 559.081014][ T5941] usb 6-1: 0:2 : does not exist [ 559.182197][ T5999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 559.300743][ T2141] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 559.321879][ T5941] usb 6-1: USB disconnect, device number 38 [ 559.341333][ T2141] usb 4-1: device descriptor read/8, error -71 [ 559.457712][ T2141] usb usb4-port1: unable to enumerate USB device [ 559.527885][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 559.590600][T12044] udevd[12044]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.596389][T13284] netlink: 'syz.0.1838': attribute type 3 has an invalid length. [ 559.620874][T13284] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1838'. [ 560.130373][ T2141] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 560.550851][ T5999] net_ratelimit: 10 callbacks suppressed [ 560.550864][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 560.606532][ T2141] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 560.615816][ T2141] usb 6-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 560.624278][ T2141] usb 6-1: Manufacturer: syz [ 560.634823][ T2141] usb 6-1: config 0 descriptor?? [ 560.969914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.010076][ T5941] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 561.209910][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 561.273497][ T5941] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 561.289818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.328027][ T5941] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 561.345683][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.358370][ T5941] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.368052][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.378235][ T5941] usb 7-1: Product: syz [ 561.382752][ T5941] usb 7-1: Manufacturer: syz [ 561.387702][ T5941] usb 7-1: SerialNumber: syz [ 561.513514][ T2141] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 561.526075][ T2141] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 561.653155][T13325] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1855'. [ 561.688413][T13325] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1855'. [ 561.819590][T13332] overlayfs: missing 'lowerdir' [ 561.850124][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 561.857752][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.867371][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.880452][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.926212][ T29] audit: type=1400 audit(1731016489.845:1887): avc: denied { getopt } for pid=13289 comm="syz.5.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 561.968034][ T5941] usb 7-1: 0:2 : does not exist [ 561.987179][ T5941] usb 7-1: USB disconnect, device number 37 [ 562.009879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.222602][T12044] udevd[12044]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.300586][T13344] FAULT_INJECTION: forcing a failure. [ 562.300586][T13344] name failslab, interval 1, probability 0, space 0, times 0 [ 562.320884][T13344] CPU: 1 UID: 0 PID: 13344 Comm: syz.3.1861 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 562.329854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.331768][T13344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.331783][T13344] Call Trace: [ 562.331790][T13344] [ 562.331798][T13344] dump_stack_lvl+0x16c/0x1f0 [ 562.360732][T13344] should_fail_ex+0x497/0x5b0 [ 562.365399][T13344] ? fs_reclaim_acquire+0xae/0x150 [ 562.370496][T13344] should_failslab+0xc2/0x120 [ 562.375160][T13344] __kmalloc_noprof+0xcb/0x400 [ 562.379914][T13344] create_ruleset+0x21/0x140 [ 562.384507][T13344] landlock_create_ruleset+0x77/0x230 [ 562.389871][T13344] __do_sys_landlock_create_ruleset+0x257/0x460 [ 562.396110][T13344] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 562.402858][T13344] ? syscall_user_dispatch+0x7a/0x130 [ 562.408220][T13344] do_syscall_64+0xcd/0x250 [ 562.412713][T13344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.418600][T13344] RIP: 0033:0x7f89ceb7e719 [ 562.423005][T13344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.442686][T13344] RSP: 002b:00007f89cf8ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 562.451101][T13344] RAX: ffffffffffffffda RBX: 00007f89ced35f80 RCX: 00007f89ceb7e719 [ 562.459058][T13344] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000020000000 [ 562.467015][T13344] RBP: 00007f89cf8ad090 R08: 0000000000000000 R09: 0000000000000000 [ 562.474968][T13344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.482935][T13344] R13: 0000000000000000 R14: 00007f89ced35f80 R15: 00007ffcc1d9d848 [ 562.490906][T13344] [ 562.506812][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.513322][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.002607][ T963] usb 6-1: USB disconnect, device number 39 [ 563.049837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.144924][ T5832] syz_tun (unregistering): left allmulticast mode [ 563.160205][ T5832] syz_tun (unregistering): left promiscuous mode [ 563.175297][ T5832] bridge0: port 3(syz_tun) entered disabled state [ 563.206262][T13364] overlayfs: missing 'lowerdir' [ 563.471092][ T6962] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 563.493892][ T6962] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 563.979562][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.988158][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.996972][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.004520][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.011956][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 564.020251][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.105393][T13375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.129665][T13375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.137633][T13375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.176679][T13375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.187596][ T6962] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.204173][ T6962] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.204279][T13375] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 564.221913][T13375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.293316][ T6962] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.320341][ T5941] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 564.353595][ T6962] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.410179][ T29] audit: type=1400 audit(1731016492.345:1888): avc: denied { read } for pid=13384 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 564.480435][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 564.721375][ T5941] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 564.743624][ T5941] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 564.749969][ T6962] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.753930][ T29] audit: type=1400 audit(1731016492.485:1889): avc: denied { bind } for pid=13384 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 564.795509][ T6962] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.805746][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.837550][ T5941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.861092][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.879990][ T29] audit: type=1400 audit(1731016492.485:1890): avc: denied { node_bind } for pid=13384 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 564.907229][ T5941] usb 4-1: Product: syz [ 564.916055][ T5941] usb 4-1: Manufacturer: syz [ 564.925144][ T5941] usb 4-1: SerialNumber: syz [ 565.142952][T13373] chnl_net:caif_netlink_parms(): no params data found [ 565.214203][ T6962] bridge_slave_1: left allmulticast mode [ 565.227416][ T6962] bridge_slave_1: left promiscuous mode [ 565.292338][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.302177][ T6962] bridge_slave_0: left allmulticast mode [ 565.307871][ T6962] bridge_slave_0: left promiscuous mode [ 565.314140][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.372300][T13414] overlayfs: missing 'lowerdir' [ 565.439060][ T5941] usb 4-1: 0:2 : does not exist [ 565.480210][ T5941] usb 4-1: USB disconnect, device number 52 [ 566.139450][T13436] syz.6.1889[13436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.139530][T13436] syz.6.1889[13436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.154705][T13436] syz.6.1889[13436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.169884][ C1] net_ratelimit: 13 callbacks suppressed [ 566.169901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.251492][ T5840] Bluetooth: hci4: command tx timeout [ 566.333172][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 566.472807][ T6962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.483049][ T6962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.489856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.505349][ T6962] bond0 (unregistering): Released all slaves [ 566.625694][ T6962] tipc: Disabling bearer [ 566.640257][ T6962] tipc: Left network mode [ 566.877276][T13373] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.905333][T13373] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.918530][T13373] bridge_slave_0: entered allmulticast mode [ 566.927702][ T29] audit: type=1400 audit(1731016494.855:1891): avc: denied { ioctl } for pid=13452 comm="syz.5.1896" path="socket:[40262]" dev="sockfs" ino=40262 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 566.930517][T13373] bridge_slave_0: entered promiscuous mode [ 566.960667][T13373] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.968173][T13373] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.975613][T13373] bridge_slave_1: entered allmulticast mode [ 566.982502][T13373] bridge_slave_1: entered promiscuous mode [ 567.008195][ T29] audit: type=1400 audit(1731016494.935:1892): avc: denied { relabelfrom } for pid=13452 comm="syz.5.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 567.028235][ T29] audit: type=1400 audit(1731016494.935:1893): avc: denied { relabelto } for pid=13452 comm="syz.5.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 567.100970][T13373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.219931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.248523][T13373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.530218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.614913][ T2317] pvrusb2: request_firmware fatal error with code=-110 [ 567.618055][T12261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.622197][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 567.630637][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.645647][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.649559][ T2317] pvrusb2: Failure uploading firmware1 [ 567.675446][ T2317] pvrusb2: Device initialization was not successful. [ 567.684771][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 567.696249][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 567.707221][ T46] pvrusb2: Device being rendered inoperable [ 568.255249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.334739][ T5840] Bluetooth: hci4: command tx timeout [ 569.233407][T13373] team0: Port device team_slave_0 added [ 569.278126][T13373] team0: Port device team_slave_1 added [ 569.462525][T13373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.469481][T13373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.519168][T13373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.559816][T13373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.566913][T13373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.606731][T13373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.699050][ T6962] hsr_slave_0: left promiscuous mode [ 569.721702][ T6962] hsr_slave_1: left promiscuous mode [ 569.734934][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.750015][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.763881][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.779859][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.792480][ T6962] veth1_macvtap: left promiscuous mode [ 569.797973][ T6962] veth0_macvtap: left promiscuous mode [ 569.809903][ T6962] veth1_vlan: left promiscuous mode [ 569.815166][ T6962] veth0_vlan: left promiscuous mode [ 570.411061][ T5840] Bluetooth: hci4: command tx timeout [ 570.736525][T13373] hsr_slave_0: entered promiscuous mode [ 570.745866][T13373] hsr_slave_1: entered promiscuous mode [ 570.747127][T13531] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1914'. [ 571.379895][ C1] net_ratelimit: 10 callbacks suppressed [ 571.379914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.689879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.329662][T12252] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 572.389636][T13551] Cannot find del_set index 2 as target [ 572.410444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.478356][ T6962] IPVS: stop unused estimator thread 0... [ 572.490340][ T5840] Bluetooth: hci4: command tx timeout [ 572.508089][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.551985][T13562] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 572.564619][T13562] overlayfs: missing 'lowerdir' [ 572.638659][ T29] audit: type=1400 audit(1731016500.565:1894): avc: denied { setopt } for pid=13564 comm="syz.5.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 572.659131][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 572.730268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.738374][T12252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.747136][ T963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.757640][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.798733][T13575] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 573.459827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.513515][T13591] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1927'. [ 574.924980][T13373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 574.944189][T13373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 574.979470][T13373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.007814][T13621] netlink: 'syz.5.1934': attribute type 10 has an invalid length. [ 575.045771][T13621] team0: Device veth1_macvtap failed to register rx_handler [ 575.071736][T13373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.092687][T13627] bridge0: port 3(gretap0) entered blocking state [ 575.121731][T13627] bridge0: port 3(gretap0) entered disabled state [ 575.150948][T13627] gretap0: entered allmulticast mode [ 575.221351][T13627] gretap0: entered promiscuous mode [ 575.303661][T13627] bridge0: port 3(gretap0) entered blocking state [ 575.311828][T13627] bridge0: port 3(gretap0) entered forwarding state [ 575.543458][T13373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.551831][T13651] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1940'. [ 575.575402][T13652] syz.5.1939[13652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.576024][T13652] syz.5.1939[13652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.643036][T13652] syz.5.1939[13652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.865114][T13373] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.989288][T12261] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.996383][T12261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.092592][T12248] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.099679][T12248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.579927][ C1] net_ratelimit: 14 callbacks suppressed [ 576.579945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.601379][T13373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.611838][T13373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.744065][T12255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.889881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.129397][T13373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.461904][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 577.609981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.634890][T13373] veth0_vlan: entered promiscuous mode [ 577.664455][T13373] veth1_vlan: entered promiscuous mode [ 577.763826][T13373] veth0_macvtap: entered promiscuous mode [ 577.771947][T13373] veth1_macvtap: entered promiscuous mode [ 577.783913][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.794850][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.804808][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.815521][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.825810][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.836649][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.846672][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.857671][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.867710][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.878269][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.891681][T13373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.901315][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.911836][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.922032][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.929859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.932903][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.950699][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.961323][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.971316][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.981973][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.991930][T13373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.006202][T13373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.020517][T13373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.084035][T13373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.093168][T13373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.102434][T13373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.111376][T13373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.649842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.821474][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.970142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.035016][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.035557][T12245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.056702][T12245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.082045][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.609396][ T29] audit: type=1400 audit(1731016507.415:1895): avc: denied { mounton } for pid=13373 comm="syz-executor" path="/root/syzkaller.uMupaS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 579.699843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.412389][T13741] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1954'. [ 581.769821][ C1] net_ratelimit: 6 callbacks suppressed [ 581.769840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.089853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.139393][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 582.376980][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.401218][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.809807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.971675][T12245] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 583.129843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.344563][T13816] xt_hashlimit: size too large, truncated to 1048576 [ 583.849837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.077655][T13820] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1968'. [ 584.169809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.366319][ T6005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.430337][ T5941] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 585.474001][T13846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.556807][ T6005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.583457][T13375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.705595][T13375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.715379][T13375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.726565][T13375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.737306][T13375] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 585.745712][T13375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.762379][T13845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.993167][T13845] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 586.047220][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 586.053975][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.064941][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.089866][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 586.119783][ T5941] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 586.128854][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.138876][T13845] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 586.149610][ T5941] usb 7-1: config 0 descriptor?? [ 586.162820][ T5941] usb 7-1: can't set config #0, error -71 [ 586.184095][ T5941] usb 7-1: USB disconnect, device number 38 [ 586.221620][ T6005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.236225][T13871] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1976'. [ 586.294099][ T6005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.969803][ C1] net_ratelimit: 8 callbacks suppressed [ 586.969822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.289839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.378515][ T6005] bridge_slave_1: left allmulticast mode [ 587.384489][ T6005] bridge_slave_1: left promiscuous mode [ 587.400214][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.458929][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 587.654812][ T6005] bridge_slave_0: left allmulticast mode [ 587.679933][ T6005] bridge_slave_0: left promiscuous mode [ 587.708480][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.930942][T13375] Bluetooth: hci4: command tx timeout [ 588.024789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.093177][T12252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.329818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.490192][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.710890][ T6005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.722177][ T6005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.730235][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 588.747005][ T6005] bond0 (unregistering): Released all slaves [ 588.858621][T13934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.890702][T13934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.067747][ T29] audit: type=1400 audit(1731016516.785:1896): avc: denied { name_bind } for pid=13925 comm="syz.0.1988" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 589.301166][ T29] audit: type=1400 audit(1731016516.785:1897): avc: denied { name_connect } for pid=13925 comm="syz.0.1988" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 589.432736][T13860] chnl_net:caif_netlink_parms(): no params data found [ 589.734221][T13950] netlink: 'syz.6.1991': attribute type 11 has an invalid length. [ 589.844443][T13860] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.860722][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.876294][T13860] bridge_slave_0: entered allmulticast mode [ 589.899283][T13860] bridge_slave_0: entered promiscuous mode [ 589.905796][ T5941] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 589.954838][T13860] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.987894][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.010384][T13375] Bluetooth: hci4: command tx timeout [ 590.026251][T13860] bridge_slave_1: entered allmulticast mode [ 590.064612][T13860] bridge_slave_1: entered promiscuous mode [ 590.100103][ T5941] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 590.133186][ T5941] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 590.154905][ T5941] usb 1-1: Manufacturer: syz [ 590.179627][ T6005] hsr_slave_0: left promiscuous mode [ 590.193473][ T5941] usb 1-1: config 0 descriptor?? [ 590.202921][ T6005] hsr_slave_1: left promiscuous mode [ 590.214534][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.229979][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.242484][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.253817][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.283257][ T6005] veth1_macvtap: left promiscuous mode [ 590.288921][ T6005] veth0_macvtap: left promiscuous mode [ 590.300809][ T6005] veth1_vlan: left promiscuous mode [ 590.306375][ T6005] veth0_vlan: left promiscuous mode [ 590.615615][ T5941] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 590.721232][ T6962] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.844673][ T6005] team0 (unregistering): Port device team_slave_1 removed [ 590.861537][ T5874] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 590.889437][ T6005] team0 (unregistering): Port device team_slave_0 removed [ 591.019815][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 591.037002][ T5874] usb 7-1: config 0 has no interfaces? [ 591.043243][ T5874] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 591.061626][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.081258][ T5874] usb 7-1: config 0 descriptor?? [ 591.291168][ T2141] usb 7-1: USB disconnect, device number 39 [ 591.336625][T13860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.375317][T13860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.475787][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'. [ 591.547242][ T29] audit: type=1400 audit(1731016519.475:1898): avc: denied { ioctl } for pid=13943 comm="syz.0.1990" path="socket:[42509]" dev="sockfs" ino=42509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 591.577477][T13946] trusted_key: syz.0.1990 sent an empty control message without MSG_MORE. [ 591.739919][ T2141] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 591.889834][ T2141] usb 6-1: Using ep0 maxpacket: 32 [ 591.896374][ T2141] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 591.904619][ T2141] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 591.921912][ T2141] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 591.933141][ T2141] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 591.946338][ T2141] usb 6-1: config 0 interface 0 has no altsetting 0 [ 591.967428][ T2141] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 591.976773][ T2141] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 591.985537][ T2141] usb 6-1: Product: syz [ 591.989706][ T2141] usb 6-1: Manufacturer: syz [ 591.994590][ T2141] usb 6-1: SerialNumber: syz [ 592.005547][ T2141] usb 6-1: config 0 descriptor?? [ 592.016097][ T2141] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 592.090009][T13375] Bluetooth: hci4: command tx timeout [ 592.169840][ C1] net_ratelimit: 66 callbacks suppressed [ 592.169860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.489823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.604180][ T2141] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 592.658739][ T2141] usb 6-1: USB disconnect, device number 40 [ 592.667040][ T2141] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 593.220164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.245141][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 593.529859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.845513][ T5874] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 593.860194][T12261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.929967][ T5941] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 60 sec [ 593.999859][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 594.006141][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.017112][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.026964][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 594.039868][ T5874] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 594.048923][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.079274][ T5874] usb 4-1: config 0 descriptor?? [ 594.179913][T13375] Bluetooth: hci4: command tx timeout [ 594.249826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.494763][ T6962] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 594.553015][T14000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.569813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.184919][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.193222][ T5823] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 595.351854][ T5823] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 595.361059][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.370829][ T5823] usb 6-1: config 0 descriptor?? [ 595.377799][ T5823] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.391983][ T5823] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 595.420288][T12047] udevd[12047]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.254537][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 596.261728][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 596.272155][ T5874] usb 4-1: USB disconnect, device number 53 [ 596.552703][T13860] team0: Port device team_slave_0 added [ 596.561040][T13860] team0: Port device team_slave_1 added [ 596.606462][T13860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.613594][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.680815][T13860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.706961][T13860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.722305][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.750301][ T5874] usb 1-1: USB disconnect, device number 46 [ 596.779874][T13860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.313993][T13860] hsr_slave_0: entered promiscuous mode [ 597.369798][ C1] net_ratelimit: 4 callbacks suppressed [ 597.369815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.384813][T13860] hsr_slave_1: entered promiscuous mode [ 597.589616][ T46] usb 6-1: USB disconnect, device number 41 [ 597.689946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.690403][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 597.699636][ T6005] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 597.706276][T12245] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 597.886624][T14034] FAULT_INJECTION: forcing a failure. [ 597.886624][T14034] name failslab, interval 1, probability 0, space 0, times 0 [ 597.900717][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.6.2006 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 597.911501][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 597.921542][T14034] Call Trace: [ 597.924810][T14034] [ 597.927726][T14034] dump_stack_lvl+0x16c/0x1f0 [ 597.932392][T14034] should_fail_ex+0x497/0x5b0 [ 597.937056][T14034] should_failslab+0xc2/0x120 [ 597.941737][T14034] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 597.947105][T14034] ? skb_clone+0x190/0x3f0 [ 597.951513][T14034] skb_clone+0x190/0x3f0 [ 597.955744][T14034] netlink_deliver_tap+0xab3/0xd90 [ 597.960876][T14034] netlink_unicast+0x5e1/0x7f0 [ 597.965635][T14034] ? __pfx_netlink_unicast+0x10/0x10 [ 597.970930][T14034] netlink_sendmsg+0x8b8/0xd70 [ 597.975681][T14034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.980965][T14034] ____sys_sendmsg+0xaaf/0xc90 [ 597.985720][T14034] ? copy_msghdr_from_user+0x10b/0x160 [ 597.991171][T14034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.996464][T14034] ? __pfx___lock_acquire+0x10/0x10 [ 598.001651][T14034] ___sys_sendmsg+0x135/0x1e0 [ 598.006328][T14034] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.011527][T14034] ? lock_acquire+0x2f/0xb0 [ 598.016119][T14034] ? __fget_files+0x40/0x3f0 [ 598.020726][T14034] ? fdget+0x176/0x210 [ 598.024790][T14034] __sys_sendmsg+0x117/0x1f0 [ 598.029369][T14034] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.034471][T14034] ? __fget_files+0x244/0x3f0 [ 598.039150][T14034] do_syscall_64+0xcd/0x250 [ 598.043645][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.049529][T14034] RIP: 0033:0x7f40aeb7e719 [ 598.053927][T14034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.073606][T14034] RSP: 002b:00007f40afa4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.082003][T14034] RAX: ffffffffffffffda RBX: 00007f40aed35f80 RCX: 00007f40aeb7e719 [ 598.089956][T14034] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 598.097996][T14034] RBP: 00007f40afa4d090 R08: 0000000000000000 R09: 0000000000000000 [ 598.105950][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.113902][T14034] R13: 0000000000000000 R14: 00007f40aed35f80 R15: 00007ffd8b9d9828 [ 598.121865][T14034] [ 598.199917][ T5941] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 598.250378][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.337972][T12252] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 598.353976][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 598.363401][ T5941] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 598.372904][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.409883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.419121][ T5941] usb 1-1: Product: syz [ 598.423374][ T5941] usb 1-1: Manufacturer: syz [ 598.427965][ T5941] usb 1-1: SerialNumber: syz [ 598.441762][ T5941] usb 1-1: config 0 descriptor?? [ 598.454726][ T5941] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 598.729815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.181837][T13860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 599.195041][T13860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 599.214275][T13860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 599.244269][T13860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 599.449883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.487664][T14060] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2009'. [ 599.527539][T13860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.553951][T13860] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.569756][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.576878][T12245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.651018][T12245] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.658118][T12245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.687916][T13860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.869929][ T2141] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 600.309816][ T2141] usb 4-1: Using ep0 maxpacket: 16 [ 600.320857][ T2141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.360398][ T2141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.381549][ T5941] gspca_ov534_9: reg_r err -110 [ 600.435978][ T2141] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.580401][ T2141] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 600.759148][ T2141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.784281][ T2141] usb 4-1: config 0 descriptor?? [ 601.629862][ T5941] gspca_ov534_9: Unknown sensor 0000 [ 601.629911][ T5941] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 601.744620][T13860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.927879][T13860] veth0_vlan: entered promiscuous mode [ 602.000847][T13860] veth1_vlan: entered promiscuous mode [ 602.025970][T14102] input: syz1 as /devices/virtual/input/input28 [ 602.064028][T13860] veth0_macvtap: entered promiscuous mode [ 602.153483][T14108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.257928][T13860] veth1_macvtap: entered promiscuous mode [ 602.321605][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.332349][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.342489][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.353162][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.363182][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.373857][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.384068][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.394942][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.405267][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.416049][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.432955][T13860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.445260][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.455770][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.465960][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.476546][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.486940][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.497793][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.508307][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.518870][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.528873][T13860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.539332][T13860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.550320][T13860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.559370][T13860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.568137][T13860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.576903][ C1] net_ratelimit: 8 callbacks suppressed [ 602.576914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.591268][T13860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.600436][T13860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.735011][ T25] usb 1-1: USB disconnect, device number 47 [ 602.810668][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 602.889833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.999561][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.138630][T14120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.147438][T14120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.155842][T14120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.166011][T14120] sctp: [Deprecated]: syz.0.2017 (pid 14120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 603.166011][T14120] Use struct sctp_sack_info instead [ 603.182836][T14120] sctp: [Deprecated]: syz.0.2017 (pid 14120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 603.182836][T14120] Use struct sctp_sack_info instead [ 603.433455][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.444669][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.456944][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.466517][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 603.477520][T12245] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 603.525462][ T2141] usbhid 4-1:0.0: can't add hid device: -71 [ 603.534554][ T2141] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 603.575681][T12245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.589698][ T2141] usb 4-1: USB disconnect, device number 54 [ 603.634699][T12245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.661347][T14132] 9pnet_fd: Insufficient options for proto=fd [ 604.330608][T14140] syz.0.2020: attempt to access beyond end of device [ 604.330608][T14140] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 604.354656][T14140] exFAT-fs (nbd0): unable to read boot sector [ 604.360957][T14140] exFAT-fs (nbd0): failed to read boot sector [ 604.379600][T14140] exFAT-fs (nbd0): failed to recognize exfat type [ 605.823863][T14193] FAULT_INJECTION: forcing a failure. [ 605.823863][T14193] name failslab, interval 1, probability 0, space 0, times 0 [ 605.870978][T14193] CPU: 0 UID: 0 PID: 14193 Comm: syz.0.2029 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 605.881772][T14193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.891837][T14193] Call Trace: [ 605.895108][T14193] [ 605.898020][T14193] dump_stack_lvl+0x16c/0x1f0 [ 605.902677][T14193] should_fail_ex+0x497/0x5b0 [ 605.907350][T14193] ? fs_reclaim_acquire+0xae/0x150 [ 605.912453][T14193] should_failslab+0xc2/0x120 [ 605.917127][T14193] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 605.922500][T14193] ? ptlock_alloc+0x1f/0x70 [ 605.926983][T14193] ptlock_alloc+0x1f/0x70 [ 605.931303][T14193] pte_alloc_one+0x74/0x390 [ 605.935806][T14193] __pte_alloc+0x6e/0x3b0 [ 605.940121][T14193] ? __pfx___pte_alloc+0x10/0x10 [ 605.945041][T14193] ? __pfx_lock_release+0x10/0x10 [ 605.950053][T14193] ? do_raw_spin_lock+0x12d/0x2c0 [ 605.955155][T14193] do_pte_missing+0x280b/0x3e70 [ 605.959997][T14193] ? _raw_spin_unlock+0x28/0x50 [ 605.964850][T14193] ? __pmd_alloc+0x380/0x860 [ 605.969425][T14193] __handle_mm_fault+0x100a/0x2a10 [ 605.974527][T14193] ? __pfx_mt_find+0x10/0x10 [ 605.979123][T14193] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.984596][T14193] handle_mm_fault+0x3fa/0xaa0 [ 605.989353][T14193] __get_user_pages+0x8d9/0x3b50 [ 605.994379][T14193] ? __pfx___get_user_pages+0x10/0x10 [ 605.999742][T14193] get_user_pages_remote+0x25e/0xb30 [ 606.005013][T14193] ? lock_acquire+0x2f/0xb0 [ 606.009505][T14193] ? __pfx_get_user_pages_remote+0x10/0x10 [ 606.015295][T14193] ? down_read+0xc9/0x330 [ 606.019624][T14193] ? alloc_bprm+0x7f2/0xc50 [ 606.024128][T14193] ? __pfx_lock_release+0x10/0x10 [ 606.029135][T14193] get_arg_page+0x13e/0x640 [ 606.033633][T14193] ? __pfx_get_arg_page+0x10/0x10 [ 606.038660][T14193] ? up_write+0x1b2/0x520 [ 606.042977][T14193] copy_string_kernel+0x199/0x240 [ 606.047989][T14193] ? count.constprop.0.isra.0+0xf4/0x170 [ 606.053612][T14193] do_execveat_common.isra.0+0x34e/0x630 [ 606.059260][T14193] __x64_sys_execveat+0xda/0x120 [ 606.064187][T14193] do_syscall_64+0xcd/0x250 [ 606.068674][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.074555][T14193] RIP: 0033:0x7f2a1c77e719 [ 606.078968][T14193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.098574][T14193] RSP: 002b:00007f2a1d523038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 606.106973][T14193] RAX: ffffffffffffffda RBX: 00007f2a1c935f80 RCX: 00007f2a1c77e719 [ 606.114928][T14193] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 606.122881][T14193] RBP: 00007f2a1d523090 R08: 0000000000000000 R09: 0000000000000000 [ 606.130849][T14193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.138818][T14193] R13: 0000000000000000 R14: 00007f2a1c935f80 R15: 00007fff901aa998 [ 606.146784][T14193] [ 606.149799][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.318377][ T29] audit: type=1400 audit(1731016534.245:1899): avc: denied { create } for pid=14203 comm="syz.0.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 606.400411][ T29] audit: type=1400 audit(1731016534.285:1900): avc: denied { getopt } for pid=14203 comm="syz.0.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 606.607126][T14213] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2032'. [ 606.659890][T14213] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2032'. [ 606.805783][T12252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.301961][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 607.345022][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 607.409972][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 607.514519][T14239] syz.3.2036: attempt to access beyond end of device [ 607.514519][T14239] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 607.527772][T14239] exFAT-fs (nbd3): unable to read boot sector [ 607.534147][T14239] exFAT-fs (nbd3): failed to read boot sector [ 607.542266][T14239] exFAT-fs (nbd3): failed to recognize exfat type [ 607.560714][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 607.573447][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 607.585221][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 607.769886][ C1] net_ratelimit: 13 callbacks suppressed [ 607.769902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.249846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.509863][ T2141] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 608.513320][T12252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.521208][T14251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.690243][T12267] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 608.757511][ T2141] usb 1-1: config 0 has no interfaces? [ 608.786309][ T2141] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 608.809821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.289799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.413802][ T2141] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 609.432684][T12267] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 609.432871][ T2141] usb 1-1: Manufacturer: syz [ 609.440762][T12248] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 609.452089][ T2141] usb 1-1: config 0 descriptor?? [ 609.568667][T12252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.639360][T14232] chnl_net:caif_netlink_parms(): no params data found [ 609.769960][ T5840] Bluetooth: hci4: command tx timeout [ 609.815025][T12252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.849832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.927628][T14270] input: syz1 as /devices/virtual/input/input29 [ 609.957849][ T5823] usb 1-1: USB disconnect, device number 48 [ 610.329820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.415254][T14232] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.454824][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.485980][T14232] bridge_slave_0: entered allmulticast mode [ 610.534139][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.622851][T14232] bridge_slave_0: entered promiscuous mode [ 610.691192][T14276] syz.0.2044: attempt to access beyond end of device [ 610.691192][T14276] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 610.704650][T14276] exFAT-fs (nbd0): unable to read boot sector [ 610.710959][T14276] exFAT-fs (nbd0): failed to read boot sector [ 610.717154][T14276] exFAT-fs (nbd0): failed to recognize exfat type [ 610.728943][T14232] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.814815][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.881369][T14232] bridge_slave_1: entered allmulticast mode [ 610.892945][T14232] bridge_slave_1: entered promiscuous mode [ 610.907092][T12252] bridge_slave_1: left allmulticast mode [ 610.913832][T12252] bridge_slave_1: left promiscuous mode [ 610.927412][T12252] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.939347][T12252] bridge_slave_0: left allmulticast mode [ 610.951907][T12252] bridge_slave_0: left promiscuous mode [ 610.964472][T12252] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.009878][ T5823] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 611.173722][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 611.216798][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 611.243607][ T5823] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 611.260546][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.418862][ T5823] usb 1-1: config 0 descriptor?? [ 611.462088][T14276] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 611.704942][ T5823] ath6kl: Failed to submit usb control message: -71 [ 611.711674][ T5823] ath6kl: unable to send the bmi data to the device: -71 [ 611.723282][ T5823] ath6kl: Unable to send get target info: -71 [ 611.750498][T12252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.767995][T12252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.783840][T12252] bond0 (unregistering): Released all slaves [ 611.785375][ T5823] ath6kl: Failed to init ath6kl core: -71 [ 611.796367][ T5823] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 611.849943][ T5840] Bluetooth: hci4: command tx timeout [ 611.878418][ T5823] usb 1-1: USB disconnect, device number 49 [ 612.335697][T14311] syz.3.2050: attempt to access beyond end of device [ 612.335697][T14311] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 612.349041][T14311] exFAT-fs (nbd3): unable to read boot sector [ 612.355150][T14311] exFAT-fs (nbd3): failed to read boot sector [ 612.361243][T14311] exFAT-fs (nbd3): failed to recognize exfat type [ 612.436497][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.471409][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2051'. [ 612.506160][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.831130][T14318] netlink: 'syz.5.2051': attribute type 3 has an invalid length. [ 612.848492][T14318] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2051'. [ 612.969997][ C1] net_ratelimit: 6 callbacks suppressed [ 612.970023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.355075][T14232] team0: Port device team_slave_0 added [ 613.388750][T14232] team0: Port device team_slave_1 added [ 613.449829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.494303][T12252] hsr_slave_0: left promiscuous mode [ 613.535326][T12252] hsr_slave_1: left promiscuous mode [ 613.562712][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.589258][T12252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.619937][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.637381][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.657234][T12252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.930533][ T5840] Bluetooth: hci4: command tx timeout [ 613.961058][T14355] Process accounting resumed [ 614.009812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.081791][T12252] veth1_macvtap: left promiscuous mode [ 614.183016][T12252] veth0_macvtap: left promiscuous mode [ 614.198581][T12252] veth1_vlan: left promiscuous mode [ 614.216278][T12252] veth0_vlan: left promiscuous mode [ 614.349253][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.378992][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.388838][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.398471][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.406883][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.415942][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.269870][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 615.530215][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 615.542580][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 615.552624][ T25] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 615.562895][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 615.571398][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.580715][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.588780][ T25] usb 4-1: Product: syz [ 615.597819][ T25] usb 4-1: Manufacturer: syz [ 615.602685][ T25] usb 4-1: SerialNumber: syz [ 615.615898][T14370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 615.705034][T12252] team0 (unregistering): Port device team_slave_1 removed [ 615.748708][T12252] team0 (unregistering): Port device team_slave_0 removed [ 615.874338][ T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 615.894192][ T25] usb 4-1: USB disconnect, device number 55 [ 616.010035][ T5840] Bluetooth: hci4: command tx timeout [ 616.187724][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.196411][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.213865][T14348] Process accounting resumed [ 616.230892][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.319001][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.336304][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.369242][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.337742][T14232] hsr_slave_0: entered promiscuous mode [ 617.572714][T14232] hsr_slave_1: entered promiscuous mode [ 618.048081][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 618.114007][T14406] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001 [ 618.169970][ C1] net_ratelimit: 65 callbacks suppressed [ 618.169989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.659805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.673500][T14403] netlink: 'syz.3.2065': attribute type 3 has an invalid length. [ 618.740864][T14403] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2065'. [ 619.209823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.228076][T14418] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:0 [ 619.689801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.100358][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.182490][T12245] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 620.190207][T12245] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 620.209588][T12245] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 620.249792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.284850][T14232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.298981][T14232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.308934][T14232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 620.324280][T14232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 620.630157][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2076'. [ 620.729832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.055830][T14232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.108028][T14232] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.139590][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.146720][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.208026][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.215196][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.347946][T14232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.521331][ T29] audit: type=1326 audit(1731016549.455:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.616869][ T29] audit: type=1326 audit(1731016549.485:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.671920][ T29] audit: type=1326 audit(1731016549.495:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.709873][ T29] audit: type=1326 audit(1731016549.505:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.723269][T14484] vlan2: entered allmulticast mode [ 621.733426][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.733848][ T29] audit: type=1326 audit(1731016549.505:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.768086][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.768741][T14484] bond0: entered allmulticast mode [ 621.788120][T14484] bond_slave_0: entered allmulticast mode [ 621.808758][ T29] audit: type=1326 audit(1731016549.505:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.832607][ T29] audit: type=1326 audit(1731016549.505:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.856477][ T29] audit: type=1326 audit(1731016549.505:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.880264][ T29] audit: type=1326 audit(1731016549.505:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 621.904712][T12267] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.928573][T14484] bond_slave_1: entered allmulticast mode [ 621.935838][T14484] bond0: left allmulticast mode [ 621.941556][T14484] bond_slave_0: left allmulticast mode [ 621.954295][T14484] bond_slave_1: left allmulticast mode [ 621.979946][ T29] audit: type=1326 audit(1731016549.505:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1c77e719 code=0x7ffc0000 [ 622.003404][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.040028][T14232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.154697][T14232] veth0_vlan: entered promiscuous mode [ 622.195262][T14232] veth1_vlan: entered promiscuous mode [ 622.238418][T14232] veth0_macvtap: entered promiscuous mode [ 622.249112][T14232] veth1_macvtap: entered promiscuous mode [ 622.261425][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.272064][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.282109][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.292971][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.302811][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.313611][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.328253][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.398113][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.420430][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.431471][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.443784][T14232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.769132][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.798328][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.823687][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.837991][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.847910][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.871770][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.886760][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.906645][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.916601][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.929947][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.954347][T14232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.985276][T14232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.014734][T14232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.033155][T14232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.054265][T14232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.323363][ T5999] net_ratelimit: 7 callbacks suppressed [ 623.323379][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 623.369872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.599236][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.622609][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.673157][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.702823][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.849955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.999913][ T5823] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 624.023059][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.029423][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.409819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.712619][ T5823] usb 4-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 624.729752][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.737770][ T5823] usb 4-1: Product: syz [ 624.758890][ T5823] usb 4-1: Manufacturer: syz [ 624.797851][ T5823] usb 4-1: SerialNumber: syz [ 624.825323][ T5823] usb 4-1: config 0 descriptor?? [ 624.889882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.118967][T14521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2089'. [ 625.147005][T14521] Κό: entered promiscuous mode [ 625.439905][T12267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.449851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.746592][T12267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.818352][T12267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.842211][ T5823] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 625.853113][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 625.860207][ T5823] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 625.870662][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 625.877958][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 625.939018][T12267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.939809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.055183][ T5823] asix 4-1:0.0 eth5: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, 02:0d:96:62:bc:b3 [ 626.167930][ T5823] usb 4-1: USB disconnect, device number 56 [ 626.174338][ T5823] asix 4-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 626.255594][T13375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.274329][T12267] bridge_slave_1: left allmulticast mode [ 626.280114][T12267] bridge_slave_1: left promiscuous mode [ 626.285795][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.384070][T13375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.541917][T13375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.557345][T13375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 626.573996][T13375] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 626.583903][T13375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 626.769659][T12267] bridge_slave_0: left allmulticast mode [ 626.775675][T12267] bridge_slave_0: left promiscuous mode [ 626.803759][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.831140][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 626.831157][ T29] audit: type=1400 audit(1731016554.765:1998): avc: denied { write } for pid=14592 comm="syz.3.2103" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 627.355229][T12267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.368477][T12267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.384984][T12267] bond0 (unregistering): Released all slaves [ 627.899609][T12267] hsr_slave_0: left promiscuous mode [ 627.921615][T12267] hsr_slave_1: left promiscuous mode [ 627.928187][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.936408][T12267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.947725][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.955605][T12267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.971040][T12267] veth1_macvtap: left promiscuous mode [ 627.976572][T12267] veth0_macvtap: left promiscuous mode [ 627.982204][T12267] veth1_vlan: left promiscuous mode [ 627.987462][T12267] veth0_vlan: left promiscuous mode [ 628.240245][ T5823] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 628.334235][T12267] team0 (unregistering): Port device team_slave_1 removed [ 628.376512][T12267] team0 (unregistering): Port device team_slave_0 removed [ 628.401629][ T5823] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 628.410299][T12261] net_ratelimit: 6 callbacks suppressed [ 628.410313][T12261] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 628.420200][ T5823] usb 4-1: config 0 has no interface number 0 [ 628.428966][ T5823] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 628.439302][ T5823] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.474602][ T5823] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 628.483877][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.492551][ T5823] usb 4-1: Product: syz [ 628.496801][ T5823] usb 4-1: Manufacturer: syz [ 628.501539][ T5823] usb 4-1: SerialNumber: syz [ 628.515949][ T5823] usb 4-1: config 0 descriptor?? [ 628.521655][T14633] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 628.534454][ T5823] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 628.557257][ T5823] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 628.575791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.737660][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 628.811263][ T5840] Bluetooth: hci4: command tx timeout [ 628.952589][T14582] chnl_net:caif_netlink_parms(): no params data found [ 628.969913][ T5823] usb 4-1: USB disconnect, device number 57 [ 628.979062][ T5823] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 628.990550][ T5823] cyberjack 4-1:0.69: device disconnected [ 629.051334][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 629.061993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.211979][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.445777][T14582] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.466831][T14582] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.500179][T14582] bridge_slave_0: entered allmulticast mode [ 629.524553][T14582] bridge_slave_0: entered promiscuous mode [ 629.578506][T14582] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.597306][T14582] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.609867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.626475][T14582] bridge_slave_1: entered allmulticast mode [ 629.656260][T14582] bridge_slave_1: entered promiscuous mode [ 629.725830][T14582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.758829][T14582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.837999][T14658] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 629.844547][T14658] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 629.854252][T14658] vhci_hcd vhci_hcd.0: Device attached [ 629.877855][T14659] usbip_core: unknown command [ 629.882643][T14659] vhci_hcd: unknown pdu 3020988904 [ 629.889119][T14582] team0: Port device team_slave_0 added [ 629.889537][T14659] usbip_core: unknown command [ 629.906090][T12267] vhci_hcd: stop threads [ 629.914722][T14582] team0: Port device team_slave_1 added [ 629.939095][T12267] vhci_hcd: release socket [ 629.940758][T14582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.951536][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.978070][T14582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.980186][T12267] vhci_hcd: disconnect device [ 629.990191][T14582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.000325][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.026262][T14582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.089828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.163532][T14582] hsr_slave_0: entered promiscuous mode [ 630.171506][T14582] hsr_slave_1: entered promiscuous mode [ 630.425244][T14670] syz.0.2114: attempt to access beyond end of device [ 630.425244][T14670] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 630.445535][T14670] exFAT-fs (nbd0): unable to read boot sector [ 630.468978][T14670] exFAT-fs (nbd0): failed to read boot sector [ 630.476508][T14670] exFAT-fs (nbd0): failed to recognize exfat type [ 630.649797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.129801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.322338][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 631.337174][ T5840] Bluetooth: hci4: command tx timeout [ 631.810843][T14699] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.850650][T14694] binder: 14692:14694 ioctl c0306201 20004a40 returned -22 [ 631.929472][T14705] FAULT_INJECTION: forcing a failure. [ 631.929472][T14705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.956406][T14705] CPU: 0 UID: 0 PID: 14705 Comm: syz.3.2118 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 631.967256][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 631.977300][T14705] Call Trace: [ 631.980559][T14705] [ 631.983468][T14705] dump_stack_lvl+0x16c/0x1f0 [ 631.988127][T14705] should_fail_ex+0x497/0x5b0 [ 631.992784][T14705] _copy_to_user+0x32/0xd0 [ 631.997283][T14705] simple_read_from_buffer+0xd0/0x160 [ 632.002646][T14705] proc_fail_nth_read+0x198/0x270 [ 632.007659][T14705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.013191][T14705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.018719][T14705] vfs_read+0x1df/0xbe0 [ 632.022859][T14705] ? __fget_files+0x23a/0x3f0 [ 632.027512][T14705] ? fdget_pos+0x24c/0x360 [ 632.031916][T14705] ? __pfx_lock_release+0x10/0x10 [ 632.036923][T14705] ? trace_lock_acquire+0x14a/0x1d0 [ 632.042101][T14705] ? __pfx_vfs_read+0x10/0x10 [ 632.046766][T14705] ? __pfx___mutex_lock+0x10/0x10 [ 632.051944][T14705] ? __fget_files+0x244/0x3f0 [ 632.056606][T14705] ksys_read+0x12f/0x260 [ 632.060829][T14705] ? __pfx_ksys_read+0x10/0x10 [ 632.065611][T14705] do_syscall_64+0xcd/0x250 [ 632.070096][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.075966][T14705] RIP: 0033:0x7f89ceb7d15c [ 632.080355][T14705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 632.099940][T14705] RSP: 002b:00007f89ccfd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.108327][T14705] RAX: ffffffffffffffda RBX: 00007f89ced36130 RCX: 00007f89ceb7d15c [ 632.116271][T14705] RDX: 000000000000000f RSI: 00007f89ccfd50a0 RDI: 0000000000000008 [ 632.124295][T14705] RBP: 00007f89ccfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 632.132258][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.140213][T14705] R13: 0000000000000001 R14: 00007f89ced36130 R15: 00007ffcc1d9d848 [ 632.148172][T14705] [ 632.174192][T14582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 632.231048][T14582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 632.231766][ T29] audit: type=1326 audit(1731016560.145:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14711 comm="syz.5.2121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98c197e719 code=0x0 [ 632.346252][T14582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.356178][T14582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 633.216802][T14725] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2122'. [ 633.226142][T14725] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2122'. [ 633.405547][T13375] Bluetooth: hci4: command tx timeout [ 633.530144][ T5999] net_ratelimit: 8 callbacks suppressed [ 633.530156][ T5999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 633.779806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.945077][T14732] syz.6.2123: attempt to access beyond end of device [ 633.945077][T14732] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 633.957880][T14732] exFAT-fs (nbd6): unable to read boot sector [ 633.963992][T14732] exFAT-fs (nbd6): failed to read boot sector [ 633.970067][T14732] exFAT-fs (nbd6): failed to recognize exfat type [ 633.996826][T14582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.007930][T14582] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.025610][T14582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 634.036302][T14582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.049669][T12252] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.056786][T12252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.127238][T12252] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.134323][T12252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.172039][T12267] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 634.249784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.477197][T14582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.484174][ T25] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 634.584384][T14582] veth0_vlan: entered promiscuous mode [ 634.608752][T14582] veth1_vlan: entered promiscuous mode [ 634.660253][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 634.671382][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.682524][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.712521][T14582] veth0_macvtap: entered promiscuous mode [ 634.728657][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 634.751839][T14582] veth1_macvtap: entered promiscuous mode [ 634.765059][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.809898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.956936][ T25] usb 4-1: config 0 descriptor?? [ 634.967059][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.046973][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.106529][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.152909][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.195290][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.257711][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.289978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.299888][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.338378][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.372520][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.428679][T14777] 9pnet_fd: Insufficient options for proto=fd [ 635.429942][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.458647][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.458661][T13375] Bluetooth: hci4: command tx timeout [ 635.484132][T14582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.849857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.928672][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.931275][ T25] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 635.951073][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.007619][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.038633][ T25] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 636.051104][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.061158][ T25] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 636.068565][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.079083][ T25] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 636.086878][ T25] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 636.094593][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.104516][ T25] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 636.112029][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.122619][ T25] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 636.134829][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.146252][ T25] playstation 0003:054C:0CE6.000D: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 636.158229][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.169423][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.171627][ T29] audit: type=1400 audit(1731016564.105:2000): avc: denied { mounton } for pid=14760 comm="syz.6.2128" path="/297/file0" dev="tmpfs" ino=1668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 636.179509][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.219473][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.230998][T14582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.273233][ T25] playstation 0003:054C:0CE6.000D: Invalid byte count transferred, expected 20 got 0 [ 636.295177][T14582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.320331][ T2141] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 636.329989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.336492][ T25] playstation 0003:054C:0CE6.000D: Failed to retrieve DualSense pairing info: -22 [ 636.357741][T14582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.419982][T14582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.428830][T14582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.442217][ T25] playstation 0003:054C:0CE6.000D: Failed to get MAC address from DualSense [ 636.456347][ T25] playstation 0003:054C:0CE6.000D: Failed to create dualsense. [ 636.641990][ T25] playstation 0003:054C:0CE6.000D: probe with driver playstation failed with error -22 [ 636.710823][ T25] usb 4-1: USB disconnect, device number 58 [ 636.730680][ T6005] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 636.780440][ T2141] usb 1-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 636.800890][ T2141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.827574][ T2141] usb 1-1: Product: syz [ 636.833349][ T2141] usb 1-1: Manufacturer: syz [ 636.838680][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.847053][ T2141] usb 1-1: SerialNumber: syz [ 636.861059][ T2141] usb 1-1: config 0 descriptor?? [ 636.876285][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.946344][T12261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.977929][T12261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.068118][T14783] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2132'. [ 637.126743][T14783] Κό: entered promiscuous mode [ 638.047162][ T2141] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 638.057549][ T2141] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 638.373639][ T2141] asix 1-1:0.0 eth5: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, 02:0d:96:62:bc:b3 [ 638.430973][ T2141] usb 1-1: USB disconnect, device number 50 [ 638.437273][ T2141] asix 1-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 638.750871][ T2141] ------------[ cut here ]------------ [ 638.756348][ T2141] ODEBUG: free active (active state 0) object: ffff88804c9211a0 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xe90 [ 638.900139][ T2141] WARNING: CPU: 1 PID: 2141 at lib/debugobjects.c:514 debug_print_object+0x1a3/0x2b0 [ 638.909610][ T2141] Modules linked in: [ 638.913596][ T2141] CPU: 1 UID: 0 PID: 2141 Comm: kworker/1:2 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 638.924425][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 638.934494][ T2141] Workqueue: usb_hub_wq hub_event [ 638.939505][ T2141] RIP: 0010:debug_print_object+0x1a3/0x2b0 [ 638.945455][ T2141] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 c5 d1 8b 41 56 4c 89 e6 48 c7 c7 e0 b8 d1 8b e8 ae 9b b8 fc 90 <0f> 0b 90 90 58 83 05 ed ba c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 638.965347][ T2141] RSP: 0018:ffffc9000561f458 EFLAGS: 00010282 [ 638.971463][ C1] net_ratelimit: 8 callbacks suppressed [ 638.971472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.985427][ T2141] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90016350000 [ 638.993405][ T2141] RDX: 0000000000100000 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 639.001388][ T2141] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 639.009347][ T2141] R10: 0000000000000001 R11: fffffffffffd69e8 R12: ffffffff8bd1bf80 [ 639.017334][ T2141] R13: ffffffff8b6be880 R14: ffffffff86be6d60 R15: ffffc9000561f568 [ 639.025330][ T2141] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 639.034298][ T2141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.040889][ T2141] CR2: 00007f3fe4297440 CR3: 0000000044eec000 CR4: 00000000003526f0 [ 639.048848][ T2141] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 639.057122][ T2141] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 639.065497][ T2141] Call Trace: [ 639.068789][ T2141] [ 639.071751][ T2141] ? __warn+0xea/0x3d0 [ 639.075808][ T2141] ? preempt_schedule_notrace+0x62/0xe0 [ 639.081376][ T2141] ? debug_print_object+0x1a3/0x2b0 [ 639.086557][ T2141] ? report_bug+0x3c0/0x580 [ 639.091068][ T2141] ? handle_bug+0x54/0xa0 [ 639.095380][ T2141] ? exc_invalid_op+0x17/0x50 [ 639.100057][ T2141] ? asm_exc_invalid_op+0x1a/0x20 [ 639.105065][ T2141] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 639.110971][ T2141] ? __warn_printk+0x1a6/0x350 [ 639.115716][ T2141] ? debug_print_object+0x1a3/0x2b0 [ 639.120949][ T2141] ? debug_print_object+0x1a2/0x2b0 [ 639.122574][T14840] syz.5.2138: attempt to access beyond end of device [ 639.122574][T14840] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 639.126148][ T2141] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 639.138930][T14840] exFAT-fs (nbd5): unable to read boot sector [ 639.138945][T14840] exFAT-fs (nbd5): failed to read boot sector [ 639.138955][T14840] exFAT-fs (nbd5): failed to recognize exfat type [ 639.163699][ T2141] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 639.169493][ T2141] debug_check_no_obj_freed+0x4b8/0x600 [ 639.175062][ T2141] ? __pfx_mark_lock+0x10/0x10 [ 639.179910][ T2141] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 639.185960][ T2141] ? lockdep_hardirqs_on+0x7c/0x110 [ 639.191163][ T2141] kfree+0x2b3/0x4b0 [ 639.195032][ T2141] ? rcu_is_watching+0x12/0xc0 [ 639.199800][ T2141] ? kvfree+0x47/0x50 [ 639.203776][ T2141] kvfree+0x47/0x50 [ 639.207557][ T2141] ? __pfx_netdev_release+0x10/0x10 [ 639.212758][ T2141] device_release+0xa1/0x240 [ 639.217327][ T2141] kobject_put+0x1e4/0x5a0 [ 639.221771][ T2141] put_device+0x1f/0x30 [ 639.225911][ T2141] free_netdev+0x4b7/0x670 [ 639.230414][ T2141] usbnet_disconnect+0x25c/0x500 [ 639.235368][ T2141] usb_unbind_interface+0x1e8/0x970 [ 639.240647][ T2141] ? kernfs_find_ns+0x2ee/0x3f0 [ 639.245492][ T2141] ? __pfx_usb_unbind_interface+0x10/0x10 [ 639.251207][ T2141] device_remove+0x122/0x170 [ 639.255790][ T2141] device_release_driver_internal+0x44a/0x610 [ 639.262127][ T2141] bus_remove_device+0x22f/0x420 [ 639.267054][ T2141] device_del+0x396/0x9f0 [ 639.271533][ T2141] ? usb_disconnect+0x10a/0x920 [ 639.276378][ T2141] ? __pfx_device_del+0x10/0x10 [ 639.281249][ T2141] ? __pfx___mutex_lock+0x10/0x10 [ 639.286257][ T2141] usb_disable_device+0x36c/0x7f0 [ 639.291459][ T2141] usb_disconnect+0x2e1/0x920 [ 639.296134][ T2141] hub_event+0x1da5/0x4e10 [ 639.300583][ T2141] ? lock_acquire+0x2f/0xb0 [ 639.305072][ T2141] ? __pfx_hub_event+0x10/0x10 [ 639.309834][ T2141] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 639.315444][ T2141] ? rcu_is_watching+0x12/0xc0 [ 639.320299][ T2141] ? trace_lock_acquire+0x14a/0x1d0 [ 639.325479][ T2141] ? process_one_work+0x921/0x1ba0 [ 639.330666][ T2141] ? lock_acquire+0x2f/0xb0 [ 639.335183][ T2141] ? process_one_work+0x921/0x1ba0 [ 639.340340][ T2141] process_one_work+0x9c5/0x1ba0 [ 639.345269][ T2141] ? __pfx_hub_event+0x10/0x10 [ 639.350035][ T2141] ? __pfx_process_one_work+0x10/0x10 [ 639.355477][ T2141] ? assign_work+0x1a0/0x250 [ 639.360075][ T2141] worker_thread+0x6c8/0xf00 [ 639.364845][ T2141] ? __pfx_worker_thread+0x10/0x10 [ 639.370113][ T2141] kthread+0x2c1/0x3a0 [ 639.374170][ T2141] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.379345][ T2141] ? __pfx_kthread+0x10/0x10 [ 639.383960][ T2141] ret_from_fork+0x45/0x80 [ 639.388352][ T2141] ? __pfx_kthread+0x10/0x10 [ 639.392949][ T2141] ret_from_fork_asm+0x1a/0x30 [ 639.397707][ T2141] [ 639.400730][ T2141] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 639.407981][ T2141] CPU: 1 UID: 0 PID: 2141 Comm: kworker/1:2 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 639.418709][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 639.428739][ T2141] Workqueue: usb_hub_wq hub_event [ 639.433752][ T2141] Call Trace: [ 639.437006][ T2141] [ 639.439914][ T2141] dump_stack_lvl+0x3d/0x1f0 [ 639.444478][ T2141] panic+0x71d/0x800 [ 639.448348][ T2141] ? __pfx_panic+0x10/0x10 [ 639.452741][ T2141] ? show_trace_log_lvl+0x29d/0x3d0 [ 639.457931][ T2141] ? debug_print_object+0x1a3/0x2b0 [ 639.463113][ T2141] check_panic_on_warn+0xab/0xb0 [ 639.468031][ T2141] __warn+0xf6/0x3d0 [ 639.472033][ T2141] ? preempt_schedule_notrace+0x62/0xe0 [ 639.477604][ T2141] ? debug_print_object+0x1a3/0x2b0 [ 639.482806][ T2141] report_bug+0x3c0/0x580 [ 639.487128][ T2141] handle_bug+0x54/0xa0 [ 639.491275][ T2141] exc_invalid_op+0x17/0x50 [ 639.495758][ T2141] asm_exc_invalid_op+0x1a/0x20 [ 639.500590][ T2141] RIP: 0010:debug_print_object+0x1a3/0x2b0 [ 639.506377][ T2141] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 c5 d1 8b 41 56 4c 89 e6 48 c7 c7 e0 b8 d1 8b e8 ae 9b b8 fc 90 <0f> 0b 90 90 58 83 05 ed ba c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 639.525973][ T2141] RSP: 0018:ffffc9000561f458 EFLAGS: 00010282 [ 639.532015][ T2141] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90016350000 [ 639.539963][ T2141] RDX: 0000000000100000 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 639.547907][ T2141] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 639.555863][ T2141] R10: 0000000000000001 R11: fffffffffffd69e8 R12: ffffffff8bd1bf80 [ 639.563808][ T2141] R13: ffffffff8b6be880 R14: ffffffff86be6d60 R15: ffffc9000561f568 [ 639.571756][ T2141] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 639.577634][ T2141] ? __warn_printk+0x1a6/0x350 [ 639.582376][ T2141] ? debug_print_object+0x1a2/0x2b0 [ 639.587547][ T2141] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 639.593425][ T2141] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 639.599215][ T2141] debug_check_no_obj_freed+0x4b8/0x600 [ 639.604736][ T2141] ? __pfx_mark_lock+0x10/0x10 [ 639.609535][ T2141] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 639.615594][ T2141] ? lockdep_hardirqs_on+0x7c/0x110 [ 639.620788][ T2141] kfree+0x2b3/0x4b0 [ 639.624657][ T2141] ? rcu_is_watching+0x12/0xc0 [ 639.629395][ T2141] ? kvfree+0x47/0x50 [ 639.633365][ T2141] kvfree+0x47/0x50 [ 639.637145][ T2141] ? __pfx_netdev_release+0x10/0x10 [ 639.642328][ T2141] device_release+0xa1/0x240 [ 639.646898][ T2141] kobject_put+0x1e4/0x5a0 [ 639.651291][ T2141] put_device+0x1f/0x30 [ 639.655423][ T2141] free_netdev+0x4b7/0x670 [ 639.659815][ T2141] usbnet_disconnect+0x25c/0x500 [ 639.664729][ T2141] usb_unbind_interface+0x1e8/0x970 [ 639.669901][ T2141] ? kernfs_find_ns+0x2ee/0x3f0 [ 639.674734][ T2141] ? __pfx_usb_unbind_interface+0x10/0x10 [ 639.680427][ T2141] device_remove+0x122/0x170 [ 639.684992][ T2141] device_release_driver_internal+0x44a/0x610 [ 639.691044][ T2141] bus_remove_device+0x22f/0x420 [ 639.695962][ T2141] device_del+0x396/0x9f0 [ 639.700269][ T2141] ? usb_disconnect+0x10a/0x920 [ 639.705098][ T2141] ? __pfx_device_del+0x10/0x10 [ 639.710013][ T2141] ? __pfx___mutex_lock+0x10/0x10 [ 639.715013][ T2141] usb_disable_device+0x36c/0x7f0 [ 639.720021][ T2141] usb_disconnect+0x2e1/0x920 [ 639.724677][ T2141] hub_event+0x1da5/0x4e10 [ 639.729077][ T2141] ? lock_acquire+0x2f/0xb0 [ 639.733556][ T2141] ? __pfx_hub_event+0x10/0x10 [ 639.738295][ T2141] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 639.743899][ T2141] ? rcu_is_watching+0x12/0xc0 [ 639.748634][ T2141] ? trace_lock_acquire+0x14a/0x1d0 [ 639.753814][ T2141] ? process_one_work+0x921/0x1ba0 [ 639.758897][ T2141] ? lock_acquire+0x2f/0xb0 [ 639.763372][ T2141] ? process_one_work+0x921/0x1ba0 [ 639.768463][ T2141] process_one_work+0x9c5/0x1ba0 [ 639.773383][ T2141] ? __pfx_hub_event+0x10/0x10 [ 639.778129][ T2141] ? __pfx_process_one_work+0x10/0x10 [ 639.783478][ T2141] ? assign_work+0x1a0/0x250 [ 639.788049][ T2141] worker_thread+0x6c8/0xf00 [ 639.792621][ T2141] ? __pfx_worker_thread+0x10/0x10 [ 639.797705][ T2141] kthread+0x2c1/0x3a0 [ 639.801752][ T2141] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.806929][ T2141] ? __pfx_kthread+0x10/0x10 [ 639.811505][ T2141] ret_from_fork+0x45/0x80 [ 639.815894][ T2141] ? __pfx_kthread+0x10/0x10 [ 639.820459][ T2141] ret_from_fork_asm+0x1a/0x30 [ 639.825217][ T2141] [ 639.828855][ T2141] Kernel Offset: disabled [ 639.833213][ T2141] Rebooting in 86400 seconds..