last executing test programs: 11m28.495900735s ago: executing program 4 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, &(0x7f0000000340)='\a\x00\x00\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000003240)={0x2020}, 0x2020) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x22020400) 11m27.608845971s ago: executing program 4 (id=452): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES64=r1]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) close(0x3) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x88000) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) 11m25.272028552s ago: executing program 4 (id=460): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073e"], 0x54}}, 0x0) 11m24.631194786s ago: executing program 4 (id=461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x26c8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x25ec, 0x3, 0x0, 0x1, [{0x10e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x10b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8b, 0x1, "085b5c83d3acb816af1e1bc218e31b4cf1a3779d7ce62508b4c28024707c2c70da59d90fdec9fb590075d3a9f7a7cfa4a2543b321191e5bd11cc4e5c5e3ffd1ef52e230f08b9b74dc9f756fd099e4497e91544cd75b6dfd677c3bb82d1e78b222f109f7f137f9a2c9ad43cf8202854aa033c8bc688274f24313c6b9025c2b250b30e211ecda306"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "622aedec5a54c37758cdc49a90efcb9061b5789130ca7343900e9e0356ee7caec05574206432aee756b7bbc759f8473249c3dc660420a241ece1c6599c120aa3151e46e19ec8270495d6ea2a8d8164215ad3dd78e4231cb7d5b908612bf4dca174e494c59c9695407683cf8727a78ba1626272b46bdadf20071f86409e99f9ebccf4f83dc0d0ef6bc999c358664a1932270df5d931e9712a11fcf6c7ad5a6b6e1a441de732b6199af128380a2c6b84a68d6a2fd146b2fc"}, @NFTA_DATA_VALUE={0x96, 0x1, "a1612e81a999b6e58d1071a49171729856d1f8bb253427aa24023f22a3de372c23be90e61b7c6561040f5febf895a3d8ed33a6440af78d545b9648acb16ecc57dee86e68ee56ebbe138b7974cbbff9f693dec2ebdfe508fcd94148f6725213ed66b3cda083761efc4ede8eecc3d7be9b2eb49e1f112c9cec0502cd1bc69fdeec7567d973c5d6e3b5387aca6bfb7aae140bab"}, @NFTA_DATA_VALUE={0x4f, 0x1, "b60c3ab85b9c4585262dd44d6b786e5cc93cf8235ad7cdc4eb6034b9ebf387db592dc3120d0a5650a343f53549700225b3c28e19ca38e63f6de3b3eda5a3951762c3617d08b7bfb60d9ff2"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x12d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "67077225c56b0b59cebda11808f771b2344139f33697a648bcce450201d5d79a9bae76fea78a83bf9aab4267c931d11d66128c3205de8fff284a67881f3fd99793590f5a764f23c4e6e8350d26c02022eae82afc707aea5f527c35f3255d4beb27989d2f9e818675c01073d9bfa86401e2901976ba98f805c4b6f9fc691822476dfc2c072308c30d4674c5423d0e2d6407"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "f84910f8d13386425e3e665937683244411a2ff9c50c8dd17653925abf0bb0c6807c6fdaded43eab6107d5ed1e08aba1a00ad34aba2afdf37e0eb2d98dab4a919566c10b4be4c3fa5ab77c2ede2b60d86fdf9d3366c497d3017a2283ae2a09e64ea206c08ddab578b81b6fc9c3d4b8a26a2c311029c97d891ac5d2a9f8723a1fd4670d11a9c1014d152fb07d2904cca7b14748dee91b10e032290042c6c92057202e0ad17bcee196f734bc36e4bd3c761cd128cb7fb79dc83455f111b3505c7155a30660f41aa1b710f49197122df5239a01cbafec"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_KEY={0x1044, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "2f4272b2eb1a0192c4c5785a1627e18b410847bd46ab1a92b630302bccdc9e1df5bd83ef561af3050dfa8edce183b4381f59399f0bb51bd8998948fc6aa9c61939a1d3f4b9ac4486be649c18b69f4accb2586b8ee7fa56ce1464ee66604a5d2335cc9610a181fb19ef3ea436d30932a77c76fe19948dbbc22adc3675f30ca1a347c77ae6734bd9be3a1c9fb800167645717619225ddec8aaa39da1a41c288969983603e89cffd15abb6ab7137dff"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x120000000000000}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2730}, 0x1, 0x0, 0x0, 0x400c4}, 0x40) 11m24.343061564s ago: executing program 4 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xc, 0x8, {0x8, 0x0, "b806849a7cd2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x1a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000140)=@OVL_FILEID_V1={0x1d, 0xf8, {'\x00', {0x0, 0xfb, 0x1a, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547", "92e2c4cfe8"}}}, 0x30000) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x141842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x20) clock_gettime(0x0, &(0x7f0000002040)={0x0, 0x0}) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000000)=""/125, 0x7d}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000000640)=""/223, 0xdf}, {&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000840)=""/178, 0xb2}], 0x8}, 0xfe}, {{&(0x7f0000000900)=@ax25={{0x3, @netrom}, [@null, @rose, @bcast, @remote, @null, @bcast, @null, @null]}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/126, 0x7e}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x5, &(0x7f0000001c00)=""/153, 0x99}, 0x40}, {{&(0x7f0000001cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/217, 0xd9}], 0x1, &(0x7f0000001e80)=""/233, 0xe9}, 0x4}], 0x3, 0x0, &(0x7f0000002080)={r4, r5+10000000}) socket$inet6(0xa, 0x800, 0x5) 11m20.327880126s ago: executing program 4 (id=486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0xfffff000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) socket$rxrpc(0x21, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x38}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) (async) dup(r1) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0xfffff000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) (async) socket$rxrpc(0x21, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x38}, 0x0) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) 11m5.127625759s ago: executing program 32 (id=486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0xfffff000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) socket$rxrpc(0x21, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x38}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) (async) dup(r1) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0xfffff000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) (async) socket$rxrpc(0x21, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x38}, 0x0) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) 5m5.281011731s ago: executing program 1 (id=2272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() sync() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x2}, 0x18) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff012000697f000000000000000000010000000032000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) dup(r2) 5m4.757164136s ago: executing program 1 (id=2275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r5 = io_uring_setup(0x17b9, &(0x7f00000004c0)={0x0, 0xb7b9, 0x2, 0x2, 0x2a5, 0x0, r4}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0), 0x2) close(r4) r6 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) fsmount(r6, 0x0, 0x0) 5m4.000055508s ago: executing program 1 (id=2283): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="bd830101e6dc4ee4e20198585f8e187ec63d973dccb1dd7e1a555b3f5cc4a1f5c5e5ce8ea6ab4addfd5652d967d5388d81399d01695ee87f0fde3b44df562b0612a27789b8203d7d5d3c94dc957e7f96426408846178ff7dfcf93735ef43ad16e48ecc631c57a3e3e285c7e02e8c3f4c2e1abf9847d0bec26d10a8fbd552a07c9c61"], 0x4) 5m2.435821547s ago: executing program 1 (id=2291): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x1, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = fsopen(&(0x7f00000000c0)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x0, 0x31, 0x36, {0x36, 0x0, "017c95e5afff4304122d8950684d4de3a6682335ea39291eccce9dc5a4a1094060ed12c1a09ffd8275f2f50c586e58822f39868e"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000440)={0x40, 0x8, 0xc5, "4f63743e3eae9dfc5286316a12a1b5da104fb6b1a3fcf35d6c76da24fc9749671c327b50a7582e868066a69abcfffc62392289f27a5d61c35ab33650bac9f3fd3379eb41d9fd3f0cbc5bc10df15c48ab732a5e2818b506d4e7c731184e0ae0b9277bd51227a0c6859156ed78031bcb05a0291993bb9863ca29985f563ef281e14a1063855e030006fec2f6ee5b419055e0c008ff4071664b9c625024e6932af30c26d9c723aaa3988f7dbdaa1bf3f2f1386e393eea438b77fc483a52b7688e2879042bce5e"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0xfff9, 0x2, 0xfffff088, 0x5, 0x2, 0x1ff, 0x4, 0x4, 0x3, 0x9, 0x5, 0x7}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x7ff}, &(0x7f00000006c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x901091, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0xee01, &(0x7f0000000240)='./file0\x00') setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000002c0)) 4m59.29581824s ago: executing program 1 (id=2307): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x2ca, &(0x7f0000000440)={0x0, 0x3723, 0x400, 0x2, 0x291}, &(0x7f0000000300)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) utime(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x7, 0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/212, 0xd4}, {&(0x7f00000008c0)=""/4096, 0x1000}], &(0x7f00000001c0)=[0x7fffffff, 0xe4, 0x40, 0xffffffffffffffff]}, 0x20) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000004f80)={0xe, 0x0, &(0x7f0000004f00)=[{&(0x7f0000001c80)=""/195, 0xc3}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000001940)=""/51, 0x33}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/71, 0x47}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/248, 0xf8}], &(0x7f0000001980)=[0x9, 0x61], 0x7}, 0x20) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x76ef, &(0x7f00000018c0)={0x0, 0xf57b, 0x80, 0x0, 0x1b1, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000400)) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000019c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000200000000000052fbeee3c41d5fc829ad88968834711400128009000100766c616e000000000400e78dcf9a0da0d84f0abdc1f88390f48dfcaf5fe52a1db3dda358f11586ab59a9b70078ee8f332b5ada794d65c8e1fc8d878cf5542b663a95a0bde3074d869000"/118], 0x40}, 0x1, 0xba01}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r6 = openat$cgroup_ro(r0, &(0x7f0000001a80)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_open_dev$usbmon(&(0x7f0000002640), 0x7, 0x50000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4m58.087334569s ago: executing program 1 (id=2311): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a4610000000109021200010000000009"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x12, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x22, 0x0, 0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r6], 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000180)={r9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={&(0x7f0000000380)=[0x0, r3, r6], 0x3, r9, r10, 0x7, 0x6, 0x6, 0x9, {0xd259, 0x2, 0x7f, 0x7fff, 0x200, 0x5, 0x2, 0xe, 0x5, 0xff1c, 0x0, 0x80000001, 0x2553, 0x8, "1425101ff5d4fe5b89a94a3ba57a1e5e0be08a6b6cc7ba372338222a32ee7a8d"}}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x60, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4m57.749951407s ago: executing program 33 (id=2311): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a4610000000109021200010000000009"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x12, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x22, 0x0, 0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r6], 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000180)={r9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={&(0x7f0000000380)=[0x0, r3, r6], 0x3, r9, r10, 0x7, 0x6, 0x6, 0x9, {0xd259, 0x2, 0x7f, 0x7fff, 0x200, 0x5, 0x2, 0xe, 0x5, 0xff1c, 0x0, 0x80000001, 0x2553, 0x8, "1425101ff5d4fe5b89a94a3ba57a1e5e0be08a6b6cc7ba372338222a32ee7a8d"}}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x60, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 8.404803974s ago: executing program 5 (id=3555): r0 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3}}, 0xe4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (fail_nth: 2) 8.05488757s ago: executing program 5 (id=3557): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={r1, 0x8, &(0x7f00000000c0)=[0x2, 0x9, 0x8fb, 0x3, 0x9, 0x3, 0x8, 0x1], &(0x7f0000000100)=[0x7], &(0x7f0000000140)=[0xb40, 0x2, 0x4, 0xc9, 0x10, 0x73]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x6f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20000001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r5 = memfd_secret(0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x208, 0x12, 0x400, 0x70bd2a, 0x25dfdbff, {0x10, 0x90, 0x8f, 0x8, {0x4e22, 0x4e22, [0x4, 0xfffffff7, 0x6, 0x9], [0x4, 0x0, 0x0, 0x1], r6, [0x9, 0xcbfc]}, 0x200, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xac, 0x1, "a6976b0d08ee9846f3772aed3575821502b892b3913ab8be4fc94a768ba6a85fc9fd302cd1ee472ac99cbfb8f4a256ef6ca0bb7bc371854fcecfa91e03844f2934a584bfdd8fc008a2129cf59ed692db259e0e08c90bf1831268852182a9b0be41ea1c4bb20073dea1951c6d7be25aebabb23c44178b7692548636af9b8c590c0dc231110bc31d33f35d051b1afa682a4c587764ece5f110c3aebcc3173f5ed6021108d6fb89ff2b"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "9858909e8d2e0029f76753ef5f94338a80917f23525bcdff37aece4c0c317928219f26fcf2b24df9f94672bd051791110cb64af7bb63eb75a708740feb091dcda4ca71f5eadb718fadb90d49225abebf30c503c9c09aa2a703deb34475aa5c031f9776cfa3db0a83d44a790847275fde9043d4783eec4998f08fb927b0f2f01df85caa0c46988d4c8a116733600a9d3b437f42fea45e088dbf9fef10dff80037332777"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "65eb1704ed9d1a0d825ee9f9ca09559afc8e30652bdfd0e35c1bd4f0a230022110b1cdf18c47074ef9829b86520344b31ab95a2450d4995e32cfc79a839c0c7205b47d76b033335ef3ef6198d717b0dd3652e4c683243a6a9a443501111eac46ef66"}]}, 0x208}, 0x1, 0x0, 0x0, 0x40000084}, 0x40040) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000740)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, @default, @netrom={'nr', 0x0}, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f00000007c0)={0x3, 0x0, 0xc4, 0xfe, 0x35}) sendmsg$802154_dgram(r5, &(0x7f0000000980)={&(0x7f0000000800)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000940)={&(0x7f0000000840)="4d66f79458454bd6d9e6d4754122e30ce0d9bee287e88c5b5256dc16043a631f30103af09c8b04c213e9c6d8a6f1d28830ad5a4b01c291772ceaad7086e62f9ef6ba993e1749c4899382ea637828d424c393d8548677135d14151750721587c50f8491fe6962e30833f09fd705482dd5f9ac846080b412928be885837cc3b21f756a0e84f7bf830f8305f470e4d0a09da560ea63f98e0c329d62f874b862be3c4680815e34b9571a68eda8a793f8f474d7b0883a8a76ab65fd86b16224687a8b18c61dc4", 0xc4}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000009c0)={0x6, 0x4, {0xffffffffffffffff}, {}, 0x5, 0x3ff}) sched_setaffinity(r7, 0x8, &(0x7f0000000a00)=0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000a40)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000ac0)={&(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x3}) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000b00), 0x62000, 0x0) ioctl$TIOCGPTLCK(r8, 0x80045439, &(0x7f0000000b40)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000b80)={0x0, 0x100}, &(0x7f0000000bc0)=0x8) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000c00), 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, r3, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8091}, 0x80) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000d80)) fcntl$setpipe(r9, 0x407, 0x7ff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000dc0), 0x30841, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5c}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x200080c5) ioctl$VT_WAITACTIVE(r5, 0x5607) 7.077874349s ago: executing program 2 (id=3558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 6.548809241s ago: executing program 2 (id=3561): syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xe9dec7a30b703f97) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x4ca8, &(0x7f0000000180)={0x0, 0x3447, 0x4, 0x3, 0x31a}, &(0x7f0000000200), &(0x7f0000000240)) 6.231053973s ago: executing program 5 (id=3562): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0xfff, 0x0, '\x00', {0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xe}, {}, 0x0, 0x0, 0x4000000}}}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x401, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r2, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.132458477s ago: executing program 3 (id=3564): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000700000001000100090000000155f89606df393c88e4ed7b733a00c73932364d71921f1c6e269380954bd7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="80030000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6], 0x380}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r7, 0x3, 0x0, &(0x7f0000000040)) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r10, &(0x7f0000000180)=""/34, 0x22, 0x3c) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) 5.127881926s ago: executing program 6 (id=3567): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x12, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x22, 0x0, 0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r6], 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={&(0x7f0000000380)=[0x0, r3, r6], 0x3, 0x0, r8, 0x7, 0x6, 0x6, 0x9, {0xd259, 0x2, 0x7f, 0x7fff, 0x200, 0x5, 0x2, 0xe, 0x5, 0xff1c, 0x0, 0x80000001, 0x2553, 0x8, "1425101ff5d4fe5b89a94a3ba57a1e5e0be08a6b6cc7ba372338222a32ee7a8d"}}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r1, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x60, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"}) 5.081928278s ago: executing program 3 (id=3568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='objagg_obj_destroy\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000340)=0x4, 0x12) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000440)={0x0, &(0x7f0000000200)=[{}], 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r5}) r6 = socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0xfff, 0x0, '\x00', {0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xe}, {}, 0x0, 0x0, 0x4000000}}}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x401, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r9, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r9, r7, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14200000", @ANYRES16=r11, @ANYBLOB="020026bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r3) 4.525985875s ago: executing program 5 (id=3569): socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x4) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000580)={r3, 0xfffffffc}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x105, 0x1, r3}) getuid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000d0000000095000000daa4f941"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6, r6}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r6}, &(0x7f0000001540), &(0x7f0000001580)=r4}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket(0x848000000015, 0x805, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 3.859893477s ago: executing program 6 (id=3571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0401fa1b046b55fe6fa2816de546a5c3206edf2545d534317fffec892e23747129b1cfcbd3f21b8f79"], 0x7) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) 3.823306874s ago: executing program 3 (id=3572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/dev\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x1040, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r5, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000000005000080140011"], 0x28}], 0x1}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000003ed000055702e87db84ad459fc6a2174fa8ec6006723390516b4f6e49c30000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) write$FUSE_BMAP(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_setup(0x2a20, 0x0, 0x0, &(0x7f00000002c0)) creat(0x0, 0x80) 3.297558553s ago: executing program 3 (id=3573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) ptrace(0x8, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89e0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000500)={0x2, {{0x2, 0x4e23, @multicast2}}, 0x0, 0x9, [{{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @empty}}]}, 0x510) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xb, 0x0, 0x0, 0x101}}) 3.130895403s ago: executing program 0 (id=3574): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0xf0, 0x52, 0x400, 0x0, 0x0, {0xfe, 0x3}, [@typed={0xdb, 0x1, 0x0, 0x0, @binary="fbcc4ff587f6b833aa6ff7ff40e735b6312376a9861ec364814879b827663ea22876aa6852c515ef5a7ff3aea3b37c10f51637eb45d439bc28d239d7d4c0d82a7e2c487df56938706365e4c5dfa461d36d544224f07ede4aa9bdd6a4ab9a3970d871fa5666bae42d8062a50abd3c65c2388310f0305a07659c996efb89590a3898ad6f2c32182477eff00a5a827643d84463094d41a617b723343b5c587233ddc526feb7c70267327822656f41bd8c775ae7919a1b54f80d0802a338d0d18e475a922e3fa5728bb440d345da5da8ab91dbaab198aaf481"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4c805}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000003ac0)={@mcast2, @private1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000810000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r4 = getpid() syz_open_dev$MSR(&(0x7f00000000c0), 0x22cad56b, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x100) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 2.166986233s ago: executing program 0 (id=3575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.111465137s ago: executing program 2 (id=3576): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010102}, 0xc) 2.002548146s ago: executing program 5 (id=3577): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x810, 0xffffffffffffffff, 0xca1a9000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "7464fbe08eb369"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e9840)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x4, "8ed195df08363c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000039840)={0x0, 0x0, "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", "477acff84d96f531d6baf02e28cdcaa5120dad63a9a95f878d1ee735bd5300fd5151c97fac116af61173c6f291509207a695ec3489ff48da6543d17cd42d0b762a3b5c88d221384c4762ec41db881748348e5ecfbedf77ed30bb8ff3b341dd9c724ecaf1a7dc5afa280f6492ed73e1fa15096c461e775c5d452ede7027ed3a4817ecc07fef363eadad791de803b8d526dbd89192ec8b515a64d78742e1d611d80f0260b215dc88aaffb1da2823e835a3c49c613481b0f478f0f9d1186ce7e35877482840abc25755c96cad88e95dc7eb74b87a18ce9e97f1c1047e0db00a5b3f64909a2de3ef92866ba3b0971932ade7b8d424772454ce68688fe1b1ce8409d2a1cac9ff006d9835a1f4126bd6f705f642258af13b800d46dce1463cb2e56cf0306ceb3d2d57e8617079ab87f87db8356f2bb1d531e552a0e5c3feb42d58975f96ce09c5e525759c110e20646949653448b6d5561c218772b7dfa384662d011aa603187e8ce0f9989a45718ccfd099d7ccbaa233abb9cc4e7d8cfce1e1e3bb4e1613b1227329556a3e733bfc977e09c3005d530f35866e248d055e3ca56f88d1ff7a0c92b106b22e4a3c3a593f7a0105b96c90953880686118a1bd6c22e798d1b8c5f7e6d1c88cb3fa2df29ca86669f9c83351fbcb5af6bf76b2c4da5d9f81890b4cec572e442e5ce61b10463a299d3e15d01ecf85225c8bf51ba3a3db4924141c3244eb112b2d8ca618f6e110c6a7535a6d63b1ce4cd79ca760e9603062c7cdbd0b220177266fd46a8c1f6ffc651b40912c121069b5823f61d8aeec6c236084b69b458f59d1f52c938631b258b5b4bc7fcf160b13194ba0c4920190c7d729adae18ae22ec12525e2ca70dcc5130d313275366c127ec6786b7827a2edfcfceeb28963a4e4415afdec2447e8e3173eb62e402483b21bb04baad0ff0102aa2f434ff5de525316dd2b5877a463ac5bdb8bc5f5e4aca7129f4e2eada30ee9b1d167453835e3871937a90707c34aae004e2adda250c155e2e26d1e1d99d1a8ae3ae81e589b241310a08a338939ac89332c55d619cded8e37f9f92336e5ef21d4b02ad41768234ac0dcc5b3ccf44c78b11ece8b07e66c59b06a31e86773163c9f41f1f9c82ae0f7425a1a10855e8d2bdf84e3c853824f19f0e1730d9e999d07a57a480d02b5af600fb3beee3126fc81e190a1858da126ae4273a5ebc753700366188558748ce1678ab4fec95d6fdd887cdcd6cd23809e9a2fa582f4073e3c0b1bd21048012909419104dd8ff630973ab97053e17da6b6c3496b595a2c0f9ace6c9d28230edc82e61975816c8cd73595a90d73dead4b40147b9e08a952affac67c6d75ec078dcd7ab6ac28e285b66ffbf35f4e32ff6b709f13ee2f81d6d5e158e9b52f8c18c477f3fb39864451dd6359894a7afde3998e7c79f2e96a896d040381b03c5d76e2e90de95adeacf6ec79e6c1f51bc19d10bbbb4146fe4fdf93b66af23e2a5aea864388e27ba9e4b7914dac933eee852ed7e7a696ae41753cd3046713f815988718f5236ce6bfe4cea30d4fa1796ba51effadf185c87300a87b54b11432d274a9dc5249511b4e077b35748c6deb5e2c3eafa9c625047f74c7e362e3b4f9a8b78f539811012cec3bc60e2e025cdfeb2309223fa499c4fafb0ad4f76960b1bbbd95d69c53d29c3491bd47351629a85525146f9db48ac381ca8c95d3b31843d855699f7a11499170c32a3f751dd3adaffb1263904c413f17910a38a46cf8d201d796944fb1fa11da43c9bfb8f897afe36fb09c7693a436d4574352e00d78cc8a60cc35fca559a55b511eed095fef0d8632422399fb9d27898c4ff5c63bb8393a54078097d4e2fa5e06131a41b6a91d1bdcbbabdc266b5f99b78e9939ebe78b4d471052faf84720d1cabee96c378379ce3f5674973d1d6609e6cabdc4d20fdc4d831d423a7ece4b8c4004e4e405cfe2cdea5b163602a39303a57a816203de6fe516571fa6ec204f2504d3550f426898b20c49ce7d9902743a8ad56305c38ca4dcedd8b8824f6848b33c120756d8fa0237495ebc74eed77887fbe53d4a9b2eaf00c9b205d72879799cef3a6a2e508fff010be60839a9b6dc957801563a80eff3f5b1242bb531512ebf0dc1a1635ddd5cb38f8e5d57992d536bf653648e1595cfc2e23c4372801925a3513e88f8891afcab37bc0c5a6833525ebe0109b385cd54e98dc01f9e40a7b60a1f42bff1b98b066c39cf782fbbc3128c24dbf4732b7bd8a92491339fc75ff1a3eb94e1e2b326527930d0aedf74fb308b5b27c2fcedf7cfc745123f728097fc02f0c3449486c72b9dea93d8fd8bb5cc9b6bd3cb5fd643fa3da860ae9f188e4d87bb46b82e0542bce513fe3ec64d8a61b451d7e7bc233a8e2149154ef1ea7fb259092dd2b2b73cf849fbdd86aa0807db595ba766b86b1bdc76e115b0f5d60a158ff32169c9b8867cdb3f795bdc0c2ce8fe54c2ad5dd35a38b6806f8e193ac693186b762f688750cb170ed353d04ef65c19c9e2c90ac41f990a59562ab13a2561e5293d887aa7cdfae4e751ca080d539af02ff7123c00cce35214c7361d9409a42578ed761797337d500bf1605bef8fbf571447e71cfa9b9cde02ce0f3a19cd9d5655e484fd0acb5f3859c117c7440e3458e73e74ff6b8fb0c33566cd44391a46819a483122dbfb8e020978bc3b1fb8117842e699704cc0017fa56b3bbde08603c2be762581f8f36fd6f9443cd50a781805065470a405808ff3f576f9270d6e6c2c733b442f4f9d08bd87bdbc7c0f40899923b6e2a4b2937a7b673e17f57853941b6e308b7c885dd9c6d1f74bc3a9790dcafa84937d98186b93225f1047fc4b51fdd1b9d1efc67c0c34f05edd271bbf012dedce8be2f53c3db8ffb765933897a9883bc149a1f4d656e26905db0988b2ad5dda5678239946cec496ed38f27186e08a2a8a1562cc0fcdff381d00dfc4709f2c26cf2807078b293e7437a691ad0e3ecd28b5ab44fa474f1c5c602598576d3993b9ba629a82ca9e41749d4397e079a185877036fe0a583ae88f31c125779b790492a40bb6e020e51bc21916fcd2d5c220cb02e842fb433c3b4f1d8af770f302389ea2f9510dc19c84782cd40424fc1bf399f83723ca67f9b0d4a4466e223de9c754363832171f644ddfb7303d03fb438a6c685b797bee31551f302b93bb34feffff298061c0828b722770866441f700b901b2b298b0550d7f9151156dd26e0fa3c5b976052a449d554a3f40c7a6ce181a4bb071432ffd86299686517dab13f1052f9289b4bdd14d37f81a0bb1039e32a08f341020ba16120e3df2c9352f6a75454cd7e7f8cd04b65e5ec6363ba66788faa25637bf57d2a22801d807f597f91808afe1b06f549351986287115fcdc95252c132250a688dbf75934ea540fb7b69c18ca9bc37cafdaa4fafb55f653f2bb0e1e218bb92fa6d80e10d3274f68c823cd668a22fd2ee88214f095e4794c51e59581d13aff42c6d09f6558fe42802695503321ef7a2b37b3b2f2791e88f8868cf841f9559042da5217db68be25ff52573967105d898497d6dd6c05aee1c19cef7ad7624bb8965205984b6644580dc59fc170d7256c829404902f68a8822cc3e8a72ef19d8c5a22302151306ab400830673bd13e5533d6aa68ed67ae8bc9d13f3f5f45bb1f020287982f2f43eda52a01693d3512a1b84915b9446d5e3ac5807158570f2eb7ae64d939a6bd3bed51faa78566c92e492ceb958ba1df776b409d418153d9f983b535ab75baae3d809a127b173cb93965ce4137425662dc3116c7dbf5945b921c784798ece26cb08523d5de57e7a11a1fb32e139bf528b3c421f4bb4f558c13e71a1a2d948daf2ef6af01fea203027fbe32cebaae7e93a927c491b3eeec73691d01faee53ba60e8c7601af17d62281b5c493502b0f396cd88b535b7564ea95948d3eb75b8acf44b426f0f2bf796506f75b95af1b4c1a19a787a8ce85d960f44a6112013011da74ce8aa60a5f5eeb9174bffe50660d1dc4343bf4b5bbad3a42cb7c112080f882d833246fec02f2e88d62cdf949e09cf9fa5a82fac2aca6aefe7bb620d46954a9582bc1d2380252e007533d1e3022e83e5fdf3842002c1c1274a71691a61cf123820f516548e46a0f653ae418682d37dd4b9ee8438552ba660d96a1fd4633570493c0150714d11426c439ad98cfde74ba8a2fc2b8b5ed8fa4de8c97795d03badcd30a96c2b1cc3ff474c734bad6bc60704c08eb46864516345277a26b07e3041bd38fa13400b856b862fa0d7ffa53e036fc04df69bdbd35f7ae3be46b6b5f3be261bb40547628dcee0c92c276c1cb4b1fb3bd0077d687414ba0063922654e81a5195c27ad3d1fb9fb506e7599c6b4228bf9fcc7113203a1574121b69950684275dcea338d4cef22bd97cc4f14e7feecfd30baf5c05f67d9553445f820ffe12b033d5367489a831d7ed36afd4a256498bd52da5884bbe030437e94ad5f4e527319a914e0bb4974e930f7c7e4803835f26b0b3eac64583dd9c6c0565b0c92eb202b1b26f1895a18250b91281b3359da792de83f181c1d994207123e1ffa2b6a4947785f4e6d300c592288715b50d11821b25387136adac609de8caf1b8e723267434856aa13f8f910aacbae5cb5df2c4931dfe4fb1ff45afd10d92a7e860ec879ab3f4e423c4e3c384798aa6ec5a42ab1c61fa3db8c086b819d2d7d34655009a63e0e1eae2062f6b86947833225cd4d37bb3795a543ec2be6ef8c208e247f015b31176ffe76280825220c05b506c460a1af4d683d8f02b1d9b852250a066f71cd30b257abe780d8cce04c90dba73b4bfb45aac5fc36ce73e411c9357dff7b363e0d8cdc8162e419ccc2b73d92fdc65c6f384de4099677f6ae2bfb74d9050131b7cb9f2fae99674b2666288e4fa4ec2ee41a859e20b43601c723874849ef9dae84d259a911511e6f7a4a5a505d4f1c14a8a927b1a14e9a4d1ecdc99e03026dc33ba3c1a4ed5b4f45d56e1970c884bca90fb2e2319a2f65b2601d416caca3e93731dcf2f4ec10f00981c14a86c24e65838203da0106f829dee016d32f23cbc95f0785d1b5658c58485ff66562380a22b079f246f9653466792b0ae1e9ef3a08d2690a4ad8caa5fb43e449ea9aa0887760385736f7d9bc335e00d35df17120660042026b8dbdb3b8df9fe54b159bccd1ba9080eeb3cf816fc1236ce685b241f6bcf014a1d2723a55876f35803fcf43b39dc1380953eeb36685710de46ed7e36609d14c22807156859ab346f84a89c003ed2ee88595f00d0041a15aac20ae4e861831226eede7ba3853809b8e85936e54366bd7acb12ecc314fb2f8de07afaca1902d52bd086ceac3837d1695ae1f3b375f2f46e26e094699290b95c5747d5a6fdcd42b"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f0000000440)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x3}, @sack_perm, @sack_perm, @mss={0x2, 0x6}, @timestamp], 0x5) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x2}, &(0x7f00000008c0)=0x8) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x160, 0x0, 0x148, 0x0, 0x148, 0x240, 0x240, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}, {0x3f00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 1.909938027s ago: executing program 0 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000700000001000100090000000155f89606df393c88e4ed7b733a00c73932364d71921f1c6e269380954bd7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="80030000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6], 0x380}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r7, 0x3, 0x0, &(0x7f0000000040)) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r10, &(0x7f0000000180)=""/34, 0x22, 0x3c) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) 1.908596723s ago: executing program 3 (id=3579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000200400000000000"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) r2 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0xa557, 0x0, 0x2, 0x94}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT, @ANYRESOCT=r2, @ANYRESDEC=r2], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.664327142s ago: executing program 5 (id=3580): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x60, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.647445332s ago: executing program 6 (id=3581): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040fe1e000004fb00"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.647119837s ago: executing program 2 (id=3582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01bbba000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 1.000972632s ago: executing program 2 (id=3583): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3}}, 0xe4) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 988.939511ms ago: executing program 3 (id=3584): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x52}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x1c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x41, 0x4000, @fd_index=0x8, 0x81, 0x0, 0x0, 0xe}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 895.850267ms ago: executing program 2 (id=3585): syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r3, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ustat(0xfffffffeffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000017f82677000000000000000900000000030000009c020000000200000000004db69d690021000000050000000000001bd869b59363b3ea69f36369100f5419eb334869845394409076035e15fa150f573f8ef2db905cfd8b3f5efa06ed3d7a965332d54c39ec3e22154c394cb881121f6374c1fb"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 882.758806ms ago: executing program 6 (id=3586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) fcntl$setflags(r0, 0x2, 0x0) 841.340584ms ago: executing program 0 (id=3587): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef49462c88b6c7451f8e5"}) 671.92066ms ago: executing program 0 (id=3588): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 648.639771ms ago: executing program 6 (id=3589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='gfs2\x00', 0x800, 0x0) (async, rerun: 32) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) (async) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x3235, &(0x7f0000000100)={0x0, 0xb1de, 0x200, 0x0, 0x356}, &(0x7f0000013000), &(0x7f0000000380)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1eba, @void, @value}, 0x94) (async) r5 = socket(0x22, 0x5, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r5) (async, rerun: 64) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) (async, rerun: 64) recvfrom(r0, &(0x7f0000000180)=""/203, 0xcb, 0x0, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000380600fe8834e5cd225c868e0000000000000000000000000001fe8000504f0c09fd0ddcd263cc7d9119aed1e3000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e400000090780001131234488cf959a05b515682f44cccac99ba1d12d2b653e0c9d32072c19dd6ca814b7d7b"], 0x0) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) getsockopt(r6, 0x6, 0x2, 0x0, &(0x7f0000002840)) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xe9, 0x6, 0x800e, 0x3, 0x2, 0xffffc4d3, 0x6, 0x1, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r7, 0x27, "6e2b26073d1aeb8865b7ab80d3c938f1737fd76fee3362b71de73d2b432558ef9fdfdb5065f512"}, &(0x7f00000000c0)=0x2f) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x100000) 460.596884ms ago: executing program 0 (id=3590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) ptrace(0x8, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89e0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000500)={0x2, {{0x2, 0x4e23, @multicast2}}, 0x0, 0x9, [{{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @empty}}]}, 0x510) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xb, 0x0, 0x0, 0x101}}) 0s ago: executing program 6 (id=3591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0401fa1b046b55fe6fa2816de546a5c3206edf2545d534317fffec892e23747129b1cfcbd3f21b8f79"], 0x7) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) kernel console output (not intermixed with test programs): 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 759.735870][ T826] usb 4-1: Using ep0 maxpacket: 16 [ 759.745453][T10894] usb 7-1: config 1 interface 0 has no altsetting 0 [ 759.745494][T10894] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 759.745517][T10894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.798783][T16734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.811670][T10894] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 759.842289][T16734] Cannot create hsr debugfs directory [ 759.850144][ T826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.860479][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.871509][ T826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 759.882485][ T826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.896845][ T826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 759.914745][ T826] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.929995][ T826] usb 4-1: Manufacturer: syz [ 759.944242][ T826] usb 4-1: config 0 descriptor?? [ 759.980253][T16781] netlink: 'syz.5.3289': attribute type 4 has an invalid length. [ 760.013599][T16768] CIFS mount error: No usable UNC path provided in device string! [ 760.013599][T16768] [ 760.034423][T16768] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 760.048208][T16734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.052138][T15416] Bluetooth: hci0: command tx timeout [ 760.075706][T14132] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 760.117390][T10894] ums-sddr09 7-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 760.141795][T10894] usb 7-1: USB disconnect, device number 31 [ 760.241171][T14132] usb 3-1: Using ep0 maxpacket: 8 [ 760.257105][T14132] usb 3-1: no configurations [ 760.263119][T16734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.280774][T14132] usb 3-1: can't read configurations, error -22 [ 760.335728][ T826] rc_core: IR keymap rc-hauppauge not found [ 760.341763][ T826] Registered IR keymap rc-empty [ 760.348713][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 760.378397][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 760.429768][ T826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 760.549077][ T826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 760.572888][T16734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.773275][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 760.815705][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 760.836411][T14132] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 760.847037][T16734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.852003][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 760.888559][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 760.926163][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 761.029298][T14132] usb 3-1: Using ep0 maxpacket: 8 [ 761.063503][T14132] usb 3-1: no configurations [ 761.108349][T14132] usb 3-1: can't read configurations, error -22 [ 761.122264][T14132] usb usb3-port1: attempt power cycle [ 761.127112][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 761.211630][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 761.286512][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 761.294319][ T29] audit: type=1400 audit(1733460258.970:1356): avc: denied { setopt } for pid=16796 comm="syz.5.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 761.425951][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 761.451266][ T826] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 761.475778][T14132] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 761.478352][T16734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 761.496508][ T826] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 761.505913][ T826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 761.518008][T16734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 761.546713][ T826] usb 4-1: USB disconnect, device number 75 [ 761.546975][T14132] usb 3-1: Using ep0 maxpacket: 8 [ 761.567241][T14132] usb 3-1: no configurations [ 761.571100][T16734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 761.585697][T14132] usb 3-1: can't read configurations, error -22 [ 761.602373][T16734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 761.609663][T16803] netlink: 'syz.5.3297': attribute type 7 has an invalid length. [ 761.641259][T16803] netlink: 208140 bytes leftover after parsing attributes in process `syz.5.3297'. [ 761.746004][T14132] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 761.793972][T14132] usb 3-1: Using ep0 maxpacket: 8 [ 761.802037][T16734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.813451][T14132] usb 3-1: no configurations [ 761.847198][T14132] usb 3-1: can't read configurations, error -22 [ 761.862826][T16809] netlink: 'syz.5.3299': attribute type 4 has an invalid length. [ 761.872896][T14132] usb usb3-port1: unable to enumerate USB device [ 761.877893][T16734] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.908412][ T4153] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.915519][ T4153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.943687][ T4153] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.950814][ T4153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.175300][T16734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.184517][T15416] Bluetooth: hci6: unexpected event for opcode 0x041b [ 762.223420][T16734] veth0_vlan: entered promiscuous mode [ 762.242677][T16734] veth1_vlan: entered promiscuous mode [ 762.275781][T10894] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 762.283672][T16734] veth0_macvtap: entered promiscuous mode [ 762.301361][T16734] veth1_macvtap: entered promiscuous mode [ 762.325441][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.350031][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.366579][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.377313][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.387243][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.397962][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.408111][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.418885][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.430279][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.442907][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.521849][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.529741][T10894] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 762.542143][T10894] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 762.550498][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.569369][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.590444][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.646857][T10894] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 762.723940][T16734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.994586][T10894] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 763.004793][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.005728][T10894] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 763.042843][T10894] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 763.066145][T10894] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 763.074488][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.084451][T10894] usb 7-1: Product: syz [ 763.088885][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.099373][T10894] usb 7-1: Manufacturer: syz [ 763.104667][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.114551][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.125028][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.134860][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.145396][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.155253][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.165773][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.175578][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.186325][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.196297][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.206772][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.216671][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.227178][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.237848][T16734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.261673][T16734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.270701][T16734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.279734][T16734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.288617][T16734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.312480][T10894] cdc_wdm 7-1:1.0: skipping garbage [ 763.319168][T10894] cdc_wdm 7-1:1.0: skipping garbage [ 763.545316][T10894] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 763.551507][T10894] cdc_wdm 7-1:1.0: Unknown control protocol [ 763.961864][ T4153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.970384][ T4153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.037886][T16814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.067256][T16845] syz.5.3307 uses old SIOCAX25GETINFO [ 764.067610][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.084269][T16814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.097760][T16847] FAULT_INJECTION: forcing a failure. [ 764.097760][T16847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.143251][ T5865] usb 7-1: USB disconnect, device number 32 [ 764.177562][T16847] CPU: 1 UID: 0 PID: 16847 Comm: syz.2.3308 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 764.179698][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.188423][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 764.188436][T16847] Call Trace: [ 764.188443][T16847] [ 764.188451][T16847] dump_stack_lvl+0x16c/0x1f0 [ 764.188480][T16847] should_fail_ex+0x497/0x5b0 [ 764.188505][T16847] ? __pfx_nvmf_dev_write+0x10/0x10 [ 764.188532][T16847] ? __pfx_nvmf_dev_write+0x10/0x10 [ 764.188555][T16847] _copy_from_user+0x2e/0xd0 [ 764.188575][T16847] memdup_user_nul+0x72/0x110 [ 764.188597][T16847] nvmf_dev_write+0x71/0xc40 [ 764.188621][T16847] ? bpf_lsm_file_permission+0x9/0x10 [ 764.250917][T16847] ? security_file_permission+0x71/0x210 [ 764.256570][T16847] ? rw_verify_area+0xd0/0x700 [ 764.260804][T16849] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 764.261335][T16847] ? __pfx_nvmf_dev_write+0x10/0x10 [ 764.275037][T16847] vfs_write+0x24c/0x1150 [ 764.279388][T16847] ? __fget_files+0x1fc/0x3a0 [ 764.284079][T16847] ? __pfx_lock_release+0x10/0x10 [ 764.289112][T16847] ? __pfx_vfs_write+0x10/0x10 [ 764.293886][T16847] ? lock_acquire+0x2f/0xb0 [ 764.298402][T16847] ? __fget_files+0x40/0x3a0 [ 764.303009][T16847] ? __fget_files+0x206/0x3a0 [ 764.307698][T16847] ksys_write+0x12b/0x250 [ 764.312028][T16847] ? __pfx_ksys_write+0x10/0x10 [ 764.316894][T16847] do_syscall_64+0xcd/0x250 [ 764.321407][T16847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.327305][T16847] RIP: 0033:0x7fe5d457ff19 [ 764.331806][T16847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.351425][T16847] RSP: 002b:00007fe5d540c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.359843][T16847] RAX: ffffffffffffffda RBX: 00007fe5d4745fa0 RCX: 00007fe5d457ff19 [ 764.367897][T16847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 764.375863][T16847] RBP: 00007fe5d540c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 764.383828][T16847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.391805][T16847] R13: 0000000000000000 R14: 00007fe5d4745fa0 R15: 00007ffebc0b7e58 [ 764.399794][T16847] [ 764.411771][ T117] IPVS: starting estimator thread 0... [ 764.493361][T16847] nvme_fabrics: missing parameter 'transport=%s' [ 764.500710][T16847] nvme_fabrics: missing parameter 'nqn=%s' [ 764.517090][T16852] IPVS: using max 27 ests per chain, 64800 per kthread [ 764.633545][T16859] FAULT_INJECTION: forcing a failure. [ 764.633545][T16859] name failslab, interval 1, probability 0, space 0, times 0 [ 764.675810][ T29] audit: type=1400 audit(1733460262.350:1357): avc: denied { execmem } for pid=16857 comm="syz.0.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 764.684670][T16859] CPU: 1 UID: 0 PID: 16859 Comm: syz.5.3310 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 764.705854][T16859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 764.716006][T16859] Call Trace: [ 764.719291][T16859] [ 764.722216][T16859] dump_stack_lvl+0x16c/0x1f0 [ 764.726910][T16859] should_fail_ex+0x497/0x5b0 [ 764.731602][T16859] ? fs_reclaim_acquire+0xae/0x150 [ 764.736737][T16859] should_failslab+0xc2/0x120 [ 764.741424][T16859] __kmalloc_noprof+0xcb/0x510 [ 764.746207][T16859] ? rcu_is_watching+0x12/0xc0 [ 764.751163][T16859] tomoyo_encode2+0x100/0x3e0 [ 764.755860][T16859] tomoyo_encode+0x29/0x50 [ 764.760286][T16859] tomoyo_realpath_from_path+0x19d/0x720 [ 764.765932][T16859] ? tomoyo_path_number_perm+0x235/0x590 [ 764.770600][T16865] netlink: 'syz.2.3311': attribute type 4 has an invalid length. [ 764.771568][T16859] tomoyo_path_number_perm+0x248/0x590 [ 764.784714][T16859] ? tomoyo_path_number_perm+0x235/0x590 [ 764.790364][T16859] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 764.796382][T16859] ? __pfx_lock_release+0x10/0x10 [ 764.801418][T16859] ? trace_lock_acquire+0x14e/0x1f0 [ 764.806641][T16859] ? lock_acquire+0x2f/0xb0 [ 764.811152][T16859] ? __fget_files+0x40/0x3a0 [ 764.815762][T16859] ? __fget_files+0x206/0x3a0 [ 764.820449][T16859] security_file_ioctl+0x9b/0x240 [ 764.825487][T16859] __x64_sys_ioctl+0xb7/0x200 [ 764.830183][T16859] do_syscall_64+0xcd/0x250 [ 764.834708][T16859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.840620][T16859] RIP: 0033:0x7f8ee277ff19 [ 764.845040][T16859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.864660][T16859] RSP: 002b:00007f8ee34aa058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.873094][T16859] RAX: ffffffffffffffda RBX: 00007f8ee2945fa0 RCX: 00007f8ee277ff19 [ 764.881082][T16859] RDX: 0000000000000000 RSI: 00000000000089e9 RDI: 0000000000000004 [ 764.889064][T16859] RBP: 00007f8ee34aa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 764.897044][T16859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.905029][T16859] R13: 0000000000000000 R14: 00007f8ee2945fa0 R15: 00007ffcd87790e8 [ 764.914857][T16859] [ 764.949878][T16859] ERROR: Out of memory at tomoyo_realpath_from_path. [ 766.165946][ T9] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 766.214696][T16912] netlink: 'syz.0.3320': attribute type 21 has an invalid length. [ 766.252300][T16912] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3320'. [ 766.364924][T10894] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 766.388109][ T9] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 766.420559][ T9] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 8 [ 766.451164][ T9] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 766.460998][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.475913][T16888] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 766.576769][T10894] usb 7-1: Using ep0 maxpacket: 32 [ 766.601028][T10894] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 766.624547][T10894] usb 7-1: config 0 has no interface number 0 [ 766.637613][T16930] netlink: 'syz.2.3325': attribute type 4 has an invalid length. [ 766.650746][T10894] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 766.699173][ T826] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 767.138008][T10894] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 767.147916][T10894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.156092][T10894] usb 7-1: Product: syz [ 767.160268][T10894] usb 7-1: Manufacturer: syz [ 767.164873][T10894] usb 7-1: SerialNumber: syz [ 767.166831][ T9] usb 6-1: string descriptor 0 read error: -71 [ 767.181955][T10894] usb 7-1: config 0 descriptor?? [ 767.190137][T16904] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 767.222732][ T9] usb 6-1: USB disconnect, device number 71 [ 767.223975][T10894] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 767.246954][ T826] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 767.257543][ T826] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 767.258889][T10894] em28xx 7-1:0.132: Video interface 132 found: bulk [ 767.278997][ T826] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 767.298906][ T826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.326691][T14132] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 767.330478][ T826] usb 1-1: config 0 descriptor?? [ 767.400707][T16946] pimreg: entered allmulticast mode [ 767.427567][T15693] udevd[15693]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.477629][T14132] usb 3-1: unable to get BOS descriptor or descriptor too short [ 767.486651][T14132] usb 3-1: config 8 has an invalid interface number: 145 but max is 0 [ 767.494818][T14132] usb 3-1: config 8 has no interface number 0 [ 767.502754][T14132] usb 3-1: config 8 interface 145 has no altsetting 0 [ 767.511634][T14132] usb 3-1: string descriptor 0 read error: -22 [ 767.518122][T14132] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=83.cc [ 767.527384][T14132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.542784][T14132] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 767.660717][T10894] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 768.069816][ T29] audit: type=1400 audit(1733460265.750:1358): avc: denied { ioctl } for pid=16951 comm="syz.3.3330" path="socket:[60529]" dev="sockfs" ino=60529 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 768.119747][ T29] audit: type=1400 audit(1733460265.800:1359): avc: denied { create } for pid=16901 comm="syz.6.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 768.153328][ T29] audit: type=1400 audit(1733460265.800:1360): avc: denied { write } for pid=16901 comm="syz.6.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 768.221134][ T29] audit: type=1400 audit(1733460265.800:1361): avc: denied { nlmsg_write } for pid=16901 comm="syz.6.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 768.260624][T10894] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 768.269784][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3322'. [ 768.284409][T10894] em28xx 7-1:0.132: board has no eeprom [ 768.289301][T16959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3322'. [ 768.356204][T10894] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 768.364209][T10894] em28xx 7-1:0.132: analog set to bulk mode. [ 768.372626][T14132] em28xx 7-1:0.132: Registering V4L2 extension [ 768.390587][T10894] usb 7-1: USB disconnect, device number 33 [ 768.417316][T14132] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 768.427138][T10894] em28xx 7-1:0.132: Disconnecting em28xx [ 768.522633][T14132] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 768.531530][T14132] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 768.560160][T14132] em28xx 7-1:0.132: No AC97 audio processor [ 768.581147][T14132] usb 7-1: Decoder not found [ 768.586016][T14132] em28xx 7-1:0.132: failed to create media graph [ 768.594671][T14132] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 768.616683][T14132] em28xx 7-1:0.132: Remote control support is not available for this card. [ 768.642086][T10894] em28xx 7-1:0.132: Closing input extension [ 768.677830][T10894] em28xx 7-1:0.132: Freeing device [ 769.165885][ T5141] Bluetooth: hci6: command 0x0405 tx timeout [ 769.386550][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 769.411468][T14132] usb 1-1: USB disconnect, device number 92 [ 769.454233][T16987] vlan0: entered promiscuous mode [ 769.460579][T16987] bond0: entered promiscuous mode [ 769.465944][T16987] bond_slave_0: entered promiscuous mode [ 769.471657][T16987] bond_slave_1: entered promiscuous mode [ 769.477482][T16987] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 769.486871][T16987] bond0: left promiscuous mode [ 769.491789][T16987] bond_slave_0: left promiscuous mode [ 769.497360][T16987] bond_slave_1: left promiscuous mode [ 769.505478][T16987] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 769.575743][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 769.585273][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.607648][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.635037][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 769.664503][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.387230][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 770.396476][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 770.404893][ T9] usb 7-1: Manufacturer: syz [ 770.423164][ T9] usb 7-1: config 0 descriptor?? [ 770.457112][ T5865] usb 3-1: USB disconnect, device number 71 [ 770.875722][ T9] rc_core: IR keymap rc-hauppauge not found [ 770.881701][ T9] Registered IR keymap rc-empty [ 770.892776][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 770.935310][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3341'. [ 771.399551][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.409140][T16990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3337'. [ 771.426131][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 771.440731][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input49 [ 771.468613][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.506066][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.535855][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.586056][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.607309][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.641262][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.667401][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.706091][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.742280][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.773153][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 771.817666][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 772.432434][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 772.454649][ T9] usb 7-1: USB disconnect, device number 34 [ 772.631817][ T5865] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 773.286031][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 773.295349][ T5865] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 773.305081][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.313617][ T5865] usb 4-1: Product: syz [ 773.325538][ T5865] usb 4-1: Manufacturer: syz [ 773.332130][ T5865] usb 4-1: SerialNumber: syz [ 773.345549][ T5865] usb 4-1: config 0 descriptor?? [ 773.479804][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3347'. [ 773.682227][ T5865] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 774.028176][ T826] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 774.189049][ T826] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 774.205650][ T826] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 774.229602][ T826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 774.231885][T17044] loop2: detected capacity change from 0 to 7 [ 774.242905][ T826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 774.246675][T17044] Dev loop2: unable to read RDB block 7 [ 774.262008][T17044] loop2: unable to read partition table [ 774.263045][ T826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 774.268085][T17044] loop2: partition table beyond EOD, truncated [ 774.285236][T17044] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 774.306919][ T826] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 774.331295][ T826] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 774.346762][ T826] usb 1-1: Product: syz [ 774.351381][ T826] usb 1-1: Manufacturer: syz [ 774.365923][ T826] cdc_wdm 1-1:1.0: skipping garbage [ 774.371162][ T826] cdc_wdm 1-1:1.0: skipping garbage [ 774.375726][ T5867] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 774.385157][ T826] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 774.391409][ T826] cdc_wdm 1-1:1.0: Unknown control protocol [ 774.618758][ T5867] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 774.628880][ T5867] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 774.753425][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 774.775839][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 774.786968][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 774.957847][ T5867] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 775.006818][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 775.049570][ T5867] usb 3-1: Product: syz [ 775.053876][ T5867] usb 3-1: Manufacturer: syz [ 775.272477][ T5865] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 775.287565][ T5865] usb 4-1: USB disconnect, device number 76 [ 775.298879][T17034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.308871][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 775.314095][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 775.330557][ T5867] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 775.351273][T17034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.352602][ T5867] cdc_wdm 3-1:1.0: Unknown control protocol [ 775.408394][ T5867] usb 1-1: USB disconnect, device number 93 [ 775.500680][T17039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.525959][T17039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.542462][T10894] usb 3-1: USB disconnect, device number 72 [ 778.599115][T17072] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3361'. [ 779.695933][ T46] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 779.946100][T17073] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3361'. [ 780.087182][ T46] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 780.100785][ T46] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59214, setting to 64 [ 780.123236][ T46] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 780.157636][ T46] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 780.171266][ T46] usb 4-1: Manufacturer: syz [ 780.176903][ T5865] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 780.184630][ T46] usb 4-1: SerialNumber: syz [ 780.325727][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 780.348086][ T5865] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 780.377229][ T5865] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 780.394020][ T5865] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 780.403958][ T5865] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 780.422429][ T5865] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 780.426029][ T46] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 780.442639][ T5865] usb 6-1: config 1 interface 0 has no altsetting 0 [ 780.452289][ T5865] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 780.460062][ T46] usb 4-1: USB disconnect, device number 77 [ 780.492924][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.515332][ T5865] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 780.716040][T17090] CIFS mount error: No usable UNC path provided in device string! [ 780.716040][T17090] [ 780.726957][T17090] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 780.807952][ T5865] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 780.823510][ T5865] usb 6-1: USB disconnect, device number 72 [ 782.072678][T17112] FAULT_INJECTION: forcing a failure. [ 782.072678][T17112] name failslab, interval 1, probability 0, space 0, times 0 [ 782.269417][ T46] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 782.277203][ T5867] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 782.459488][T17112] CPU: 1 UID: 0 PID: 17112 Comm: syz.5.3372 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 782.470280][T17112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 782.480330][T17112] Call Trace: [ 782.483604][T17112] [ 782.486531][T17112] dump_stack_lvl+0x16c/0x1f0 [ 782.491213][T17112] should_fail_ex+0x497/0x5b0 [ 782.495980][T17112] ? fs_reclaim_acquire+0xae/0x150 [ 782.501098][T17112] should_failslab+0xc2/0x120 [ 782.505786][T17112] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 782.511589][T17112] ? __alloc_skb+0x2b1/0x380 [ 782.516187][T17112] __alloc_skb+0x2b1/0x380 [ 782.520610][T17112] ? __pfx___alloc_skb+0x10/0x10 [ 782.525554][T17112] ? find_held_lock+0x2d/0x110 [ 782.530324][T17112] ? __might_fault+0x13b/0x190 [ 782.535099][T17112] do_mq_notify+0x35d/0xe70 [ 782.539605][T17112] ? lock_acquire+0x2f/0xb0 [ 782.544109][T17112] ? __might_fault+0xe3/0x190 [ 782.548789][T17112] ? __pfx_do_mq_notify+0x10/0x10 [ 782.553808][T17112] ? __might_fault+0xe3/0x190 [ 782.558499][T17112] __x64_sys_mq_notify+0x101/0x180 [ 782.563611][T17112] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 782.569246][T17112] ? xfd_validate_state+0x5d/0x180 [ 782.574364][T17112] do_syscall_64+0xcd/0x250 [ 782.578873][T17112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.584772][T17112] RIP: 0033:0x7f8ee277ff19 [ 782.589183][T17112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.608794][T17112] RSP: 002b:00007f8ee05f6058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 782.617203][T17112] RAX: ffffffffffffffda RBX: 00007f8ee2946080 RCX: 00007f8ee277ff19 [ 782.625148][T17112] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 782.633094][T17112] RBP: 00007f8ee05f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 782.641041][T17112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.648994][T17112] R13: 0000000000000000 R14: 00007f8ee2946080 R15: 00007ffcd87790e8 [ 782.656991][T17112] [ 782.668009][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 782.821285][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 782.836044][ T5867] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 782.851472][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 782.873675][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 782.885381][ T46] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 782.905528][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 782.926969][ T46] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 782.949358][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 782.968545][ T46] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 782.992972][ T46] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 783.013938][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 783.035162][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 783.074216][ T5867] usb 1-1: Product: syz [ 783.080455][ T46] usb 4-1: config 1 interface 0 has no altsetting 0 [ 783.100534][ T5867] usb 1-1: Manufacturer: syz [ 783.112820][ T46] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 783.153227][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.362936][ T46] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 783.374428][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 783.381267][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 783.635119][T17099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.953270][T17102] CIFS mount error: No usable UNC path provided in device string! [ 783.953270][T17102] [ 783.973958][T17099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.986120][T17102] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 784.476430][ T5867] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 784.487179][ T5867] cdc_wdm 1-1:1.0: Unknown control protocol [ 784.539000][ T5867] usb 1-1: USB disconnect, device number 94 [ 784.558379][ T46] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 784.595269][ T46] usb 4-1: USB disconnect, device number 78 [ 784.845689][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 785.868850][T17153] netlink: 'syz.5.3386': attribute type 1 has an invalid length. [ 785.876696][T17153] netlink: 'syz.5.3386': attribute type 3 has an invalid length. [ 785.884451][T17153] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3386'. [ 786.304745][ T5865] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 786.313571][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 786.365178][T17155] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 786.391730][T17155] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 786.465763][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 786.470953][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 786.487335][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 786.496911][ T9] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 786.506921][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.517249][ T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 786.536619][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 786.582685][ T9] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 786.592855][ T5865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 786.609385][ T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 786.625649][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.642468][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 786.649457][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 786.659137][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.667947][ T5865] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 786.689604][ T5865] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 786.698033][ T5896] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 786.719637][ T5865] usb 3-1: Manufacturer: syz [ 786.735028][ T9] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 786.750677][ T5865] usb 3-1: config 0 descriptor?? [ 786.855831][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 786.862938][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.874410][ T5896] usb 1-1: config 0 has no interfaces? [ 786.911226][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 786.920317][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.932353][ T5896] usb 1-1: Product: syz [ 786.937337][ T5896] usb 1-1: Manufacturer: syz [ 786.938472][T17148] CIFS mount error: No usable UNC path provided in device string! [ 786.938472][T17148] [ 786.941945][ T5896] usb 1-1: SerialNumber: syz [ 786.955684][T17148] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 786.958307][ T8] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 787.146073][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 787.292976][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.440830][ T8] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 787.460560][ T5896] usb 1-1: config 0 descriptor?? [ 787.465823][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.476642][ T5865] rc_core: IR keymap rc-hauppauge not found [ 787.483221][ T8] usb 6-1: config 0 descriptor?? [ 787.488334][ T5865] Registered IR keymap rc-empty [ 787.497351][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.514440][ T9] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 787.525992][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.535990][ T9] usb 4-1: USB disconnect, device number 79 [ 787.565286][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 787.584281][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 787.638027][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.685971][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.706852][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.728122][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.746251][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.760342][ T8] usb 6-1: USB disconnect, device number 73 [ 787.768901][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.797246][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.816027][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.835904][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.856878][ T5865] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 787.876762][ T5865] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 787.886389][ T5865] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 787.906872][ T5865] usb 3-1: USB disconnect, device number 73 [ 787.955746][ T5896] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 788.020672][T17175] vlan0: entered promiscuous mode [ 788.138189][ T5896] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 788.174844][ T5896] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 788.209526][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 788.225867][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 788.241241][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 788.262584][ T5896] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 788.273204][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 788.282721][ T5896] usb 7-1: Product: syz [ 788.287915][ T5896] usb 7-1: Manufacturer: syz [ 788.297093][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 788.302360][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 788.310423][ T5896] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 788.316704][ T5896] cdc_wdm 7-1:1.0: Unknown control protocol [ 788.414860][T17187] netlink: 'syz.5.3397': attribute type 4 has an invalid length. [ 788.431436][T17187] netlink: 'syz.5.3397': attribute type 4 has an invalid length. [ 788.561337][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.596808][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.615966][T17193] FAULT_INJECTION: forcing a failure. [ 788.615966][T17193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.629526][T17193] CPU: 0 UID: 0 PID: 17193 Comm: syz.5.3399 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 788.640298][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 788.650359][T17193] Call Trace: [ 788.653641][T17193] [ 788.656578][T17193] dump_stack_lvl+0x16c/0x1f0 [ 788.661265][T17193] should_fail_ex+0x497/0x5b0 [ 788.665954][T17193] _copy_from_user+0x2e/0xd0 [ 788.670545][T17193] copy_msghdr_from_user+0x99/0x160 [ 788.675748][T17193] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 788.681561][T17193] ? __pfx___lock_acquire+0x10/0x10 [ 788.685980][ T29] audit: type=1400 audit(1733460286.300:1362): avc: denied { connect } for pid=17192 comm="syz.2.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 788.686752][T17193] ___sys_recvmsg+0xdc/0x1a0 [ 788.710827][T17193] ? __pfx____sys_recvmsg+0x10/0x10 [ 788.716028][T17193] ? find_held_lock+0x2d/0x110 [ 788.716590][ T46] usb 7-1: USB disconnect, device number 35 [ 788.720803][T17193] ? __pfx___might_resched+0x10/0x10 [ 788.731937][T17193] ? __might_fault+0xe3/0x190 [ 788.736613][T17193] do_recvmmsg+0x2f8/0x740 [ 788.741016][T17193] ? __pfx_do_recvmmsg+0x10/0x10 [ 788.745934][T17193] ? vfs_write+0x306/0x1150 [ 788.750422][T17193] ? __mutex_unlock_slowpath+0x164/0x690 [ 788.756045][T17193] ? __fget_files+0x206/0x3a0 [ 788.760707][T17193] __x64_sys_recvmmsg+0x239/0x290 [ 788.765717][T17193] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 788.771250][T17193] do_syscall_64+0xcd/0x250 [ 788.775740][T17193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.781621][T17193] RIP: 0033:0x7f8ee277ff19 [ 788.786019][T17193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.805622][T17193] RSP: 002b:00007f8ee05f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 788.814033][T17193] RAX: ffffffffffffffda RBX: 00007f8ee2946080 RCX: 00007f8ee277ff19 [ 788.821997][T17193] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 788.829956][T17193] RBP: 00007f8ee05f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 788.837911][T17193] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 788.845868][T17193] R13: 0000000000000000 R14: 00007f8ee2946080 R15: 00007ffcd87790e8 [ 788.853834][T17193] [ 789.535880][ T46] usb 1-1: USB disconnect, device number 95 [ 790.000260][T17210] FAULT_INJECTION: forcing a failure. [ 790.000260][T17210] name failslab, interval 1, probability 0, space 0, times 0 [ 790.046138][T17210] CPU: 1 UID: 0 PID: 17210 Comm: syz.6.3404 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 790.056908][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 790.066940][T17210] Call Trace: [ 790.070206][T17210] [ 790.073117][T17210] dump_stack_lvl+0x16c/0x1f0 [ 790.077789][T17210] should_fail_ex+0x497/0x5b0 [ 790.082472][T17210] ? fs_reclaim_acquire+0xae/0x150 [ 790.087575][T17210] should_failslab+0xc2/0x120 [ 790.092233][T17210] __kmalloc_cache_node_noprof+0x6e/0x420 [ 790.097935][T17210] ? mark_lock+0xb5/0xc60 [ 790.102261][T17210] ? __get_vm_area_node+0x101/0x2f0 [ 790.107449][T17210] __get_vm_area_node+0x101/0x2f0 [ 790.112463][T17210] __vmalloc_node_range_noprof+0x26a/0x1530 [ 790.118341][T17210] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 790.123884][T17210] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 790.129411][T17210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 790.135727][T17210] ? __pfx___lock_acquire+0x10/0x10 [ 790.140905][T17210] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 790.146427][T17210] __vmalloc_noprof+0x6d/0x90 [ 790.151079][T17210] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 790.156614][T17210] bpf_prog_alloc_no_stats+0x54/0x620 [ 790.162057][T17210] ? security_capable+0x7e/0x260 [ 790.166985][T17210] bpf_prog_alloc+0x3b/0x230 [ 790.171548][T17210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.177447][T17210] bpf_prog_load+0x159e/0x2660 [ 790.182213][T17210] ? __pfx_bpf_prog_load+0x10/0x10 [ 790.187307][T17210] ? avc_has_perm_noaudit+0x143/0x3a0 [ 790.192679][T17210] ? selinux_bpf+0xde/0x130 [ 790.197182][T17210] __sys_bpf+0x4043/0x49c0 [ 790.201667][T17210] ? __pfx_lock_release+0x10/0x10 [ 790.206669][T17210] ? __pfx___sys_bpf+0x10/0x10 [ 790.211419][T17210] ? vfs_write+0x306/0x1150 [ 790.215915][T17210] ? __mutex_unlock_slowpath+0x164/0x690 [ 790.221544][T17210] ? fput+0x67/0x440 [ 790.225420][T17210] ? ksys_write+0x1ba/0x250 [ 790.229909][T17210] ? __pfx_ksys_write+0x10/0x10 [ 790.234830][T17210] __x64_sys_bpf+0x78/0xc0 [ 790.239226][T17210] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.244414][T17210] do_syscall_64+0xcd/0x250 [ 790.248896][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.254764][T17210] RIP: 0033:0x7ff98e77ff19 [ 790.259153][T17210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.278746][T17210] RSP: 002b:00007ff98f4f9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.287145][T17210] RAX: ffffffffffffffda RBX: 00007ff98e945fa0 RCX: 00007ff98e77ff19 [ 790.295118][T17210] RDX: 0000000000000094 RSI: 00000000200004c0 RDI: 0000000000000005 [ 790.303066][T17210] RBP: 00007ff98f4f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 790.311010][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.318977][T17210] R13: 0000000000000000 R14: 00007ff98e945fa0 R15: 00007fffa0eb9ab8 [ 790.326931][T17210] [ 790.519243][T17210] syz.6.3404: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 791.249393][T17210] CPU: 0 UID: 0 PID: 17210 Comm: syz.6.3404 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 791.260171][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 791.270233][T17210] Call Trace: [ 791.273519][T17210] [ 791.276455][T17210] dump_stack_lvl+0x16c/0x1f0 [ 791.281145][T17210] warn_alloc+0x24d/0x3a0 [ 791.285478][T17210] ? __pfx_warn_alloc+0x10/0x10 [ 791.290307][T17210] ? rcu_is_watching+0x12/0xc0 [ 791.295049][T17210] ? __kmalloc_cache_node_noprof+0x2ad/0x420 [ 791.301005][T17210] ? __kasan_kmalloc+0x8a/0xb0 [ 791.305760][T17210] ? __get_vm_area_node+0x1dc/0x2f0 [ 791.310934][T17210] __vmalloc_node_range_noprof+0xd27/0x1530 [ 791.316806][T17210] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 791.322344][T17210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 791.328669][T17210] ? __pfx___lock_acquire+0x10/0x10 [ 791.333860][T17210] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 791.339381][T17210] __vmalloc_noprof+0x6d/0x90 [ 791.344034][T17210] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 791.349556][T17210] bpf_prog_alloc_no_stats+0x54/0x620 [ 791.354900][T17210] ? security_capable+0x7e/0x260 [ 791.359823][T17210] bpf_prog_alloc+0x3b/0x230 [ 791.364386][T17210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.370255][T17210] bpf_prog_load+0x159e/0x2660 [ 791.375009][T17210] ? __pfx_bpf_prog_load+0x10/0x10 [ 791.380096][T17210] ? avc_has_perm_noaudit+0x143/0x3a0 [ 791.385455][T17210] ? selinux_bpf+0xde/0x130 [ 791.389938][T17210] __sys_bpf+0x4043/0x49c0 [ 791.394330][T17210] ? __pfx_lock_release+0x10/0x10 [ 791.399333][T17210] ? __pfx___sys_bpf+0x10/0x10 [ 791.404086][T17210] ? vfs_write+0x306/0x1150 [ 791.408577][T17210] ? __mutex_unlock_slowpath+0x164/0x690 [ 791.414192][T17210] ? fput+0x67/0x440 [ 791.418064][T17210] ? ksys_write+0x1ba/0x250 [ 791.422540][T17210] ? __pfx_ksys_write+0x10/0x10 [ 791.427364][T17210] __x64_sys_bpf+0x78/0xc0 [ 791.431757][T17210] ? lockdep_hardirqs_on+0x7c/0x110 [ 791.436932][T17210] do_syscall_64+0xcd/0x250 [ 791.441426][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.447298][T17210] RIP: 0033:0x7ff98e77ff19 [ 791.451688][T17210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.471274][T17210] RSP: 002b:00007ff98f4f9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 791.479661][T17210] RAX: ffffffffffffffda RBX: 00007ff98e945fa0 RCX: 00007ff98e77ff19 [ 791.487607][T17210] RDX: 0000000000000094 RSI: 00000000200004c0 RDI: 0000000000000005 [ 791.495647][T17210] RBP: 00007ff98f4f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 791.503610][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.511555][T17210] R13: 0000000000000000 R14: 00007ff98e945fa0 R15: 00007fffa0eb9ab8 [ 791.519515][T17210] [ 791.611056][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3402'. [ 791.723947][T17210] Mem-Info: [ 791.727218][T17210] active_anon:13007 inactive_anon:0 isolated_anon:0 [ 791.727218][T17210] active_file:24825 inactive_file:39882 isolated_file:0 [ 791.727218][T17210] unevictable:768 dirty:490 writeback:0 [ 791.727218][T17210] slab_reclaimable:9404 slab_unreclaimable:114418 [ 791.727218][T17210] mapped:37021 shmem:9449 pagetables:819 [ 791.727218][T17210] sec_pagetables:0 bounce:0 [ 791.727218][T17210] kernel_misc_reclaimable:0 [ 791.727218][T17210] free:1274566 free_pcp:483 free_cma:0 [ 791.786268][T17210] Node 0 active_anon:52028kB inactive_anon:0kB active_file:99300kB inactive_file:159456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145884kB dirty:1956kB writeback:0kB shmem:36260kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12280kB pagetables:3276kB sec_pagetables:0kB all_unreclaimable? no [ 791.822570][T17210] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 791.853793][T17210] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.883092][T17210] lowmem_reserve[]: 0 2459 2459 0 0 [ 791.890319][T17210] Node 0 DMA32 free:1169052kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:53428kB inactive_anon:0kB active_file:99300kB inactive_file:159356kB unevictable:1536kB writepending:1952kB present:3129332kB managed:2547172kB mlocked:0kB bounce:0kB free_pcp:2264kB local_pcp:928kB free_cma:0kB [ 791.921101][T17210] lowmem_reserve[]: 0 0 0 0 0 [ 791.925950][T17210] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 791.954499][T17210] lowmem_reserve[]: 0 0 0 0 0 [ 791.959260][T17210] Node 1 Normal free:3907276kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.988210][T17210] lowmem_reserve[]: 0 0 0 0 0 [ 791.993215][T17210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 792.006883][T17210] Node 0 DMA32: 646*4kB (UME) 852*8kB (UME) 735*16kB (UME) 187*32kB (UME) 203*64kB (UME) 43*128kB (UME) 36*256kB (UME) 21*512kB (UME) 23*1024kB (UME) 11*2048kB (UM) 258*4096kB (UM) = 1168456kB [ 792.026195][T17210] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 792.038480][T17210] Node 1 Normal: 229*4kB (UME) 51*8kB (UME) 42*16kB (UME) 212*32kB (UME) 116*64kB (UME) 33*128kB (UME) 15*256kB (UME) 12*512kB (UM) 4*1024kB (UM) 5*2048kB (UE) 943*4096kB (M) = 3907276kB [ 792.057921][T17210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.068860][T17210] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 792.078199][T17210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.095739][T17210] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 792.105005][T17210] 75156 total pagecache pages [ 792.122699][T17210] 0 pages in swap cache [ 792.127124][T17210] Free swap = 124580kB [ 792.131260][T17210] Total swap = 124996kB [ 792.135397][T17210] 2097051 pages RAM [ 792.144940][T17210] 0 pages HighMem/MovableOnly [ 792.149664][T17210] 428600 pages reserved [ 792.153826][T17210] 0 pages cma reserved [ 792.185769][T17222] o2cb: This node has not been configured. [ 792.208660][T17222] o2cb: Cluster check failed. Fix errors before retrying. [ 792.365132][T17222] (syz.2.3407,17222,1):user_dlm_register:674 ERROR: status = -22 [ 792.375756][T17222] (syz.2.3407,17222,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 792.495707][ T5896] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 792.660506][ T5896] usb 4-1: config 1 interface 0 has no altsetting 0 [ 792.669985][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 792.679454][ T8] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 792.702821][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.714627][ T5896] usb 4-1: Product: syz [ 792.718912][ T5896] usb 4-1: Manufacturer: syz [ 792.723484][ T5896] usb 4-1: SerialNumber: syz [ 792.845823][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 792.867657][ T8] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 792.879037][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 792.886819][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.896352][ T8] usb 7-1: Product: syz [ 792.900802][ T8] usb 7-1: Manufacturer: syz [ 792.910523][ T8] usb 7-1: SerialNumber: syz [ 792.932620][ T8] usb 7-1: config 0 descriptor?? [ 793.045934][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 793.360810][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.373408][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.384788][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 793.394992][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.497970][ T8] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 793.625793][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.643013][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.654399][ T9] usb 3-1: Manufacturer: syz [ 793.746623][ T9] usb 3-1: config 0 descriptor?? [ 793.758976][ T5896] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 794.018302][T17238] netlink: 'syz.5.3412': attribute type 1 has an invalid length. [ 794.026135][T17238] netlink: 'syz.5.3412': attribute type 3 has an invalid length. [ 794.033920][T17238] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3412'. [ 794.540277][ T8] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 794.656303][ T9] rc_core: IR keymap rc-hauppauge not found [ 794.662234][ T9] Registered IR keymap rc-empty [ 794.667808][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 794.739406][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.039696][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 795.054043][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 795.070022][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.106122][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.135213][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.175235][T17253] netlink: 'syz.5.3415': attribute type 10 has an invalid length. [ 795.222964][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.458666][T10894] usb 4-1: USB disconnect, device number 80 [ 795.465417][T10894] usblp0: removed [ 795.481554][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.516185][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.549042][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.577132][ T5867] usb 7-1: USB disconnect, device number 36 [ 795.580116][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.606681][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.646250][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 795.846373][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 795.855510][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 795.866014][ T9] usb 3-1: USB disconnect, device number 74 [ 796.476316][ T29] audit: type=1400 audit(1733460294.160:1363): avc: denied { connect } for pid=17268 comm="syz.6.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 797.407312][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 797.686675][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 797.835757][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 797.846036][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.854106][ T9] usb 4-1: Product: syz [ 797.859425][ T9] usb 4-1: Manufacturer: syz [ 797.865115][ T9] usb 4-1: SerialNumber: syz [ 798.110168][ T9] usb 4-1: config 0 descriptor?? [ 798.544345][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 799.191688][T17299] vlan0: entered promiscuous mode [ 799.295707][ T117] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 799.455687][ T117] usb 7-1: Using ep0 maxpacket: 16 [ 799.462397][ T117] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.491775][ T117] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.498261][T17308] vlan0: entered promiscuous mode [ 799.530156][ T117] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 799.576568][ T117] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.629032][ T117] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 799.655644][ T117] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 799.663661][ T117] usb 7-1: Manufacturer: syz [ 799.695517][ T29] audit: type=1400 audit(1733460297.360:1364): avc: denied { read } for pid=17309 comm="syz.0.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 799.718280][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x6 [ 799.726804][ T117] usb 7-1: config 0 descriptor?? [ 799.753947][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.785984][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.793423][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.800989][ T29] audit: type=1400 audit(1733460297.370:1365): avc: denied { read write } for pid=17309 comm="syz.0.3435" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 799.848643][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.862048][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.870108][ T29] audit: type=1400 audit(1733460297.370:1366): avc: denied { open } for pid=17309 comm="syz.0.3435" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 799.894248][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.902424][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.910061][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.917642][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.925049][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.932653][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 799.941516][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.038379][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 800.068589][ T9] usb 4-1: USB disconnect, device number 81 [ 800.191677][ T7725] bond0: (slave syz_tun): Releasing backup interface [ 800.286801][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.294223][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.301822][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.309416][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.316983][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.324377][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.331962][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.339573][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.347170][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.355077][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.362712][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.370283][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.377736][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.382510][T17319] netlink: 'syz.2.3437': attribute type 4 has an invalid length. [ 800.385105][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.398938][T13481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 800.400353][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.410170][T13481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 800.414759][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.414783][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.423046][T13481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.429111][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.429134][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.429153][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.438659][T13481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.445189][T14132] hid-generic 0000:0000:0003.001C: unknown main item tag 0x0 [ 800.452393][T13481] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 800.471874][T14132] hid-generic 0000:0000:0003.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 800.474746][T13481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.500907][T17319] netlink: 'syz.2.3437': attribute type 4 has an invalid length. [ 800.545738][ T117] rc_core: IR keymap rc-hauppauge not found [ 800.553272][T17321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3437'. [ 800.562472][ T5867] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 800.570121][ T117] Registered IR keymap rc-empty [ 800.583174][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.605960][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.624482][T17316] chnl_net:caif_netlink_parms(): no params data found [ 800.626314][ T117] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 800.645360][ T117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input52 [ 800.660089][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.686083][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.705920][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.736825][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.744207][ T5867] usb 1-1: config 0 has no interfaces? [ 800.755751][ T5867] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 800.765414][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.767965][T17316] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.772250][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.787584][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.795812][ T5867] usb 1-1: config 0 descriptor?? [ 800.805888][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.818391][T17316] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.825927][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.849276][T17316] bridge_slave_0: entered allmulticast mode [ 800.850651][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.861410][T17316] bridge_slave_0: entered promiscuous mode [ 800.875236][T17316] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.882750][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.885974][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 800.890337][T17316] bridge_slave_1: entered allmulticast mode [ 800.903783][T17316] bridge_slave_1: entered promiscuous mode [ 800.948281][T17316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.961877][T17316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.003837][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 801.051989][T17316] team0: Port device team_slave_0 added [ 801.055699][ T117] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 801.067232][ T117] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 801.079108][ T117] usb 7-1: USB disconnect, device number 37 [ 801.117438][T17316] team0: Port device team_slave_1 added [ 801.134844][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'. [ 801.152640][T14132] usb 1-1: USB disconnect, device number 96 [ 801.160006][T17316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.168436][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 801.175236][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.201964][T17316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.202834][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.214969][T17316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.228879][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 801.248186][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.250252][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.276847][ T8] usb 3-1: config 0 descriptor?? [ 801.284564][T17316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.382217][T17316] hsr_slave_0: entered promiscuous mode [ 801.394895][T17316] hsr_slave_1: entered promiscuous mode [ 801.404943][T17316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.417250][T17316] Cannot create hsr debugfs directory [ 801.615724][T14132] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 801.632417][ T8] usb 3-1: USB disconnect, device number 75 [ 801.651364][T17316] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.733270][T17316] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.767579][T14132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.783220][T14132] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 801.810235][T14132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.827620][T14132] usb 4-1: config 0 descriptor?? [ 801.843810][T17316] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.930874][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 801.974574][T17316] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.085428][ T29] audit: type=1400 audit(1733460299.750:1367): avc: denied { mount } for pid=17330 comm="syz.3.3440" name="/" dev="rpc_pipefs" ino=61092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 802.204270][T17316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 802.277464][T17316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 802.416287][T17346] bridge0: port 3(erspan0) entered blocking state [ 802.424968][T17346] bridge0: port 3(erspan0) entered disabled state [ 802.434240][T17346] erspan0: entered allmulticast mode [ 802.452505][T17346] erspan0: entered promiscuous mode [ 802.460155][T17346] bridge0: port 3(erspan0) entered blocking state [ 802.466737][T17346] bridge0: port 3(erspan0) entered forwarding state [ 802.536645][ T5141] Bluetooth: hci3: command tx timeout [ 802.550024][T17316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 802.632930][T17316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 802.937526][T17350] fuse: Invalid rootmode [ 802.945555][T17316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.020255][T17316] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.051420][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.058564][ T6396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.075050][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.082186][ T8238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.512797][T17316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.148363][T14132] usbhid 4-1:0.0: can't add hid device: -71 [ 804.148447][T14132] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 804.151303][T14132] usb 4-1: USB disconnect, device number 82 [ 804.814474][ T5141] Bluetooth: hci3: command tx timeout [ 804.817067][T17370] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 804.975285][ T29] audit: type=1400 audit(1733460302.650:1368): avc: denied { unmount } for pid=16032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 805.045450][ T29] audit: type=1400 audit(1733460302.720:1369): avc: denied { map } for pid=17375 comm="syz.3.3451" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 805.090413][ T29] audit: type=1400 audit(1733460302.760:1370): avc: denied { execute } for pid=17375 comm="syz.3.3451" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 805.190009][T17316] veth0_vlan: entered promiscuous mode [ 805.207331][T17316] veth1_vlan: entered promiscuous mode [ 805.266454][T17316] veth0_macvtap: entered promiscuous mode [ 805.284620][T17316] veth1_macvtap: entered promiscuous mode [ 805.309726][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.320702][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.331770][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.341706][T17389] FAULT_INJECTION: forcing a failure. [ 805.341706][T17389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.356155][T17389] CPU: 0 UID: 0 PID: 17389 Comm: syz.3.3454 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 805.356337][T14132] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 805.366912][T17389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 805.366927][T17389] Call Trace: [ 805.366934][T17389] [ 805.366942][T17389] dump_stack_lvl+0x16c/0x1f0 [ 805.366970][T17389] should_fail_ex+0x497/0x5b0 [ 805.367000][T17389] copy_fpstate_to_sigframe+0x858/0xaf0 [ 805.367030][T17389] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 805.367054][T17389] ? posixtimer_deliver_signal+0x1ad/0x650 [ 805.367081][T17389] ? posixtimer_deliver_signal+0x1ad/0x650 [ 805.367101][T17389] ? find_held_lock+0x2d/0x110 [ 805.367130][T17389] get_sigframe+0x4aa/0x9c0 [ 805.367158][T17389] ? __pfx_get_sigframe+0x10/0x10 [ 805.367184][T17389] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.367205][T17389] ? siginfo_layout+0x177/0x290 [ 805.367231][T17389] x64_setup_rt_frame+0x129/0xcf0 [ 805.367261][T17389] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 805.367294][T17389] arch_do_signal_or_restart+0x5e6/0x7e0 [ 805.375110][ T117] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 805.385464][T17389] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 805.385510][T17389] syscall_exit_to_user_mode+0x150/0x2a0 [ 805.385534][T17389] do_syscall_64+0xda/0x250 [ 805.385557][T17389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.385586][T17389] RIP: 0033:0x7f894cf7ff17 [ 805.385602][T17389] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 805.385620][T17389] RSP: 002b:00007f894dd92058 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 805.526392][T17389] RAX: 000000000000002f RBX: 00007f894d145fa0 RCX: 00007f894cf7ff19 [ 805.534347][T17389] RDX: 0000000000000020 RSI: 0000000020000200 RDI: 0000000000000004 [ 805.542310][T17389] RBP: 00007f894dd920a0 R08: 0000000000000000 R09: 0000000000000000 [ 805.550268][T17389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.558222][T17389] R13: 0000000000000000 R14: 00007f894d145fa0 R15: 00007fff331be4b8 [ 805.566191][T17389] [ 805.569279][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.581746][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.605715][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.625620][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.635541][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.694946][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.705086][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.715822][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.725756][ T117] usb 1-1: Using ep0 maxpacket: 16 [ 805.727794][ T117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.730983][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.731001][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.731017][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.762799][T14132] usb 3-1: Using ep0 maxpacket: 8 [ 805.781443][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.785563][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 805.791332][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.812867][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.815107][T14132] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.823582][T17316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.871792][T14132] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 805.873601][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.893876][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.898514][ T117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 805.903738][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.924325][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.925241][T14132] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 805.934386][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.934404][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.934415][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.934428][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.984758][ T117] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.993857][T14132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.999431][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.999448][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.999460][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.999473][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.999484][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.999496][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.999507][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.999520][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.999531][T17316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.059666][T14132] usb 3-1: Product: syz [ 806.069500][T17316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.070274][T17316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.085762][ T117] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 806.136072][T14132] usb 3-1: Manufacturer: syz [ 806.141051][T14132] usb 3-1: SerialNumber: syz [ 806.193673][T14132] usb 3-1: config 0 descriptor?? [ 806.213786][ T117] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 806.266701][ T117] usb 1-1: Manufacturer: syz [ 806.355259][T17316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.364036][T17316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.372982][T17316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.381724][T17316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.406813][ T117] usb 1-1: config 0 descriptor?? [ 806.583541][T14077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.609975][T14077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.668690][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.678608][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.726200][ T117] rc_core: IR keymap rc-hauppauge not found [ 806.732143][ T117] Registered IR keymap rc-empty [ 806.737482][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 806.755713][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 806.872714][ T5141] Bluetooth: hci3: command tx timeout [ 806.915782][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 806.922203][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.935776][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.953336][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.978264][ T9] usb 4-1: Product: syz [ 806.996289][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 806.999572][ T9] usb 4-1: Manufacturer: syz [ 807.016829][ T117] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 807.018633][ T9] usb 4-1: SerialNumber: syz [ 807.041706][ T117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input53 [ 807.064782][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.092696][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.125994][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.159744][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.185965][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.206716][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.228423][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.246128][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.253106][T17396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.268686][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.327946][ T117] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 807.346546][ T117] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 807.356228][ T117] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 807.382190][ T117] usb 1-1: USB disconnect, device number 97 [ 807.394950][T17408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.404973][T17408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.896485][T17416] fuse: Invalid rootmode [ 807.958612][T17412] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3459'. [ 808.060681][T17419] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3459'. [ 808.211703][T17169] usb 3-1: USB disconnect, device number 76 [ 808.294857][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.506635][T17427] FAULT_INJECTION: forcing a failure. [ 808.506635][T17427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.519860][T17427] CPU: 1 UID: 0 PID: 17427 Comm: syz.6.3464 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 808.532018][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 808.542079][T17427] Call Trace: [ 808.545352][T17427] [ 808.548268][T17427] dump_stack_lvl+0x16c/0x1f0 [ 808.552970][T17427] should_fail_ex+0x497/0x5b0 [ 808.557660][T17427] strncpy_from_user+0x3b/0x2d0 [ 808.562521][T17427] getname_flags.part.0+0x8f/0x550 [ 808.567644][T17427] getname+0x8d/0xe0 [ 808.571536][T17427] do_sys_openat2+0x104/0x1e0 [ 808.576214][T17427] ? __pfx_do_sys_openat2+0x10/0x10 [ 808.581417][T17427] ? __pfx___schedule+0x10/0x10 [ 808.586253][T17427] ? __fget_files+0x206/0x3a0 [ 808.590943][T17427] __x64_sys_openat+0x175/0x210 [ 808.595790][T17427] ? __pfx___x64_sys_openat+0x10/0x10 [ 808.601149][T17427] ? ksys_write+0x1ba/0x250 [ 808.605664][T17427] do_syscall_64+0xcd/0x250 [ 808.610161][T17427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.616033][T17427] RIP: 0033:0x7ff98e77ff19 [ 808.620432][T17427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.640109][T17427] RSP: 002b:00007ff98f4d8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 808.648518][T17427] RAX: ffffffffffffffda RBX: 00007ff98e946080 RCX: 00007ff98e77ff19 [ 808.656476][T17427] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 808.664437][T17427] RBP: 00007ff98f4d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 808.672404][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.680357][T17427] R13: 0000000000000000 R14: 00007ff98e946080 R15: 00007fffa0eb9ab8 [ 808.688324][T17427] [ 808.955693][ T5141] Bluetooth: hci3: command tx timeout [ 809.166807][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 809.174112][ T9] cdc_ncm 4-1:1.1: bind() failure [ 809.197801][ T9] usb 4-1: USB disconnect, device number 83 [ 809.204179][T17429] dlm: non-version read from control device 8224 [ 809.549295][T17438] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 809.557106][T17438] netlink: 'syz.0.3468': attribute type 3 has an invalid length. [ 809.565320][T17438] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3468'. [ 810.295686][ T9] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 810.335849][ T8] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 810.447854][ T9] usb 4-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 810.465584][ T9] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 810.475026][ T9] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 810.486349][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 810.493009][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.513530][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 810.524720][ T9] usb 4-1: Manufacturer: syz [ 810.530008][ T9] usb 4-1: SerialNumber: syz [ 810.539385][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 810.555687][ T117] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 810.565046][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.587008][ T8] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 810.597003][ T8] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 810.605014][ T8] usb 7-1: Manufacturer: syz [ 810.615449][ T8] usb 7-1: config 0 descriptor?? [ 810.707080][ T117] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 810.720429][ T117] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 810.766931][ T9] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 810.779365][ T117] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 810.788696][ T9] usb 4-1: USB disconnect, device number 84 [ 810.809915][ T117] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 810.849646][ T117] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 810.880307][ T117] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 810.893638][ T117] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 810.915748][ T117] usb 1-1: Product: syz [ 810.920028][ T117] usb 1-1: Manufacturer: syz [ 810.936226][ T117] cdc_wdm 1-1:1.0: skipping garbage [ 810.941469][ T117] cdc_wdm 1-1:1.0: skipping garbage [ 810.964581][ T117] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 810.971142][ T117] cdc_wdm 1-1:1.0: Unknown control protocol [ 811.269319][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.281508][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.305526][ T117] usb 1-1: USB disconnect, device number 98 [ 811.399577][T17450] netlink: 'syz.2.3472': attribute type 1 has an invalid length. [ 811.408035][T17450] netlink: 'syz.2.3472': attribute type 3 has an invalid length. [ 811.416156][T17450] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3472'. [ 812.270449][T17461] vlan2: entered promiscuous mode [ 812.646207][ T9] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 813.235700][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 813.242133][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 813.252682][ T9] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 813.266691][ T9] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 813.314885][ T9] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 813.325324][ T8] rc_core: IR keymap rc-hauppauge not found [ 813.331542][ T8] Registered IR keymap rc-empty [ 813.338081][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.347954][ T9] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 813.359739][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 813.366668][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 813.376026][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.390631][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.399415][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 813.436645][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input54 [ 813.475943][T17476] tc_dump_action: action bad kind [ 813.485164][ T9] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 813.524897][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.549010][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.586252][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.627024][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.666479][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.695913][T17465] CIFS mount error: No usable UNC path provided in device string! [ 813.695913][T17465] [ 813.723409][T17465] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 813.732870][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.756601][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.809372][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.857570][ T9] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 813.874024][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.894945][ T9] usb 6-1: USB disconnect, device number 74 [ 813.901629][ T8] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 813.936355][ T8] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 813.953642][ T8] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 813.998463][ T8] usb 7-1: USB disconnect, device number 38 [ 814.141360][T17491] o2cb: This node has not been configured. [ 814.147817][T17491] o2cb: Cluster check failed. Fix errors before retrying. [ 814.155020][T17491] (syz.3.3485,17491,1):user_dlm_register:674 ERROR: status = -22 [ 814.208549][T17491] (syz.3.3485,17491,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 814.493179][ T29] audit: type=1400 audit(1733460312.170:1371): avc: denied { listen } for pid=17495 comm="syz.2.3487" lport=46985 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 814.553262][T17500] ALSA: seq fatal error: cannot create timer (-22) [ 814.575031][ T29] audit: type=1400 audit(1733460312.220:1372): avc: denied { accept } for pid=17495 comm="syz.2.3487" lport=46985 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 814.696253][T17505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17505 comm=syz.2.3487 [ 815.785814][ T8] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 815.967892][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.976726][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 815.987421][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.996677][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 816.008086][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 816.021995][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 816.031236][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 816.039319][ T8] usb 4-1: Product: syz [ 816.043555][ T8] usb 4-1: Manufacturer: syz [ 816.055830][T14132] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 816.058949][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 816.072702][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 816.075787][ T117] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 816.078770][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 816.103295][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 816.222785][T14132] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 816.229284][T17531] dlm: non-version read from control device 8224 [ 816.237735][ T117] usb 7-1: Using ep0 maxpacket: 16 [ 816.253048][ T117] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.263467][ T117] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.268836][T17510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.274511][T14132] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 816.289461][T17510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.309973][ T117] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 816.313883][ T9] usb 4-1: USB disconnect, device number 85 [ 816.319776][T14132] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 816.335345][ T117] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.348320][T14132] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 816.359322][T14132] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 816.383355][ T117] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 816.394335][ T117] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 816.402463][ T117] usb 7-1: Manufacturer: syz [ 816.408940][ T117] usb 7-1: config 0 descriptor?? [ 816.415089][T14132] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 816.424222][T14132] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 816.433655][T14132] usb 1-1: Product: syz [ 816.438189][T14132] usb 1-1: Manufacturer: syz [ 816.447591][T14132] cdc_wdm 1-1:1.0: skipping garbage [ 816.452810][T14132] cdc_wdm 1-1:1.0: skipping garbage [ 816.458954][T14132] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 816.464867][T14132] cdc_wdm 1-1:1.0: Unknown control protocol [ 816.692406][T17525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.701287][T17525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.714429][ T9] usb 1-1: USB disconnect, device number 99 [ 816.945089][T17538] FAULT_INJECTION: forcing a failure. [ 816.945089][T17538] name failslab, interval 1, probability 0, space 0, times 0 [ 816.960351][T17538] CPU: 0 UID: 0 PID: 17538 Comm: syz.3.3499 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 816.971138][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 816.981199][T17538] Call Trace: [ 816.984477][T17538] [ 816.987409][T17538] dump_stack_lvl+0x16c/0x1f0 [ 816.992097][T17538] should_fail_ex+0x497/0x5b0 [ 816.996788][T17538] ? fs_reclaim_acquire+0xae/0x150 [ 817.001916][T17538] should_failslab+0xc2/0x120 [ 817.006602][T17538] __kmalloc_noprof+0xcb/0x510 [ 817.011375][T17538] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 817.017032][T17538] tomoyo_realpath_from_path+0xb9/0x720 [ 817.022600][T17538] ? tomoyo_path_number_perm+0x235/0x590 [ 817.028244][T17538] ? tomoyo_path_number_perm+0x235/0x590 [ 817.033894][T17538] tomoyo_path_number_perm+0x248/0x590 [ 817.039372][T17538] ? tomoyo_path_number_perm+0x235/0x590 [ 817.045020][T17538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 817.051031][T17538] ? __pfx_lock_release+0x10/0x10 [ 817.056048][T17538] ? trace_lock_acquire+0x14e/0x1f0 [ 817.061242][T17538] ? lock_acquire+0x2f/0xb0 [ 817.065738][T17538] ? __fget_files+0x40/0x3a0 [ 817.070328][T17538] ? __fget_files+0x206/0x3a0 [ 817.074996][T17538] security_file_ioctl+0x9b/0x240 [ 817.080013][T17538] __x64_sys_ioctl+0xb7/0x200 [ 817.084689][T17538] do_syscall_64+0xcd/0x250 [ 817.089192][T17538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.095085][T17538] RIP: 0033:0x7f894cf7ff19 [ 817.099489][T17538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.119089][T17538] RSP: 002b:00007f894dd92058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.127508][T17538] RAX: ffffffffffffffda RBX: 00007f894d145fa0 RCX: 00007f894cf7ff19 [ 817.135465][T17538] RDX: 0000000020000600 RSI: 0000000040087543 RDI: 0000000000000003 [ 817.143421][T17538] RBP: 00007f894dd920a0 R08: 0000000000000000 R09: 0000000000000000 [ 817.151377][T17538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.159345][T17538] R13: 0000000000000000 R14: 00007f894d145fa0 R15: 00007fff331be4b8 [ 817.167311][T17538] [ 817.170407][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.218170][T17538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 819.660678][T17570] random: crng reseeded on system resumption [ 819.919483][ T117] rc_core: IR keymap rc-hauppauge not found [ 819.925985][ T117] Registered IR keymap rc-empty [ 819.931537][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 820.198227][T17583] FAULT_INJECTION: forcing a failure. [ 820.198227][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 820.211537][T17583] CPU: 1 UID: 0 PID: 17583 Comm: syz.5.3511 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 820.222308][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 820.232362][T17583] Call Trace: [ 820.235644][T17583] [ 820.238572][T17583] dump_stack_lvl+0x16c/0x1f0 [ 820.243255][T17583] should_fail_ex+0x497/0x5b0 [ 820.247937][T17583] ? fs_reclaim_acquire+0xae/0x150 [ 820.253059][T17583] should_failslab+0xc2/0x120 [ 820.257744][T17583] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 820.263118][T17583] ? vm_area_dup+0x53/0x2f0 [ 820.267630][T17583] vm_area_dup+0x53/0x2f0 [ 820.271965][T17583] __split_vma+0x181/0x1160 [ 820.276473][T17583] ? vma_merge_existing_range+0x931/0x1fa0 [ 820.282289][T17583] ? __pfx___split_vma+0x10/0x10 [ 820.287244][T17583] vma_modify.constprop.0+0x1f9/0x3b0 [ 820.292616][T17583] vma_modify_flags+0x209/0x2a0 [ 820.297467][T17583] ? __pfx_vma_modify_flags+0x10/0x10 [ 820.302852][T17583] ? mas_next_slot+0x12d3/0x21b0 [ 820.307802][T17583] mlock_fixup+0x282/0xfc0 [ 820.312231][T17583] apply_vma_lock_flags+0x262/0x390 [ 820.317435][T17583] ? rcu_is_watching+0x12/0xc0 [ 820.322211][T17583] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 820.327947][T17583] ? do_mlock+0x1b8/0x7d0 [ 820.332278][T17583] ? lock_acquire+0x2f/0xb0 [ 820.336778][T17583] ? do_mlock+0x1b8/0x7d0 [ 820.341132][T17583] ? __pfx_down_write_killable+0x10/0x10 [ 820.346766][T17583] ? __mutex_unlock_slowpath+0x164/0x690 [ 820.352406][T17583] do_mlock+0x264/0x7d0 [ 820.356573][T17583] ? __fget_files+0x206/0x3a0 [ 820.361248][T17583] ? __pfx_do_mlock+0x10/0x10 [ 820.365927][T17583] ? fput+0x67/0x440 [ 820.369825][T17583] ? ksys_write+0x1ba/0x250 [ 820.374325][T17583] ? __pfx_ksys_write+0x10/0x10 [ 820.379178][T17583] __x64_sys_mlock+0x59/0x80 [ 820.383771][T17583] do_syscall_64+0xcd/0x250 [ 820.388280][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.394174][T17583] RIP: 0033:0x7fcdc177ff19 [ 820.398587][T17583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.418201][T17583] RSP: 002b:00007fcdc25dc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 820.426613][T17583] RAX: ffffffffffffffda RBX: 00007fcdc1946160 RCX: 00007fcdc177ff19 [ 820.434583][T17583] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00000000204ec000 [ 820.442538][T17583] RBP: 00007fcdc25dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 820.450490][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.458445][T17583] R13: 0000000000000000 R14: 00007fcdc1946160 R15: 00007ffcb79101f8 [ 820.466418][T17583] [ 820.890530][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 820.927891][ T117] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 820.977711][ T117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input55 [ 821.253562][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 821.279072][T17560] kernel read not supported for file /amidi2 (pid: 17560 comm: kworker/1:8) [ 821.290744][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 821.314307][ T29] audit: type=1400 audit(1733460318.990:1373): avc: denied { ioctl } for pid=17569 comm="syz.6.3509" path="socket:[63273]" dev="sockfs" ino=63273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 821.339964][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.375033][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 821.481573][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 821.517852][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 821.745151][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 821.836146][ T7452] bond0: (slave syz_tun): Releasing backup interface [ 821.860240][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 822.025718][ T29] audit: type=1400 audit(1733460319.700:1374): avc: denied { ioctl } for pid=17601 comm="syz.3.3517" path="socket:[63363]" dev="sockfs" ino=63363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 822.077906][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 822.096547][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 822.137120][ T117] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 822.168738][ T117] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 822.303070][T17607] netlink: 'syz.5.3518': attribute type 10 has an invalid length. [ 822.337093][ T117] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 822.443983][ T117] usb 7-1: USB disconnect, device number 39 [ 822.470025][ T8238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.486452][T17560] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 822.595577][T17607] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 822.639234][ T8238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.813568][ T8238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.042016][T17617] netlink: 'syz.2.3522': attribute type 1 has an invalid length. [ 823.049899][T17617] netlink: 'syz.2.3522': attribute type 3 has an invalid length. [ 823.057788][T17617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3522'. [ 823.295903][T17560] usb 4-1: Using ep0 maxpacket: 16 [ 823.302732][T17560] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.313069][T17560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.313923][ T8238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.324179][T17560] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 823.344532][T17560] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.358975][T17560] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 823.368161][T17560] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 823.381489][T17560] usb 4-1: Manufacturer: syz [ 823.393120][T17560] usb 4-1: config 0 descriptor?? [ 823.696184][ T8238] bridge_slave_1: left allmulticast mode [ 823.731755][ T8238] bridge_slave_1: left promiscuous mode [ 823.748702][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.804493][ T8238] bridge_slave_0: left allmulticast mode [ 823.829377][ T8238] bridge_slave_0: left promiscuous mode [ 823.876680][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.389289][T17560] rc_core: IR keymap rc-hauppauge not found [ 825.395218][T17560] Registered IR keymap rc-empty [ 825.432112][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.497419][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.526131][T17560] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 825.552471][T17560] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 825.604086][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.655917][T17169] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 825.665892][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.725879][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.765902][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.809539][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.827764][T17169] usb 7-1: Using ep0 maxpacket: 16 [ 825.840530][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.856544][T17169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.893559][T17169] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.907846][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.907859][T17169] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 825.923655][T17169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.943748][T17169] usb 7-1: config 0 descriptor?? [ 825.962266][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 825.975781][T17663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3532'. [ 826.015960][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 826.035925][T17560] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 826.059464][T17560] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 826.085811][T17560] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 826.119501][T17560] usb 4-1: USB disconnect, device number 86 [ 826.183508][ T8238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.228986][ T8238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.247143][ T8238] bond0 (unregistering): Released all slaves [ 826.296619][T17658] syzkaller1: entered promiscuous mode [ 826.318424][T17658] syzkaller1: entered allmulticast mode [ 826.364989][T17671] vlan2: entered promiscuous mode [ 826.395948][T17169] macally 0003:060B:0001.001D: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 826.675287][ T8] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 826.729954][T17655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.837256][ T9] usb 7-1: USB disconnect, device number 40 [ 826.846034][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.977693][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 826.996181][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 827.005315][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.036476][ T29] audit: type=1400 audit(1733460324.720:1375): avc: denied { append } for pid=17683 comm="syz.0.3539" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 827.062136][ T8] usb 6-1: config 0 descriptor?? [ 827.272707][T17677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.312257][ T8238] hsr_slave_0: left promiscuous mode [ 827.329012][ T8238] hsr_slave_1: left promiscuous mode [ 827.337793][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.347795][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.349007][T17677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.426304][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.439997][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.513350][ T8238] veth1_macvtap: left promiscuous mode [ 827.535549][ T8238] veth0_macvtap: left promiscuous mode [ 827.549680][ T8238] veth1_vlan: left promiscuous mode [ 827.556698][ T8238] veth0_vlan: left promiscuous mode [ 827.767195][ T8] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max [ 827.856167][ T8] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 827.944035][ T8] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 828.615913][ T8] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 828.636382][T17721] o2cb: This node has not been configured. [ 828.642280][T17721] o2cb: Cluster check failed. Fix errors before retrying. [ 828.650449][T17721] (syz.3.3543,17721,1):user_dlm_register:674 ERROR: status = -22 [ 828.658372][T17721] (syz.3.3543,17721,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 828.775697][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 828.822179][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.855798][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 828.867506][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 828.877483][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.900532][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 828.914087][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 828.923545][ T8] usb 3-1: Manufacturer: syz [ 828.931157][ T8] usb 3-1: config 0 descriptor?? [ 829.235901][ T8] rc_core: IR keymap rc-hauppauge not found [ 829.241972][ T8] Registered IR keymap rc-empty [ 829.247535][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.265996][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.306106][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 829.324781][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input57 [ 829.345028][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.365911][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.385903][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.400011][T17725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.415936][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.435920][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.466469][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.486965][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.510671][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.560205][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.913026][ T9] usb 6-1: USB disconnect, device number 75 [ 829.919455][ T8] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 829.963765][ T8238] team0 (unregistering): Port device team_slave_1 removed [ 829.981128][ T8] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 830.012504][ T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 830.049475][ T8] usb 3-1: USB disconnect, device number 77 [ 830.134143][ T8238] team0 (unregistering): Port device team_slave_0 removed [ 830.844994][T17743] loop2: detected capacity change from 0 to 7 [ 830.845823][T13481] Bluetooth: hci6: command 0x0405 tx timeout [ 830.903009][T17743] Dev loop2: unable to read RDB block 7 [ 830.924278][T17743] loop2: unable to read partition table [ 830.950474][T17743] loop2: partition table beyond EOD, truncated [ 831.053746][T17743] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 831.069369][T17747] : entered promiscuous mode [ 831.202866][T17758] FAULT_INJECTION: forcing a failure. [ 831.202866][T17758] name failslab, interval 1, probability 0, space 0, times 0 [ 831.216231][T17758] CPU: 0 UID: 0 PID: 17758 Comm: syz.5.3555 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 831.227005][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 831.237049][T17758] Call Trace: [ 831.240319][T17758] [ 831.243232][T17758] dump_stack_lvl+0x16c/0x1f0 [ 831.247895][T17758] should_fail_ex+0x497/0x5b0 [ 831.252562][T17758] should_failslab+0xc2/0x120 [ 831.257219][T17758] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 831.262572][T17758] ? dst_alloc+0x99/0x1a0 [ 831.266880][T17758] dst_alloc+0x99/0x1a0 [ 831.271014][T17758] rt_dst_alloc+0x35/0x3a0 [ 831.275412][T17758] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 831.281382][T17758] ip_route_output_key_hash+0x138/0x2e0 [ 831.286905][T17758] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 831.292955][T17758] __ip4_datagram_connect+0x81f/0x1510 [ 831.298398][T17758] __ip6_datagram_connect+0xcfe/0x1480 [ 831.303839][T17758] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 831.309716][T17758] ? mark_held_locks+0x9f/0xe0 [ 831.314464][T17758] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 831.320329][T17758] ip6_datagram_connect_v6_only+0x73/0xa0 [ 831.326035][T17758] inet_dgram_connect+0x15b/0x2f0 [ 831.331076][T17758] ? __pfx_inet_dgram_connect+0x10/0x10 [ 831.336635][T17758] __sys_connect_file+0x13e/0x1a0 [ 831.341677][T17758] __sys_connect+0x14f/0x170 [ 831.346271][T17758] ? __pfx___sys_connect+0x10/0x10 [ 831.351369][T17758] ? __pfx_ksys_write+0x10/0x10 [ 831.356196][T17758] __x64_sys_connect+0x72/0xb0 [ 831.360934][T17758] ? lockdep_hardirqs_on+0x7c/0x110 [ 831.366107][T17758] do_syscall_64+0xcd/0x250 [ 831.370585][T17758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.376457][T17758] RIP: 0033:0x7fcdc177ff19 [ 831.380847][T17758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.400429][T17758] RSP: 002b:00007fcdc261e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 831.408813][T17758] RAX: ffffffffffffffda RBX: 00007fcdc1945fa0 RCX: 00007fcdc177ff19 [ 831.416757][T17758] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 [ 831.424701][T17758] RBP: 00007fcdc261e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 831.432647][T17758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.440608][T17758] R13: 0000000000000000 R14: 00007fcdc1945fa0 R15: 00007ffcb79101f8 [ 831.448560][T17758] [ 831.642416][ T8] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 831.946321][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 832.494365][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 832.559614][ T8] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 832.685754][ T8] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 832.695442][ T8] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 832.705344][ T8] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 832.715957][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 832.722576][ T8] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 832.731740][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.743102][ T8] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 833.330470][T17784] fuse: Unknown parameter 'user_i00000000000000000000' [ 833.467735][ T8] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 833.479725][ T8] usb 1-1: USB disconnect, device number 100 [ 834.233814][T17169] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 834.405659][T17169] usb 3-1: Using ep0 maxpacket: 16 [ 834.412923][T17169] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 834.489128][T17169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 834.644502][T17169] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 834.654400][T17169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.049922][T17169] usb 3-1: Product: syz [ 835.060392][T17169] usb 3-1: Manufacturer: syz [ 835.070591][T17169] usb 3-1: SerialNumber: syz [ 835.080680][T17169] usb 3-1: config 0 descriptor?? [ 835.092900][T17169] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 835.102373][T17169] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 835.544851][ T29] audit: type=1400 audit(1733460333.210:1376): avc: denied { sys_chroot } for pid=17828 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 835.656530][ T29] audit: type=1400 audit(1733460333.210:1377): avc: denied { setgid } for pid=17828 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 835.678280][ T29] audit: type=1400 audit(1733460333.210:1378): avc: denied { setrlimit } for pid=17828 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 835.702826][T17169] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 835.760249][T17169] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 836.285167][T17169] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 836.337102][T17169] em28xx 3-1:0.0: No AC97 audio processor [ 836.409349][T17169] usb 3-1: USB disconnect, device number 78 [ 836.421117][T17169] em28xx 3-1:0.0: Disconnecting em28xx [ 836.732916][T17851] netlink: 'syz.0.3574': attribute type 1 has an invalid length. [ 836.740794][T17851] netlink: 'syz.0.3574': attribute type 3 has an invalid length. [ 836.748636][T17851] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3574'. [ 836.769035][T17169] em28xx 3-1:0.0: Freeing device [ 837.437164][ T5141] Bluetooth: hci1: unexpected event for opcode 0x041b [ 837.566144][T17857] netlink: 'syz.2.3576': attribute type 4 has an invalid length. [ 837.654821][T17857] netlink: 'syz.2.3576': attribute type 4 has an invalid length. [ 837.754167][T17866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3576'. [ 839.075140][T14132] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 839.097948][T17902] syz.6.3589: attempt to access beyond end of device [ 839.097948][T17902] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 839.475432][T17902] gfs2: error -5 reading superblock [ 944.485555][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 944.492610][ C0] rcu: 1-...!: (1 GPs behind) idle=b8cc/1/0x4000000000000000 softirq=73574/73575 fqs=5 [ 944.503675][ C0] rcu: (detected by 0, t=10502 jiffies, g=76077, q=335 ncpus=2) [ 944.511395][ C0] Sending NMI from CPU 0 to CPUs 1: [ 944.511419][ C1] NMI backtrace for cpu 1 [ 944.511429][ C1] CPU: 1 UID: 0 PID: 17886 Comm: syz.3.3584 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 944.511447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 944.511455][ C1] RIP: 0010:__lock_acquire+0x33d/0x3c40 [ 944.511475][ C1] Code: 03 80 3c 02 00 0f 85 5f 2b 00 00 48 8b 44 24 10 49 8d b5 c4 0a 00 00 45 31 e4 48 89 f2 49 89 47 18 65 8b 05 4d 1b 8c 7e 85 c0 <48> 89 74 24 40 48 b8 00 00 00 00 00 fc ff df 41 0f 95 c4 48 c1 ea [ 944.511488][ C1] RSP: 0018:ffffc90000a18af0 EFLAGS: 00000002 [ 944.511501][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 944.511509][ C1] RDX: ffff888037512f04 RSI: ffff888037512f04 RDI: ffff888037512f50 [ 944.511519][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 944.511529][ C1] R10: 0000000000000005 R11: 0000000000000001 R12: 0000000000000000 [ 944.511538][ C1] R13: ffff888037512440 R14: 0000000000000000 R15: ffff888037512f48 [ 944.511548][ C1] FS: 00007f894dd926c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 944.511564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.511574][ C1] CR2: 0000001b2f00fff8 CR3: 000000002786e000 CR4: 00000000003526f0 [ 944.511584][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 944.511592][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 944.511601][ C1] Call Trace: [ 944.511607][ C1] [ 944.511613][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 944.511630][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 944.511644][ C1] ? nmi_handle+0x1ac/0x5d0 [ 944.511659][ C1] ? __lock_acquire+0x33d/0x3c40 [ 944.511673][ C1] ? default_do_nmi+0x6a/0x160 [ 944.511687][ C1] ? exc_nmi+0x170/0x1e0 [ 944.511699][ C1] ? end_repeat_nmi+0xf/0x53 [ 944.511720][ C1] ? __lock_acquire+0x33d/0x3c40 [ 944.511735][ C1] ? __lock_acquire+0x33d/0x3c40 [ 944.511749][ C1] ? __lock_acquire+0x33d/0x3c40 [ 944.511764][ C1] [ 944.511768][ C1] [ 944.511775][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 944.511791][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 944.511806][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 944.511822][ C1] lock_acquire.part.0+0x11b/0x380 [ 944.511836][ C1] ? debug_object_deactivate+0x13b/0x370 [ 944.511854][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 944.511869][ C1] ? rcu_is_watching+0x12/0xc0 [ 944.511887][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 944.511905][ C1] ? debug_object_activate+0x149/0x4a0 [ 944.511921][ C1] ? debug_object_deactivate+0x13b/0x370 [ 944.511937][ C1] ? lock_acquire+0x2f/0xb0 [ 944.511950][ C1] ? debug_object_deactivate+0x13b/0x370 [ 944.511967][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 944.511982][ C1] ? debug_object_deactivate+0x13b/0x370 [ 944.511997][ C1] debug_object_deactivate+0x13b/0x370 [ 944.512018][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 944.512036][ C1] ? __pfx_advance_sched+0x10/0x10 [ 944.512050][ C1] ? timerqueue_add+0x1c2/0x330 [ 944.512072][ C1] ? __pfx_advance_sched+0x10/0x10 [ 944.512085][ C1] __hrtimer_run_queues+0x47c/0xae0 [ 944.512107][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 944.512124][ C1] ? read_tsc+0x9/0x20 [ 944.512144][ C1] hrtimer_interrupt+0x392/0x8e0 [ 944.512166][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 944.512184][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 944.512200][ C1] [ 944.512204][ C1] [ 944.512209][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 944.512227][ C1] RIP: 0010:lock_release+0x3e5/0x6f0 [ 944.512242][ C1] Code: 7e 83 f8 01 0f 85 fe 01 00 00 9c 58 f6 c4 02 0f 85 e9 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 944.512255][ C1] RSP: 0018:ffffc9000476f710 EFLAGS: 00000206 [ 944.512266][ C1] RAX: dffffc0000000000 RBX: 1ffff920008edee4 RCX: ffffc9000476f760 [ 944.512276][ C1] RDX: 1ffff11006ea25e2 RSI: ffffffff8b6cdb40 RDI: ffffffff8bd1b4a0 [ 944.512286][ C1] RBP: ffffffffffffffff R08: 0000000000000000 R09: fffffbfff20be07a [ 944.512295][ C1] R10: ffffffff905f03d7 R11: 0000000000000001 R12: 0000000000000000 [ 944.512304][ C1] R13: 0000000000000001 R14: ffff888037512f18 R15: ffff888037512440 [ 944.512319][ C1] ? unix_wait_for_peer+0x23f/0x280 [ 944.512337][ C1] ? __pfx_lock_release+0x10/0x10 [ 944.512353][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 944.512368][ C1] ? prepare_to_wait_exclusive+0xe2/0x2b0 [ 944.512385][ C1] _raw_spin_unlock+0x16/0x50 [ 944.512399][ C1] unix_wait_for_peer+0x23f/0x280 [ 944.512415][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 944.512432][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 944.512447][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 944.512463][ C1] ? hook_unix_may_send+0x2aa/0x3a0 [ 944.512485][ C1] unix_dgram_sendmsg+0x180f/0x19e0 [ 944.512506][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 944.512530][ C1] ____sys_sendmsg+0xaaf/0xc90 [ 944.512547][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 944.512562][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.512578][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 944.512594][ C1] ? hlock_class+0x4e/0x130 [ 944.512611][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 944.512627][ C1] ___sys_sendmsg+0x135/0x1e0 [ 944.512641][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.512654][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 944.512678][ C1] ? __pfx___might_resched+0x10/0x10 [ 944.512695][ C1] ? __might_fault+0xe3/0x190 [ 944.512715][ C1] __sys_sendmmsg+0x201/0x420 [ 944.512730][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 944.512747][ C1] ? __pfx_do_futex+0x10/0x10 [ 944.512765][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 944.512779][ C1] ? rcu_is_watching+0x12/0xc0 [ 944.512798][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 944.512811][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 944.512827][ C1] do_syscall_64+0xcd/0x250 [ 944.512845][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.512862][ C1] RIP: 0033:0x7f894cf7ff19 [ 944.512874][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.512886][ C1] RSP: 002b:00007f894dd92058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.512898][ C1] RAX: ffffffffffffffda RBX: 00007f894d145fa0 RCX: 00007f894cf7ff19 [ 944.512907][ C1] RDX: 0400000000000041 RSI: 0000000020000000 RDI: 0000000000000005 [ 944.512916][ C1] RBP: 00007f894cff3986 R08: 0000000000000000 R09: 0000000000000000 [ 944.512924][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.512933][ C1] R13: 0000000000000000 R14: 00007f894d145fa0 R15: 00007fff331be4b8 [ 944.512945][ C1] [ 944.513415][ C0] rcu: rcu_preempt kthread starved for 10492 jiffies! g76077 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 945.178727][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 945.188690][ C0] rcu: RCU grace-period kthread stack dump: [ 945.194574][ C0] task:rcu_preempt state:R running task stack:27744 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 945.206330][ C0] Call Trace: [ 945.209606][ C0] [ 945.212541][ C0] __schedule+0xe58/0x5ad0 [ 945.216971][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 945.222184][ C0] ? __pfx___schedule+0x10/0x10 [ 945.227040][ C0] ? schedule+0x298/0x350 [ 945.231369][ C0] ? __pfx_lock_release+0x10/0x10 [ 945.236397][ C0] ? lock_acquire+0x2f/0xb0 [ 945.240894][ C0] ? schedule+0x1fd/0x350 [ 945.245228][ C0] schedule+0xe7/0x350 [ 945.249294][ C0] schedule_timeout+0x124/0x280 [ 945.254140][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 945.259511][ C0] ? __pfx_process_timeout+0x10/0x10 [ 945.264804][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 945.270608][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 945.276066][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 945.280832][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 945.286121][ C0] ? rcu_gp_init+0xc82/0x1630 [ 945.290799][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 945.296004][ C0] rcu_gp_kthread+0x271/0x380 [ 945.300684][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 945.305900][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 945.311096][ C0] ? __kthread_parkme+0x148/0x220 [ 945.316122][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 945.321318][ C0] kthread+0x2c1/0x3a0 [ 945.325387][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.330581][ C0] ? __pfx_kthread+0x10/0x10 [ 945.335172][ C0] ret_from_fork+0x45/0x80 [ 945.339589][ C0] ? __pfx_kthread+0x10/0x10 [ 945.344177][ C0] ret_from_fork_asm+0x1a/0x30 [ 945.348955][ C0] [ 945.351968][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 945.358281][ C0] CPU: 0 UID: 0 PID: 17913 Comm: syz.0.3590 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 945.369037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 945.379084][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 945.385847][ C0] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 945.405448][ C0] RSP: 0018:ffffc9000424fb28 EFLAGS: 00000202 [ 945.411513][ C0] RAX: 0000000000000001 RBX: ffff8880b8744a40 RCX: ffffc9000e78c000 [ 945.419477][ C0] RDX: 0000000000080000 RSI: 0000000000000001 RDI: 0000000000000000 [ 945.427439][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 945.435400][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170e8949 [ 945.443363][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 945.451325][ C0] FS: 00007f59a204a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 945.460263][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.466844][ C0] CR2: 00007f59a2049fb8 CR3: 0000000057a70000 CR4: 00000000003526f0 [ 945.474813][ C0] Call Trace: [ 945.478083][ C0] [ 945.480918][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 945.487247][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 945.492448][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 945.497916][ C0] ? timekeeping_advance+0x70a/0xa60 [ 945.503194][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 945.508828][ C0] ? __asan_memcpy+0x3c/0x60 [ 945.513413][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 945.518706][ C0] ? rcu_is_watching+0x12/0xc0 [ 945.523472][ C0] ? update_process_times+0x178/0x2d0 [ 945.528843][ C0] ? __pfx_update_process_times+0x10/0x10 [ 945.534561][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 945.540025][ C0] ? update_wall_time+0x1c/0x40 [ 945.544872][ C0] ? tick_nohz_handler+0x376/0x530 [ 945.549984][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 945.555444][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 945.560820][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 945.566535][ C0] ? read_tsc+0x9/0x20 [ 945.570612][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 945.575727][ C0] ? sched_core_idle_cpu+0xc4/0x250 [ 945.580924][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 945.587076][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 945.592879][ C0] [ 945.595804][ C0] [ 945.598727][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 945.604902][ C0] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 945.611664][ C0] smp_call_function_many_cond+0x47c/0x1300 [ 945.617557][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 945.622586][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 945.627607][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 945.632735][ C0] text_poke_bp_batch+0x22b/0x760 [ 945.637772][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 945.642797][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 945.648347][ C0] ? text_poke_queue+0xef/0x180 [ 945.653209][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 945.659467][ C0] text_poke_finish+0x30/0x40 [ 945.664153][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 945.670143][ C0] jump_label_update+0x1d7/0x400 [ 945.675084][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 945.680982][ C0] static_key_enable+0x1a/0x20 [ 945.685749][ C0] sched_core_get+0x8a/0xa0 [ 945.690253][ C0] sched_core_share_pid+0x41f/0xa00 [ 945.695452][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 945.701361][ C0] ? __pfx_sched_core_share_pid+0x10/0x10 [ 945.707100][ C0] ? static_key_count+0x5a/0x70 [ 945.711972][ C0] ? security_task_prctl+0x11c/0x160 [ 945.717277][ C0] __do_sys_prctl+0x15e6/0x2190 [ 945.722144][ C0] ? __pfx___do_sys_prctl+0x10/0x10 [ 945.727363][ C0] do_syscall_64+0xcd/0x250 [ 945.731871][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.737775][ C0] RIP: 0033:0x7f59a117ff19 [ 945.742187][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.761888][ C0] RSP: 002b:00007f59a204a058 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 945.770299][ C0] RAX: ffffffffffffffda RBX: 00007f59a1346080 RCX: 00007f59a117ff19 [ 945.778266][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 945.786941][ C0] RBP: 00007f59a11f3986 R08: 0000000000000000 R09: 0000000000000000 [ 945.794910][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 945.802893][ C0] R13: 0000000000000000 R14: 00007f59a1346080 R15: 00007ffc13360ce8 [ 945.810888][ C0]