last executing test programs: 6m25.596704314s ago: executing program 0 (id=775): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@deltfilter={0x1750, 0x2d, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x5, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x814, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x2, 0x3, 0x7fffffff, 0x84, 0xffffff7f, 0x80000000, 0x7fff, 0x4, 0x80, 0x9, 0x3, 0x3, 0x4, 0x8001, 0x4, 0x6, 0x9, 0x4, 0x3ff, 0x7, 0x18000000, 0x9, 0x0, 0x4, 0xe2, 0x1, 0xfffffffc, 0x1, 0x883, 0x5, 0x4, 0xa, 0xfffffffe, 0x60, 0x4, 0x10000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, 0x401, 0x5, 0x0, 0x5, 0x81, 0x6b, 0x9, 0x626a29e7, 0x8, 0x6, 0x9, 0x0, 0x5, 0x9, 0x1, 0x6, 0x0, 0x2, 0x19, 0x140, 0x4000000, 0x5, 0xa6e, 0x100, 0x5, 0x10, 0x1ff, 0x5, 0xffffffff, 0xfffffffd, 0x3, 0xf2a, 0xfffffff8, 0x4, 0x31, 0x7ff, 0xe49c, 0xa74, 0x3, 0x5, 0x401, 0x47, 0x3, 0xc, 0x48, 0x20004, 0x2, 0x193, 0xf, 0x5, 0x9f, 0x8001, 0x1a0c, 0x8, 0x3, 0xe7b, 0x7, 0xf, 0xde, 0x7, 0x7, 0x8, 0x3, 0x88, 0xf2, 0x800, 0x40, 0xd56, 0x0, 0x4, 0x5, 0x7fffffff, 0x5, 0x8, 0x3, 0x3, 0x20000, 0x6, 0x2dfe, 0x2, 0x7, 0x5, 0x6, 0xfffffffe, 0xc, 0x10001, 0x80000000, 0x0, 0x74, 0xd51, 0x81, 0x0, 0x10, 0x200, 0x7e, 0xe, 0x200004, 0x3, 0x7083, 0x9, 0x3, 0x6, 0x5, 0x6, 0x1000, 0x8, 0x7ff, 0x1175, 0x6, 0xa, 0x1, 0xc, 0x4, 0xfffffff9, 0xffff, 0x1000, 0xffffffff, 0x5, 0xfffffff7, 0x1, 0x3, 0x3, 0x28, 0x0, 0x200, 0x57c7, 0x8, 0x10000000, 0x6, 0x9, 0x8, 0x1, 0x9, 0xfff, 0x3, 0x8001, 0x0, 0x7, 0xa5, 0x3, 0x4, 0x22, 0x800, 0x4, 0xfff, 0xfffffff8, 0x9, 0x3, 0x7, 0x3, 0x0, 0xa, 0xfffffffe, 0x7, 0x8, 0x9, 0x7f, 0x539, 0x10001, 0x8, 0x10e1, 0x8, 0x3, 0x0, 0x200, 0x0, 0x6, 0x4, 0x6, 0x6, 0x25, 0x1, 0x5, 0x10000, 0x7f, 0xfffffffc, 0xfffffffd, 0x400, 0x3ff, 0x0, 0x80000000, 0xffff, 0x66e, 0x2, 0x8f, 0x6, 0xfffeffff, 0x9, 0x6, 0x8, 0x6, 0x7, 0x2, 0x4, 0x73, 0x45, 0x7, 0x6, 0x200, 0x6, 0x0, 0x7ff, 0x40, 0x3, 0x5, 0x1, 0x7, 0x7, 0x0, 0x8, 0x6, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x0, 0x7f, 0x2, 0x8, 0x6, 0x3, 0x80, 0x9, 0x1000, 0x8, 0x401, 0x1, 0x2, 0x2, 0x1, 0x3, 0x6, 0x2, 0x6, 0x3, 0x2, 0x9, 0x9, 0x2991, 0x0, 0xd2, 0x0, 0x7, 0x5, 0xc07, 0x4, 0x9, 0x8, 0x4000000, 0x4, 0x9, 0x7, 0x3, 0x5, 0x9, 0xac, 0x0, 0x8, 0x7646, 0x40, 0x4, 0x0, 0x2, 0x4, 0x1ff, 0x7, 0x7, 0x40, 0xb0, 0x7f, 0xae7, 0x1, 0x9, 0x5, 0x3, 0x6, 0xffff, 0x3, 0x2, 0x9, 0x6bdfbae7, 0x7, 0x1, 0x2, 0x9, 0x8, 0x1, 0x6bd1, 0x100, 0x7, 0x80000001, 0x800, 0x9, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x9, 0x9, 0x6698211, 0xfffffffa, 0x0, 0x5, 0x2, 0x8, 0x3, 0x81, 0x1, 0x9, 0x1000, 0x8, 0x6c, 0x9, 0xe, 0x2, 0x80000000, 0x80000002, 0xffffffff, 0xfffffffc, 0x4, 0x4, 0x9, 0x9, 0x3ff, 0x4, 0x100, 0x2, 0xd0be, 0x5, 0x36508, 0xffffff1d, 0xfffffff9, 0x400, 0xfffffffe, 0x9, 0x2, 0x6, 0x401, 0x80, 0x1, 0x2, 0x7, 0x1e, 0xf, 0x8, 0xfff, 0x1, 0x8, 0x6, 0x18, 0x8001, 0x3, 0x9, 0x1ff, 0x77, 0x100, 0xfffffffe, 0xc, 0x10000, 0x35, 0x3, 0x8, 0x7fffffff, 0xffff8000, 0x7, 0x568, 0x5b2c958b, 0x1, 0x1, 0x7, 0x3, 0x80000001, 0x9, 0x2, 0x1, 0xff, 0x4, 0x4, 0x7d2e, 0x8000, 0xb086, 0xa1d, 0x8000, 0xffffff20, 0x8, 0x2f, 0x622f, 0x4, 0x2, 0xff, 0x1, 0xda61, 0x6, 0x5, 0x10, 0x7, 0x27, 0x6, 0x1, 0x1, 0x10a, 0xfffeffff, 0xd, 0x0, 0x0, 0x80000000, 0x461, 0x80000001, 0x7, 0x0, 0x3, 0x0, 0x7fffffff, 0xb, 0x0, 0x4, 0x4, 0x8, 0x3, 0xff, 0x7, 0xffff, 0x4, 0x4, 0x8000, 0x8, 0xb2, 0x8000, 0x8, 0x4, 0x3ff, 0x53079775, 0x1, 0x8, 0x6, 0x7000, 0x3ff, 0x2, 0x7, 0x4, 0x4, 0xe74, 0x9, 0x8, 0x4, 0x4, 0x10, 0x2, 0x1, 0x101, 0x6, 0x3, 0x7, 0x0, 0x0, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x6, 0x200, 0x24000, 0x10000, 0xa7, 0x8, 0x54, 0x3]}]}, @TCA_CGROUP_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xefc, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0xeec, 0x1, [@m_xt={0xee8, 0x4, 0x0, 0x0, {{0x7}, {0xec0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xeb9, 0x6, {0x6, 'mangle\x00', 0x7, 0x80, "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"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1750}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m24.881766888s ago: executing program 0 (id=777): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e03, 0x0, @empty}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000004d00)=""/102383, 0x18fef}, {&(0x7f0000000680)=""/244, 0xf4}], 0x2, 0x0, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000600)) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x9, 0x73d, 0x9, 0x40, 0x1, 0x2, 0x6, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x6, 0x8, 0x3, 0x2}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x4005}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x3, 0x8}, 0x8) socket$inet6(0xa, 0x80002, 0x88) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xc1, "5767250265d0fbc0d7fa321efb66ddb68c4fab99535c8e53f80321e4ac656b01922175f38fc0de71927119e98081dee651e2e003197544861af0e68aed9e8dcedd4e04f68cd49ef278d7bccb58e058d0344198d51f9b44cae3979db56373aee99eec84ffea29a02cdbdda0f8bd4654cea789cea0fe38f9b845fe4f8e9fd2f3ec8634e354e44b5eb16fbfd41abdeb527ca70b7c6097f9c0c46f9e4cd9bef71fbc4bc29eb6f9952748ae617f4fa30457d122d7b859a95179354a1cffaae43e5dd9a1"}, &(0x7f0000000040)=0xc9) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000480)={0x48}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0004400400142603600e1208000b0000000401a8000900a400024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6m24.366072603s ago: executing program 0 (id=780): socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8], 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1a) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x100000, 0x1000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)) 6m22.088363464s ago: executing program 0 (id=782): socket$nl_xfrm(0x10, 0x3, 0x6) setregid(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x2, {0xfffffffffffffff8}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xa8e}}, &(0x7f0000000340)={0x18, 0x0, 0x4, {0x3ff}}, 0x0, &(0x7f00000003c0)={0x60, 0x0, 0xb8a8, {{0x3, 0x2, 0x7, 0x0, 0x7fff, 0x7, 0x85c, 0x4}}}, &(0x7f0000000700)={0x18, 0x0, 0xd5, {0x86f7}}, &(0x7f000001f040)=ANY=[@ANYBLOB="004d583b4212000000f5ffffff01000015000000002e"], &(0x7f0000000780)={0x20, 0x0, 0x2}, &(0x7f00000007c0)={0x78, 0x0, 0x9, {0x3, 0x8, 0x0, {0x6, 0x8d, 0x21cc, 0xf, 0x7, 0xa86632c, 0x1, 0x3, 0x0, 0x2000, 0x101, 0x0, 0x0, 0x8}}}, &(0x7f0000000880)={0x90, 0xfffffffffffffffe, 0x8, {0x2, 0x1, 0x8, 0x40, 0x7, 0xe255, {0x0, 0x7fffffffffffffff, 0x0, 0x523, 0x381, 0x8000000000000001, 0x6, 0xba6, 0x3a1, 0x6000, 0x7, 0x0, 0x0, 0x1, 0x40}}}, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000000000000ff00000000000000060000000000000000000000000000000b000000060000006173796d6d657472696300000000000006000000000000000f0000000000000000000000090000000f405a4c175b70811fd604385bdaed8595b959f5fe7ac9ebfaa250e6c261e82c2177627ac593b43577e35495295ec00635dc55b824a1f6a5e1021969d2bf554c40e20f251ee1286959fd5ac94d8daa863812c2cff16888807083733ce924fabedfc734b74ad4909f0443c5e920b3113848dbe5cd08354ead136ba004baa134dcb7dc3855c4e76c43f1dab29a489113c24a003b240c4bdb77a4802e5e8dd947bc12485db99cc2d0a037088487952f90beaed14c200d064492c42a9c3ae0931c35ff290d4ffa91f6bd947f076469c10047dafb5e06fd4df4bf994282493b9ad34a487b86d6f20a041079352b8e819bef"], &(0x7f00000009c0)=ANY=[@ANYBLOB="f0010000000000000000000000000000010000000000000003000000000000000000000000000000e300000000000000018000005b0e00000100000000000000050000000000000081000000000000000000000000000000000002000000090000000104000000c0000005000000", @ANYRES32, @ANYRES32, @ANYBLOB="cdc80000ed080000000000000600000000000000360800000000000003000000ef00000073797a0000000000050000000000000003000000000000000200000000000000ffffff7f00000000400000000700000004000000000000007f0000000000000005000000000000000100008000000000030000000000000000080000000000002f76000001000000000100000060000001000100", @ANYRES32, @ANYRES32, @ANYBLOB="080000000900000000000000010000000000000009000000000000000700000009000000757365725f69640001000000000000000000000000000000a002b40f0000000008000000000000000d0000000100000004000000000000000600000000000000f1ffffffffffffff0100000000000000760000000000000009000000000000000100000040840100030000000060000007000000", @ANYRES32, @ANYRES32, @ANYRESOCT], &(0x7f0000000bc0)={0xa0, 0x0, 0x5, {{0x2, 0x0, 0x3, 0x0, 0x7, 0xff, {0x4, 0x3, 0x4, 0x10001, 0x3, 0x0, 0x3, 0x7, 0xfffffbff, 0x0, 0x769, 0x0, 0x0, 0xa7, 0x4}}, {0x0, 0x2}}}, &(0x7f0000000c80)={0x20, 0x0, 0x3, {0x4, 0x0, 0x9, 0x240}}, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x200}}}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f000001ef40)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f000001efc0)) syz_open_dev$vim2m(0x0, 0x7, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f000001eec0)=[{0x6, 0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000040)}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/144, 0x90}], &(0x7f0000000180)=[0xfffffffffffffffd, 0x0]}, {0x4, 0x1, 0x0, &(0x7f0000002680)=[{&(0x7f000001b700)=""/4096, 0x1000}, {&(0x7f0000002440)=""/234, 0xea}, {&(0x7f0000002540)=""/45, 0x2d}, {&(0x7f0000002580)=""/253, 0xfd}], &(0x7f00000026c0)=[0x6, 0x200]}, {0xa, 0x0, 0x0, &(0x7f000001eb80)=[{&(0x7f000001c700)=""/19, 0x13}, {&(0x7f000001c740)=""/2, 0x2}, {&(0x7f000001c780)=""/17, 0x11}, {&(0x7f000001c7c0)=""/13, 0xd}, {&(0x7f000001c800)=""/246, 0xf6}, {&(0x7f000001c900)=""/4096, 0x1000}, {&(0x7f000001d900)=""/209, 0xd1}, {&(0x7f000001da00)=""/4096, 0x1000}, {&(0x7f000001ea00)=""/225, 0xe1}, {&(0x7f000001eb00)=""/90, 0x5a}], &(0x7f000001ec40)=[0x9]}, {0x4, 0x0, 0x0, &(0x7f000001ee40)=[{&(0x7f000001ec80)=""/114, 0x72}, {&(0x7f000001ed00)=""/167, 0xa7}, {&(0x7f000001edc0)=""/6, 0x6}, {&(0x7f000001ee00)=""/8, 0x8}], &(0x7f000001ee80)=[0x8, 0x3c, 0x7fffffffffffffff, 0xe7]}], 0x4) syz_open_dev$evdev(0x0, 0x20000000000, 0x822b01) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ustat(0x11, &(0x7f0000000600)) 6m21.48868937s ago: executing program 0 (id=784): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xee}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x48000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x4, 0x0, "b68e5a32474ffa64f778ddcf29c94333"}) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "25dd80e966fae5e10da5b74de90c0c6b0d835f3b6e6e3996322cafec7ac3d8ea", "b18ad9456f70defe386fa86cc846f493", {"30b96a46282b516cd06fa8560a39ada5", "568046936d174155e3e7759daf582e25"}}}}}}}}, 0x0) 6m20.106819643s ago: executing program 0 (id=788): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@deltfilter={0x1750, 0x2d, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x5, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x814, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x2, 0x3, 0x7fffffff, 0x84, 0xffffff7f, 0x80000000, 0x7fff, 0x4, 0x80, 0x9, 0x3, 0x3, 0x4, 0x8001, 0x4, 0x6, 0x9, 0x4, 0x3ff, 0x7, 0x18000000, 0x9, 0x0, 0x4, 0xe2, 0x1, 0xfffffffc, 0x1, 0x883, 0x5, 0x4, 0xa, 0xfffffffe, 0x60, 0x4, 0x10000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, 0x401, 0x5, 0x0, 0x5, 0x81, 0x6b, 0x9, 0x626a29e7, 0x8, 0x6, 0x9, 0x0, 0x5, 0x9, 0x1, 0x6, 0x0, 0x2, 0x19, 0x140, 0x4000000, 0x5, 0xa6e, 0x100, 0x5, 0x10, 0x1ff, 0x5, 0xffffffff, 0xfffffffd, 0x3, 0xf2a, 0xfffffff8, 0x4, 0x31, 0x7ff, 0xe49c, 0xa74, 0x3, 0x5, 0x401, 0x47, 0x3, 0xc, 0x48, 0x20004, 0x2, 0x193, 0xf, 0x5, 0x9f, 0x8001, 0x1a0c, 0x8, 0x3, 0xe7b, 0x7, 0xf, 0xde, 0x7, 0x7, 0x8, 0x3, 0x88, 0xf2, 0x800, 0x40, 0xd56, 0x0, 0x4, 0x5, 0x7fffffff, 0x5, 0x8, 0x3, 0x3, 0x20000, 0x6, 0x2dfe, 0x2, 0x7, 0x5, 0x6, 0xfffffffe, 0xc, 0x10001, 0x80000000, 0x0, 0x74, 0xd51, 0x81, 0x0, 0x10, 0x200, 0x7e, 0xe, 0x200004, 0x3, 0x7083, 0x9, 0x3, 0x6, 0x5, 0x6, 0x1000, 0x8, 0x7ff, 0x1175, 0x6, 0xa, 0x1, 0xc, 0x4, 0xfffffff9, 0xffff, 0x1000, 0xffffffff, 0x5, 0xfffffff7, 0x1, 0x3, 0x3, 0x28, 0x0, 0x200, 0x57c7, 0x8, 0x10000000, 0x6, 0x9, 0x8, 0x1, 0x9, 0xfff, 0x3, 0x8001, 0x0, 0x7, 0xa5, 0x3, 0x4, 0x22, 0x800, 0x4, 0xfff, 0xfffffff8, 0x9, 0x3, 0x7, 0x3, 0x0, 0xa, 0xfffffffe, 0x7, 0x8, 0x9, 0x7f, 0x539, 0x10001, 0x8, 0x10e1, 0x8, 0x3, 0x0, 0x200, 0x0, 0x6, 0x4, 0x6, 0x6, 0x25, 0x1, 0x5, 0x10000, 0x7f, 0xfffffffc, 0xfffffffd, 0x400, 0x3ff, 0x0, 0x80000000, 0xffff, 0x66e, 0x2, 0x8f, 0x6, 0xfffeffff, 0x9, 0x6, 0x8, 0x6, 0x7, 0x2, 0x4, 0x73, 0x45, 0x7, 0x6, 0x200, 0x6, 0x0, 0x7ff, 0x40, 0x3, 0x5, 0x1, 0x7, 0x7, 0x0, 0x8, 0x6, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x0, 0x7f, 0x2, 0x8, 0x6, 0x3, 0x80, 0x9, 0x1000, 0x8, 0x401, 0x1, 0x2, 0x2, 0x1, 0x3, 0x6, 0x2, 0x6, 0x3, 0x2, 0x9, 0x9, 0x2991, 0x0, 0xd2, 0x0, 0x7, 0x5, 0xc07, 0x4, 0x9, 0x8, 0x4000000, 0x4, 0x9, 0x7, 0x3, 0x5, 0x9, 0xac, 0x0, 0x8, 0x7646, 0x40, 0x4, 0x0, 0x2, 0x4, 0x1ff, 0x7, 0x7, 0x40, 0xb0, 0x7f, 0xae7, 0x1, 0x9, 0x5, 0x3, 0x6, 0xffff, 0x3, 0x2, 0x9, 0x6bdfbae7, 0x7, 0x1, 0x2, 0x9, 0x8, 0x1, 0x6bd1, 0x100, 0x7, 0x80000001, 0x800, 0x9, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x9, 0x9, 0x6698211, 0xfffffffa, 0x0, 0x5, 0x2, 0x8, 0x3, 0x81, 0x1, 0x9, 0x1000, 0x8, 0x6c, 0x9, 0xe, 0x2, 0x80000000, 0x80000002, 0xffffffff, 0xfffffffc, 0x4, 0x4, 0x9, 0x9, 0x3ff, 0x4, 0x100, 0x2, 0xd0be, 0x5, 0x36508, 0xffffff1d, 0xfffffff9, 0x400, 0xfffffffe, 0x9, 0x2, 0x6, 0x401, 0x80, 0x1, 0x2, 0x7, 0x1e, 0xf, 0x8, 0xfff, 0x1, 0x8, 0x6, 0x18, 0x8001, 0x3, 0x9, 0x1ff, 0x77, 0x100, 0xfffffffe, 0xc, 0x10000, 0x35, 0x3, 0x8, 0x7fffffff, 0xffff8000, 0x7, 0x568, 0x5b2c958b, 0x1, 0x1, 0x7, 0x3, 0x80000001, 0x9, 0x2, 0x1, 0xff, 0x4, 0x4, 0x7d2e, 0x8000, 0xb086, 0xa1d, 0x8000, 0xffffff20, 0x8, 0x2f, 0x622f, 0x4, 0x2, 0xff, 0x1, 0xda61, 0x6, 0x5, 0x10, 0x7, 0x27, 0x6, 0x1, 0x1, 0x10a, 0xfffeffff, 0xd, 0x0, 0x0, 0x80000000, 0x461, 0x80000001, 0x7, 0x0, 0x3, 0x0, 0x7fffffff, 0xb, 0x0, 0x4, 0x4, 0x8, 0x3, 0xff, 0x7, 0xffff, 0x4, 0x4, 0x8000, 0x8, 0xb2, 0x8000, 0x8, 0x4, 0x3ff, 0x53079775, 0x1, 0x8, 0x6, 0x7000, 0x3ff, 0x2, 0x7, 0x4, 0x4, 0xe74, 0x9, 0x8, 0x4, 0x4, 0x10, 0x2, 0x1, 0x101, 0x6, 0x3, 0x7, 0x0, 0x0, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x6, 0x200, 0x24000, 0x10000, 0xa7, 0x8, 0x54, 0x3]}]}, @TCA_CGROUP_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xefc, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0xeec, 0x1, [@m_xt={0xee8, 0x4, 0x0, 0x0, {{0x7}, {0xec0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xeb9, 0x6, {0x6, 'mangle\x00', 0x7, 0x80, "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"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1750}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m5.008397105s ago: executing program 32 (id=788): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@deltfilter={0x1750, 0x2d, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x5, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x814, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x2, 0x3, 0x7fffffff, 0x84, 0xffffff7f, 0x80000000, 0x7fff, 0x4, 0x80, 0x9, 0x3, 0x3, 0x4, 0x8001, 0x4, 0x6, 0x9, 0x4, 0x3ff, 0x7, 0x18000000, 0x9, 0x0, 0x4, 0xe2, 0x1, 0xfffffffc, 0x1, 0x883, 0x5, 0x4, 0xa, 0xfffffffe, 0x60, 0x4, 0x10000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, 0x401, 0x5, 0x0, 0x5, 0x81, 0x6b, 0x9, 0x626a29e7, 0x8, 0x6, 0x9, 0x0, 0x5, 0x9, 0x1, 0x6, 0x0, 0x2, 0x19, 0x140, 0x4000000, 0x5, 0xa6e, 0x100, 0x5, 0x10, 0x1ff, 0x5, 0xffffffff, 0xfffffffd, 0x3, 0xf2a, 0xfffffff8, 0x4, 0x31, 0x7ff, 0xe49c, 0xa74, 0x3, 0x5, 0x401, 0x47, 0x3, 0xc, 0x48, 0x20004, 0x2, 0x193, 0xf, 0x5, 0x9f, 0x8001, 0x1a0c, 0x8, 0x3, 0xe7b, 0x7, 0xf, 0xde, 0x7, 0x7, 0x8, 0x3, 0x88, 0xf2, 0x800, 0x40, 0xd56, 0x0, 0x4, 0x5, 0x7fffffff, 0x5, 0x8, 0x3, 0x3, 0x20000, 0x6, 0x2dfe, 0x2, 0x7, 0x5, 0x6, 0xfffffffe, 0xc, 0x10001, 0x80000000, 0x0, 0x74, 0xd51, 0x81, 0x0, 0x10, 0x200, 0x7e, 0xe, 0x200004, 0x3, 0x7083, 0x9, 0x3, 0x6, 0x5, 0x6, 0x1000, 0x8, 0x7ff, 0x1175, 0x6, 0xa, 0x1, 0xc, 0x4, 0xfffffff9, 0xffff, 0x1000, 0xffffffff, 0x5, 0xfffffff7, 0x1, 0x3, 0x3, 0x28, 0x0, 0x200, 0x57c7, 0x8, 0x10000000, 0x6, 0x9, 0x8, 0x1, 0x9, 0xfff, 0x3, 0x8001, 0x0, 0x7, 0xa5, 0x3, 0x4, 0x22, 0x800, 0x4, 0xfff, 0xfffffff8, 0x9, 0x3, 0x7, 0x3, 0x0, 0xa, 0xfffffffe, 0x7, 0x8, 0x9, 0x7f, 0x539, 0x10001, 0x8, 0x10e1, 0x8, 0x3, 0x0, 0x200, 0x0, 0x6, 0x4, 0x6, 0x6, 0x25, 0x1, 0x5, 0x10000, 0x7f, 0xfffffffc, 0xfffffffd, 0x400, 0x3ff, 0x0, 0x80000000, 0xffff, 0x66e, 0x2, 0x8f, 0x6, 0xfffeffff, 0x9, 0x6, 0x8, 0x6, 0x7, 0x2, 0x4, 0x73, 0x45, 0x7, 0x6, 0x200, 0x6, 0x0, 0x7ff, 0x40, 0x3, 0x5, 0x1, 0x7, 0x7, 0x0, 0x8, 0x6, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x0, 0x7f, 0x2, 0x8, 0x6, 0x3, 0x80, 0x9, 0x1000, 0x8, 0x401, 0x1, 0x2, 0x2, 0x1, 0x3, 0x6, 0x2, 0x6, 0x3, 0x2, 0x9, 0x9, 0x2991, 0x0, 0xd2, 0x0, 0x7, 0x5, 0xc07, 0x4, 0x9, 0x8, 0x4000000, 0x4, 0x9, 0x7, 0x3, 0x5, 0x9, 0xac, 0x0, 0x8, 0x7646, 0x40, 0x4, 0x0, 0x2, 0x4, 0x1ff, 0x7, 0x7, 0x40, 0xb0, 0x7f, 0xae7, 0x1, 0x9, 0x5, 0x3, 0x6, 0xffff, 0x3, 0x2, 0x9, 0x6bdfbae7, 0x7, 0x1, 0x2, 0x9, 0x8, 0x1, 0x6bd1, 0x100, 0x7, 0x80000001, 0x800, 0x9, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x9, 0x9, 0x6698211, 0xfffffffa, 0x0, 0x5, 0x2, 0x8, 0x3, 0x81, 0x1, 0x9, 0x1000, 0x8, 0x6c, 0x9, 0xe, 0x2, 0x80000000, 0x80000002, 0xffffffff, 0xfffffffc, 0x4, 0x4, 0x9, 0x9, 0x3ff, 0x4, 0x100, 0x2, 0xd0be, 0x5, 0x36508, 0xffffff1d, 0xfffffff9, 0x400, 0xfffffffe, 0x9, 0x2, 0x6, 0x401, 0x80, 0x1, 0x2, 0x7, 0x1e, 0xf, 0x8, 0xfff, 0x1, 0x8, 0x6, 0x18, 0x8001, 0x3, 0x9, 0x1ff, 0x77, 0x100, 0xfffffffe, 0xc, 0x10000, 0x35, 0x3, 0x8, 0x7fffffff, 0xffff8000, 0x7, 0x568, 0x5b2c958b, 0x1, 0x1, 0x7, 0x3, 0x80000001, 0x9, 0x2, 0x1, 0xff, 0x4, 0x4, 0x7d2e, 0x8000, 0xb086, 0xa1d, 0x8000, 0xffffff20, 0x8, 0x2f, 0x622f, 0x4, 0x2, 0xff, 0x1, 0xda61, 0x6, 0x5, 0x10, 0x7, 0x27, 0x6, 0x1, 0x1, 0x10a, 0xfffeffff, 0xd, 0x0, 0x0, 0x80000000, 0x461, 0x80000001, 0x7, 0x0, 0x3, 0x0, 0x7fffffff, 0xb, 0x0, 0x4, 0x4, 0x8, 0x3, 0xff, 0x7, 0xffff, 0x4, 0x4, 0x8000, 0x8, 0xb2, 0x8000, 0x8, 0x4, 0x3ff, 0x53079775, 0x1, 0x8, 0x6, 0x7000, 0x3ff, 0x2, 0x7, 0x4, 0x4, 0xe74, 0x9, 0x8, 0x4, 0x4, 0x10, 0x2, 0x1, 0x101, 0x6, 0x3, 0x7, 0x0, 0x0, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x6, 0x200, 0x24000, 0x10000, 0xa7, 0x8, 0x54, 0x3]}]}, @TCA_CGROUP_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xefc, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0xeec, 0x1, [@m_xt={0xee8, 0x4, 0x0, 0x0, {{0x7}, {0xec0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xeb9, 0x6, {0x6, 'mangle\x00', 0x7, 0x80, "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"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1750}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m5.837280616s ago: executing program 3 (id=1351): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000a40)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @multicast2}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x0, 0xfbfffffffffffffa}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r1, 0x0, 0x14, 0xfffffffffffffff8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b8000000000000}) 3m4.787281206s ago: executing program 3 (id=1355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000002540)={'ipvlan0\x00', 0xaad}) sendmsg$kcm(r2, &(0x7f0000002500)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x3}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="858f9f907c66cf7cb8198cb170fdbfe6e64c73ed26ced81cc3b8fbe12fad15e475f69ae5243dcf905b8371cb61f27173a0", 0x31}, {&(0x7f0000001140)="b62f8c5cfbdf2f2ed1618f9056d6", 0xe}, {&(0x7f0000001180)="62a01d4aa59dc696a6e2d4c9bf431416adbaf1955f7cd59a91f70f4a20440b23da6a414edb952943c395411509c0c3de2f148ac8eee077cc92dcddd9cb6f89ad334c197b44c27659ca57d8722fa825a7778a89f70d57800f3a610d13e958bbb1d891d1edb204f25a01417a10054e4eadc20579d3e3be2725d17a31d2443acc21db8efac079db71ce6de690340a125ad95786e46f2e23cf724e5fb5d1c869ae4d2af44321de987ac3379469d21dc1a71209aa837e5bb28399a81dd5c5940b0edc36c5e3ad021c667f3f8d2658b8f8", 0xce}, {&(0x7f0000001280)="a9306608eb131e16c93843d7632c89d26ce1df1f4140efb2729c629a15a85d83d18747bca405db41c83cb8cd026148ea57", 0x31}, {&(0x7f00000012c0)="3d74eddec55354df94ed7f8c06724a9b86aba57412968706df43274095d05178d6b7554d6720d10448b306fff825faf342391e5f8f3445c67b4723b50bb793c49f33a9cc779dc63e1f57ff20d4d670d00aeff8e8b3151e5fa0a182a64ab31c408eb2b98aa9d7afdd91", 0x69}, {&(0x7f0000001340)="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", 0x1000}], 0x7, &(0x7f00000023c0)=[{0x68, 0x115, 0x9, "ef17148fda21fe510d57ef428b268d84c73ddd8755501ec1a92f145ca53c4eb47bb140d2634781b85b8bd01f564783a127ff7d948fb41b4d85ba99bd2be09142d56ee4dcceb3d34bb2e72c041605dbccf71fb0a159d9c1"}, {0x20, 0x10a, 0x8, "4bc939779ce1fbf04721cec9ca94"}, {0x68, 0x115, 0x2, "e3c38ff594047302b14b5bbba002fd383f11dd2ee25ae3a89251f5a2d1d171f4d7cbe3828db386d5955368275b707b59296d358c915df47711b99dabaab74d756b4da346a73174b734985fc298d4b78b3e"}, {0x30, 0x10a, 0xfffffff7, "2f4fbfc55e8d45cbb5348a0bc7461c847274e66200fdb31e73017c590f"}], 0x120}, 0x8000) getsockname$l2tp6(r1, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r3, 0x800455c9, 0x2) 3m4.411155236s ago: executing program 3 (id=1358): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket$kcm(0x10, 0x3, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r4}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x7f, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m3.430975356s ago: executing program 3 (id=1360): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="f22e8ca61e6f45ada3cb132eeeae600a9d1a92c2921fed32f3518bced5e8275e76c2683c3eb0678bf2a610c388c1c83b15c7ab12abea7a15e384521f380b1956a1907aa22d53200684f4f23a546c59442d22fb4f3a288c5a492eeb39eee6328fbd8a5cf91a3e667bad320dd9ef84ebdbf8e54b622ca2c56ed875363303aaaddbc78e841ed4f6d06be478983aab4e91843276b52acb255cd791bfedc5349c65b786a51e9adec8f126e2320031dcff6f766e0463bb5a3b7c", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5e6a6}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x103880) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_io_uring_setup(0x1229, &(0x7f0000000480)={0x0, 0x3ad4, 0x248a, 0x3, 0x231, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000240)) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.4117699s ago: executing program 3 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB="300595f9", @ANYRES16=r1, @ANYBLOB="0b0125bd7000ffdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001fff87006c325f64726f707300000000000001006e657464657673696d000000000002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000000001007063690000000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000eeff01006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x130}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) 2m57.659205031s ago: executing program 3 (id=1378): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f608000000011800"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001018b75000905839d"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) sched_setaffinity(0x0, 0x0, 0x0) gettid() r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) accept4$phonet_pipe(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) open$dir(0x0, 0x80000, 0xb8) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x732f, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x387}, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x6a, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 9.349987731s ago: executing program 5 (id=1881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$yama_ptrace_scope(r2, &(0x7f0000000040)='3\x00', 0x4c) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x10, 0x0) 8.921608945s ago: executing program 6 (id=1882): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fdatasync(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000e1ffffff00000c001680080001ffffffff801ef430ec"], 0x2c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000380)=""/39, 0x27, 0x0, &(0x7f00000003c0)=""/60, 0x3c}}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x1000, &(0x7f0000000b80)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xa, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r5, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r6], 0x0, 0x10, 0x3, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ce7f893c3aaaab43d1051dfd75f69518"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x44804) read$msr(r2, &(0x7f0000000680), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x0, "bb695dec"}, @local=@item_4={0x3, 0x2, 0x0, "91d71d5e"}]}}, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {0x1, 0x1}, @result}], 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000424"], 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000640)={0x3ff, 0x3, 0x401}) 8.723108995s ago: executing program 5 (id=1884): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x420}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c8f00c00000001000405000002000f000700060007000300050000070000040500010600260209006400000002000000010000000200daff7aa101ff110000000800"], 0x11) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0x64a) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000340)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001740)=[{&(0x7f0000001800)="c0b3f641", 0x4}, {0x0}], 0x2, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000001c0)) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r6, 0x40107446, 0x20000000) ftruncate(r4, 0xffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0xf}]}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) fcntl$addseals(r4, 0x409, 0x7) r7 = socket(0x23, 0x5, 0x0) listen(r7, 0x0) listen(r7, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000440)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x8, @rand_addr=0x64010101}, 0x10) 8.327631436s ago: executing program 5 (id=1886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="180000090000000029000000390000006c00020100000000"], 0x18}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kyber_adjust\x00', r2}, 0x18) r3 = io_uring_setup(0x7f9, &(0x7f0000000440)={0x0, 0x8b1, 0x2, 0xfffffff7, 0x200000d4}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xc0, &(0x7f0000001f80)=ANY=[@ANYBLOB="12010002000000ff6b1d01014000010203010902ae00030103c0360904000000010100000a240103000802010205240402c40904010000010200000904010101010200000e24020104020008be6b1898dccf10240201050207098ba5a7031e2c5d5c0f240202c076810008b34f424bcb4809050109400000b20707250100a24e0000040200000102000009040201010102000007240108800500072401a80e04000f240202020003000fb5c2bcc85a13090582092000040b0607250101070500"], &(0x7f0000002100)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x18, 0xfd, 0x8, 0xff, 0xf1}, 0x5, &(0x7f0000002040)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x4001}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000000000000000000000000000000008bfbaafbabf0a7c7fedd34cd98ba368050000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x48770e62, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000100000850000007b00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x1d7f, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0xd, 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x800, 0x200) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x17, 0x20000038, r4) r10 = eventfd(0x0) fcntl$addseals(r10, 0x409, 0x1) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000326bd7000fddbdf250f0000000c0006000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x80000) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="040025bd7000fcdbdf250300000014000600626f6e6430000000000000000014000008000400e00000021400060074756e6c3000"/62], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4800) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) 7.765854969s ago: executing program 4 (id=1890): epoll_create1(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000080)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_cmd={0x3d, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x7}}) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f1998", 0x3}, {&(0x7f00000001c0)='d', 0x3000}], 0x2) 7.631962751s ago: executing program 4 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x7, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) 7.339138394s ago: executing program 2 (id=1892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x207, 0x20000, 0x0, 0x9, "ff0000000000000000000000000000000000ec"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000004c0)={0x0, 0xffc, 0x0, 0xffff, 0xa, "00756aae8bd13759"}) r5 = dup3(r4, r1, 0x0) read$rfkill(r5, &(0x7f00000002c0), 0x8) read$watch_queue(r5, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x7, 0x0, 0x1a) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000403605a8a440000102030109021b00010100000009040000020701010009040002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000580)=[{r8, 0x1400}], 0x1, 0x3) sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) 6.691294114s ago: executing program 4 (id=1893): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xff}, 0xe) shutdown(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x2008da, &(0x7f0000000080)={0x0, 0xc28b, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000300)=""/197) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000002c0)={0x6, 'team_slave_1\x00', {0xffffffff}, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(r2, 0x0, 0x35) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000200)={&(0x7f0000000440)="501a6a", 0x3}}, 0x20004000) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000001840)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000240)=0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 5.620682844s ago: executing program 4 (id=1894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_labels_list(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='@.-&#^\')%+ )'], 0x15) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 5.334300156s ago: executing program 6 (id=1895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap$xdp(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x3000002, 0x4010, 0xffffffffffffffff, 0x180000000) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0xda, 0x7f, 0x20, 0xf11, 0x1032, 0x3284, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0xaf, 0xab, 0x3d, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}]}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000001c40)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x77, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0xa4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x34, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 4.919858667s ago: executing program 5 (id=1896): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x220043a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000200)={0x0, 0x5, 0x4, '\x00', &(0x7f00000001c0)=0x6}) pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x3, "966bf86e55dc09fb075766ae4e141b9af17e64d27ece88ce487453450ff07b3f"}) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) r4 = open(&(0x7f0000000180)='./file0\x00', 0xc162, 0x195) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) poll(&(0x7f0000000140)=[{r5, 0x100}, {r4, 0x1000}, {r5, 0x40d}, {r0, 0xc012}, {r3, 0xd203}], 0x5, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0xffffffff, 0x0, 0x8b, "00000000000000000000ffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) read$FUSE(r8, &(0x7f0000003f80)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r10 = creat(&(0x7f0000000300)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x20800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8000}}, [0x7, 0x9, 0xfff, 0x1, 0x5, 0x80000001, 0x58000000000000, 0x2, 0x0, 0x7, 0xfffffffffffffffe, 0x3, 0x40, 0x1, 0x5]}, &(0x7f00000002c0)=0x100) 4.600301441s ago: executing program 4 (id=1899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x5c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd1) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x8, "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", 0x5, 0x8, 0x81, 0xc9, 0x5, 0x1, 0x8, 0x1}, r1}}, 0x128) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000006d458b8421ae38000000000000000000005532ae490cc166036e412a8428cb39686fd0bc760070feabff522e8e0b7f55bb4f936d12ff4048008f3e0a7840715c2d0072dba4a1a07dc150b74a73cfd1412cbcc77783d798af31c2374c6681c46d2e1a23fdeef9d429095d01721514af50a48a64c9a6d98bf0702129b097b73d71f269"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="06000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd2b, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x60084) 4.51889943s ago: executing program 4 (id=1900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x3, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffc, 0x0, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100)}], 0x492492492492642, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12) syz_usb_control_io$printer(r5, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0x10, 0x86, {0x86, 0x0, "39733b3881bf85b410d70da8fd30242efbc39d33e8b173e538946c563da9da4698d058008189b71c327eaa75b90839c0fdf9231c5d550bfa347cab1b6485ac60c2b677fc5abb9104fb45748fc088014f152d8d441cac6a8d9b6168c43faf87dc1c31478b994ab9e5c08c1c67c787a701feee0b29fba78f245ba05aa14fddfb0d880a61bd"}}, &(0x7f00000007c0)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "9fddcb97420693ed47891158a2b33ea3861dd952d9866db08009d132856f3233b918c33a85a1c3a338e365d89f418e9700fc6b7a3f51fa1e8b673567396d76f192e2f88d53e0219e03b2d7f3745bf5701fd3c30fddd6068f8c27090b278e5ee4cba646998d065a88fd0a76971b738ffcc3be7e3139ab7bef0b"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000880)={0x40, 0xe, 0x4b, "acf395a5e04ed645025b6eea2c8d05944d5b5fc0a45e5c39a6eefa460b9ba38d06ad41b0e9f3e79819c9ae9d8c72da72fa9565e2d56cff3f5dfb609846e06703f1c8b344307b156b62d027"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000980)=ANY=[@ANYBLOB="20000d0000000017640edfe10efb9ba7ddff61"], &(0x7f00000009c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0xb}}) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="44010000", @ANYRES16=r13, @ANYBLOB="010000000000000008000100000004000480080002000100000008000100000000000400088018010c8014010b"], 0x144}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) 3.758624752s ago: executing program 2 (id=1901): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f00000002c0)=""/179, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) (fail_nth: 2) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 2.73102073s ago: executing program 2 (id=1903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x7, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/201, 0x26, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) 1.652720078s ago: executing program 6 (id=1905): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x549, 0x4800003a, r0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000500), 0x4) 1.651151766s ago: executing program 1 (id=1906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rt_sigaction(0x800001, &(0x7f0000000000)={&(0x7f0000000480)="f346d37ff2f2438395ff1f965a00c4c1185c840561ee0000c4e17a5bbc60aff00000c4816a512425160000006fea6dc463f962d60066660f38090dc65f0000a89e670f2a6cda00c412c1fd1129", 0x0, 0x0}, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8c000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, 0x0, 0x4000080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) socket(0x28, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r6], 0x30}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4140aecd, &(0x7f00000003c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r7}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="25d8234c91114907d1dd000081003a007c000101ac1e0002001f79e0000001ac141427ac1e00016401010100000000ffffffffac1414bb070400e0000000fffc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5044000090780000"], 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x6, 0x20040) semtimedop(0x0, 0x0, 0x0, 0x0) userfaultfd(0x80801) 1.552418599s ago: executing program 2 (id=1907): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41ff8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x922, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x6) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$dsp(r4, &(0x7f0000000080)=""/237, 0xed) 1.411111364s ago: executing program 6 (id=1908): r0 = socket$kcm(0x21, 0x2, 0x2) getpgrp(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040880) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000500000000001001000001"], 0x18}, 0x0) 1.384739936s ago: executing program 1 (id=1909): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x3}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x7}, @restrict={0x2, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x30]}}, &(0x7f0000000100)=""/167, 0x53, 0xa7, 0x0, 0x8, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, r1, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x501000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f00000002c0)="cf17e8a774d069cfd24bd30b83120a2dea133f04f79b9d7edb0e2aa2448ee7b37269132aa3efc6433e1eed30a19d6fb2e95c9cb8f96875903862f0eafb0cb41f04da8d63961daaf6ece3c81acb919c2f51a0380a643bb6fde9f177607e73f11dd24bece4ad229a447d1391e1f75bad3ec416c4947103d4fe4631a1bc0949cdc107c24766c511b78c9211016e286a0d006bb2c2a3238c7c1baaa0e8e52b1fe6711973829f50de8a7d000079dc16886e661287e2ba", 0xb4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0xc008, r2}, 0x18) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000400)=0x800000) connect$unix(r3, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, &(0x7f00000004c0)="fc14ba2231489d83443fcb8c83af363b9daf425f76c0ff5c09d3d2bc15fabc53b78ea736dc77baa5a1e6c765559f8d449d4d5f1826790b284a5a9cefb03f681d71aff4414e8955d829c0db67bb73a9bcb4423306f010416f8ecc5c2ab9e779ba86fd56bbad5e8c38498883080d08142dd90b3a2fa4425fef7797f2501e94719728bdc110dbfa04fa27a3911ecf209492e62a3a137bd01b17c72aa97f86590789c94e7f702595717279b732944297daf3f8ae3c3ef4e3fe114c87a9c5bdde60c8906e13b8f35261e3d3bc9a973ede023fa4fe496c05729cd7c6ded9585e443fde47cee1d27f151234fefe6c849315ad902f659f13b651fd390a0b2d79bb05", &(0x7f00000005c0)=""/57}, 0x20) write$6lowpan_control(r3, &(0x7f0000000640)='connect aa:aa:aa:aa:aa:10 0', 0x1b) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, [@multicast2, @loopback, @private=0xa010100]}, 0x1c) connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e21, 0x9, @local, 0x3}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x1402, 0x29fb3878383effe, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x20044800) socket$netlink(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={@empty, 0x0, 0x0, 0x60, 0x0, [{@empty}, {@private}, {@remote}, {}, {@empty}, {}]}}) syz_open_dev$dri(&(0x7f0000000900), 0x4, 0x43c301) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000940)={0x1, 0x3}, 0x4) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000980)=0x9) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000b00)={0x3, @win={{0x9, 0x61, 0x0, 0x400}, 0x5, 0x8, &(0x7f0000000a40)={{0x3, 0xc, 0x3, 0x7}, &(0x7f0000000a00)={{0x7, 0x6, 0x4, 0x6b7}, &(0x7f00000009c0)={{0xa7c, 0x3, 0xc, 0xf}}}}, 0x0, &(0x7f0000000a80)="8ea7c671bab6a683e84ac8d87cd21baf6b97a6bbfcb390ca09638e902b17f6cf37c1c3e64a25fc0ee80b77eaec7a1f8ecde05e84445d418c09b7ce807a32ae44b299796983e111078220a795568496148009f057d827344157c6507496", 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000c80)={'gretap0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x8000, 0x8001, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x68, 0x0, 0x28, 0x4, 0x0, @remote, @local, {[@end, @cipso={0x86, 0x44, 0x1, [{0x0, 0xa, "f9edc056206eea08"}, {0x6, 0xc, "1d2dd0c10aa0de258bdb"}, {0x0, 0x9, "9d66b1d6111197"}, {0x7, 0x5, "4292f3"}, {0x0, 0xa, "bb1eb46ee980d5ba"}, {0x5, 0x10, "09cb862665e0f540986ed70bb0c6"}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xe, 0x0, 0x6, 0x3, 0x5000, r0, 0x10001, '\x00', r5, r1, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000d40)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/power/sync_on_suspend', 0x0, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x7, 0x0, r6, 0x2, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0x9, &(0x7f0000000e80)={0x101, 0x10000}, &(0x7f0000000ec0)) 1.31446337s ago: executing program 5 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x5c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd1) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x8, "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", 0x5, 0x8, 0x81, 0xc9, 0x5, 0x1, 0x8, 0x1}, r1}}, 0x128) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000006d458b8421ae38000000000000000000005532ae490cc166036e412a8428cb39686fd0bc760070feabff522e8e0b7f55bb4f936d12ff4048008f3e0a7840715c2d0072dba4a1a07dc150b74a73cfd1412cbcc77783d798af31c2374c6681c46d2e1a23fdeef9d429095d01721514af50a48a64c9a6d98bf0702129b097b73d71f269"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="06000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd2b, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x60084) 1.139191156s ago: executing program 2 (id=1911): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x12, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000440), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 441.001237ms ago: executing program 1 (id=1912): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, 0x0, 0xb05}, 0x14}}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) 416.975472ms ago: executing program 6 (id=1913): syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(&(0x7f00000002c0), &(0x7f0000000300), 0xbc5f, &(0x7f000045e000/0x1000)=nil, 0x3) sendmmsg$inet(r1, &(0x7f0000003140)=[{{&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000440)="f16d", 0x2}], 0x1}}], 0x1, 0xc810) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYBLOB=',wfdno=', @ANYBLOB="402c59f7033d2707670fc49e1105d2bf56dd15237aa7b13cea6a58c9eab1050ff341a7bb0430b422aa195d792c95030258ac2448c29319614d5b42baaae235f48289861c05d9584e1888bb4bd39df4034f932ccf553efe1fecf81432592018aa5f46652c3d09d609d93581f2a15c8d72747843dcaf7e6ccee1b53634c9039b74b5227db57a19fa1c620c61fa02f0fe0c7d8fad576c593c3473d60f44395554a2958a1de3a2bb1dbd0fa860c776882b211245bc74b3e49bff70a2c5ad8bc08c96d5e41eb9b09e8f06e90668b97e5fccab67e768650de1e6dc65d5a8e63d0dc4c8165db414f5ea1ae4c7589da79eb9c320d8d0deec0697b090"]) 366.049581ms ago: executing program 5 (id=1914): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x40000000, 0x80000000, 0xf, 0x41018, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x2, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000340)=0x400e628, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000002180)=0x5, 0x4) sendto$inet(r2, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x800, 0x0, 0x5}, 0x10) recvmsg(r2, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000004c0)=""/4096) 273.191748ms ago: executing program 6 (id=1915): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x41, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc8, [{{0x9, 0x4, 0x0, 0xae, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb51, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x9}}}}}]}}]}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xae, 0x48, 0x81, 0x20, 0x4f1, 0x1001, 0x1963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x0, 0x49, 0xab, 0x6b}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x2cb, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x28, 0x60, 0x2f, 0xff, 0x7d1, 0x3c13, 0x4ec9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b9, 0x2, 0x5, 0x8, 0x60, 0xa5, [{{0x9, 0x4, 0x7, 0x80, 0x5, 0x9c, 0x66, 0xde, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x9, 0x3, [@generic={0x43, 0x7, "ffc499aa12d3225d3aef9a2f4cee104874c707ec722738d69e2767e9d4730dee91d8e67458f434722af988c42e4f2a753c5721efce239e8d27800985761c5e7b97"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x2, 0x0, 0x36}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x1, 0x8, 0x8, [@generic={0xfd, 0x23, "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"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x1, 0x8, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x81, 0x0, 0x5, [@generic={0x29, 0xd, "742cdf3a9ba555d26ccb6ef1e58d2e66d1d23050e3f6ddf50b02224d4c466ee713646f3610a1f6"}]}}]}}, {{0x9, 0x4, 0x7b, 0x4, 0x6, 0x2, 0x6, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x6643, 0x1, 0x1, {0x22, 0x876}}, @hid_hid={0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x50a}}], [{{0x9, 0x5, 0x6, 0xf, 0x3ff, 0x8, 0x2, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x210, 0xc, 0x7, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0xb, 0x1a, [@generic={0xb2, 0xe, "33a3369a1f63e33eb15860dccf49283789f35c1ed16dc86fcc9b7bf119d13fd66bb4145c91a046a4ed7440e082e65912f1333480d018a71b820ae21c37ce93802b875a306c6df908f13872e9e6b95e686ebb2a2f49c366ae97b3b6ffa1221bca36e0cc627abca707d0ebc1bfe3678f7c9344ae20ce0179802d2e837ce2401cd64662616ff080095806138424dba187ffc03951fa4d4706ef09afe2bb35e317477986d6b5e26122c9e1c2fd6e1ff3d842"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0xb}]}}, {{0x9, 0x5, 0x5, 0x0, 0x48, 0xd, 0xfb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x10, 0xc1bbb69b72d98f59, 0xf, 0x7, 0x4}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x40, 0x7, 0x3e}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x5, 0x10, 0xff, 0x7}, 0x42, &(0x7f00000000c0)={0x5, 0xf, 0x42, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0xdc, 0xff, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8, 0x68, 0x57}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0x5, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "95546899ecf384e4de1b33ed727fb8ab"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x6, 0x5}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_pts(r0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000280)={@local, @local, @val={@val, {0x8100, 0x0, 0x0, 0xb00}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x0, 0x20000000000000a1}, @dstopts]}}}}}}}, 0x0) 245.765214ms ago: executing program 1 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 142.997426ms ago: executing program 1 (id=1917): socket$nl_xfrm(0x10, 0x3, 0x6) setregid(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x2, {0xfffffffffffffff8}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xa8e}}, &(0x7f0000000340)={0x18, 0x0, 0x4, {0x3ff}}, 0x0, &(0x7f00000003c0)={0x60, 0x0, 0xb8a8, {{0x3, 0x2, 0x7, 0x0, 0x7fff, 0x7, 0x85c, 0x4}}}, &(0x7f0000000700)={0x18, 0x0, 0xd5, {0x86f7}}, &(0x7f000001f040)=ANY=[@ANYBLOB="004d583b4212000000f5ffffff01000015000000002e00"], &(0x7f0000000780)={0x20, 0x0, 0x2}, &(0x7f00000007c0)={0x78, 0x0, 0x9, {0x3, 0x8, 0x0, {0x6, 0x8d, 0x21cc, 0xf, 0x7, 0xa86632c, 0x1, 0x3, 0x0, 0x2000, 0x101, 0x0, 0x0, 0x8}}}, &(0x7f0000000880)={0x90, 0xfffffffffffffffe, 0x8, {0x2, 0x1, 0x8, 0x40, 0x7, 0xe255, {0x0, 0x7fffffffffffffff, 0x0, 0x523, 0x381, 0x8000000000000001, 0x6, 0xba6, 0x3a1, 0x6000, 0x7, 0x0, 0x0, 0x1, 0x40}}}, &(0x7f0000000d40)=ANY=[], &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080000000900000000000000010000000000000009000000000000000700000009000000757365725f69640001000000000000000000000000000000a002b40f0000000008000000000000000d0000000100000004000000000000000600000000000000f1ffffffffffffff01000000000000007600000000000000090000000000000001000000408401000300000000600000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0x0, &(0x7f0000000c80)={0x20, 0x0, 0x3, {0x4, 0x0, 0x9, 0x240}}, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x200}}}}) stat(0x0, &(0x7f000001ef40)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f000001efc0)) syz_open_dev$vim2m(0x0, 0x7, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f000001eec0)=[{0x6, 0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000040)}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/144, 0x90}], &(0x7f0000000180)=[0xfffffffffffffffd, 0x0]}, {0x4, 0x1, 0x0, &(0x7f0000002680)=[{&(0x7f000001b700)=""/4096, 0x1000}, {&(0x7f0000002440)=""/234, 0xea}, {&(0x7f0000002540)=""/45, 0x2d}, {&(0x7f0000002580)=""/253, 0xfd}], &(0x7f00000026c0)=[0x6, 0x200]}, {0xa, 0x0, 0x0, &(0x7f000001eb80)=[{&(0x7f000001c700)=""/19, 0x13}, {&(0x7f000001c740)=""/2, 0x2}, {&(0x7f000001c780)=""/17, 0x11}, {&(0x7f000001c7c0)=""/13, 0xd}, {&(0x7f000001c800)=""/246, 0xf6}, {&(0x7f000001c900)=""/4096, 0x1000}, {&(0x7f000001d900)=""/209, 0xd1}, {&(0x7f000001da00)=""/4096, 0x1000}, {&(0x7f000001ea00)=""/225, 0xe1}, {&(0x7f000001eb00)=""/90, 0x5a}], &(0x7f000001ec40)=[0x9]}, {0x4, 0x0, 0x0, &(0x7f000001ee40)=[{&(0x7f000001ec80)=""/114, 0x72}, {&(0x7f000001ed00)=""/167, 0xa7}, {&(0x7f000001edc0)=""/6, 0x6}, {&(0x7f000001ee00)=""/8, 0x8}], &(0x7f000001ee80)=[0x8, 0x3c, 0x7fffffffffffffff, 0xe7]}], 0x4) syz_open_dev$evdev(0x0, 0x20000000000, 0x822b01) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ustat(0x11, &(0x7f0000000600)) 0s ago: executing program 1 (id=1918): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x3) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2b8000000000000}) kernel console output (not intermixed with test programs): [ 493.918639][T10671] RDX: 0000000000000001 RSI: 0000000000000103 RDI: 0000000000000004 [ 493.926604][T10671] RBP: 00007f47807090a0 R08: 0000000000000004 R09: 0000000000000000 [ 493.934570][T10671] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 493.942534][T10671] R13: 0000000000000000 R14: 00007f477fb45fa0 R15: 00007ffcb71a92f8 [ 493.950507][T10671] [ 493.953601][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.953653][ T1540] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 494.146083][ T1540] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 16 [ 494.161586][ T1540] usb 5-1: config 1 interface 0 has no altsetting 0 [ 494.200823][ T1540] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.213512][ T1540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.216831][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 494.223068][T10675] IPv6: syztnl0: Disabled Multicast RS [ 494.238911][ T1540] usb 5-1: Product: syz [ 494.243429][T10679] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1267'. [ 494.560525][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 495.017177][ T1540] usb 5-1: Manufacturer: syz [ 495.021944][ T1540] usb 5-1: SerialNumber: syz [ 495.023955][T10684] lo speed is unknown, defaulting to 1000 [ 495.044022][T10664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.064060][T10684] lo speed is unknown, defaulting to 1000 [ 495.087874][T10684] lo speed is unknown, defaulting to 1000 [ 496.564990][ T1540] usb 5-1: USB disconnect, device number 14 [ 496.630092][T10684] infiniband syz0: set active [ 496.637502][ T5865] lo speed is unknown, defaulting to 1000 [ 496.650098][T10684] infiniband syz0: added lo [ 496.658190][T10684] syz0: rxe_create_cq: returned err = -12 [ 496.670018][T10684] infiniband syz0: Couldn't create ib_mad CQ [ 496.678606][T10684] infiniband syz0: Couldn't open port 1 [ 497.236364][T10684] RDS/IB: syz0: added [ 497.240987][T10684] smc: adding ib device syz0 with port count 1 [ 497.247537][T10684] smc: ib device syz0 port 1 has pnetid [ 497.260003][T10684] lo speed is unknown, defaulting to 1000 [ 497.295771][ T5865] lo speed is unknown, defaulting to 1000 [ 498.269592][T10684] lo speed is unknown, defaulting to 1000 [ 499.535075][T10684] lo speed is unknown, defaulting to 1000 [ 499.699011][T10684] lo speed is unknown, defaulting to 1000 [ 500.021472][T10684] lo speed is unknown, defaulting to 1000 [ 500.355617][T10638] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 500.904170][T10736] FAULT_INJECTION: forcing a failure. [ 500.904170][T10736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.917544][T10736] CPU: 0 UID: 0 PID: 10736 Comm: syz.4.1287 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 500.928335][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 500.938409][T10736] Call Trace: [ 500.941701][T10736] [ 500.944642][T10736] dump_stack_lvl+0x241/0x360 [ 500.949344][T10736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.954565][T10736] ? __pfx__printk+0x10/0x10 [ 500.959178][T10736] ? __pfx_lock_release+0x10/0x10 [ 500.964225][T10736] ? kasan_save_track+0x51/0x80 [ 500.969095][T10736] ? kasan_save_free_info+0x40/0x50 [ 500.974311][T10736] ? kfree+0x196/0x430 [ 500.978397][T10736] ? security_file_ioctl+0xc6/0x2a0 [ 500.983621][T10736] should_fail_ex+0x3b0/0x4e0 [ 500.988321][T10736] _copy_from_user+0x2f/0xc0 [ 500.992921][T10736] vmci_host_unlocked_ioctl+0xb3e/0x3560 [ 500.998558][T10736] ? mark_lock+0x9a/0x360 [ 501.002889][T10736] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 501.008962][T10736] ? tomoyo_path_number_perm+0x206/0x860 [ 501.014592][T10736] ? __pfx_lock_release+0x10/0x10 [ 501.019612][T10736] ? tomoyo_path_number_perm+0x679/0x860 [ 501.025242][T10736] ? tomoyo_path_number_perm+0x679/0x860 [ 501.030874][T10736] ? tomoyo_path_number_perm+0x6f9/0x860 [ 501.036502][T10736] ? __lock_acquire+0x1397/0x2100 [ 501.041528][T10736] ? tomoyo_path_number_perm+0x206/0x860 [ 501.047167][T10736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 501.053158][T10736] ? __asan_memset+0x23/0x50 [ 501.057748][T10736] ? smack_file_ioctl+0x29e/0x3a0 [ 501.062770][T10736] ? __pfx_smack_file_ioctl+0x10/0x10 [ 501.068139][T10736] ? __fget_files+0x2a/0x410 [ 501.072731][T10736] ? __fget_files+0x2a/0x410 [ 501.077320][T10736] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 501.083384][T10736] __se_sys_ioctl+0xf5/0x170 [ 501.087977][T10736] do_syscall_64+0xf3/0x230 [ 501.092484][T10736] ? clear_bhb_loop+0x35/0x90 [ 501.097161][T10736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.103056][T10736] RIP: 0033:0x7fd4f8b7fed9 [ 501.107471][T10736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.127075][T10736] RSP: 002b:00007fd4f99a5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.135487][T10736] RAX: ffffffffffffffda RBX: 00007fd4f8d45fa0 RCX: 00007fd4f8b7fed9 [ 501.143455][T10736] RDX: 00000000200000c0 RSI: 00000000000007a8 RDI: 0000000000000005 [ 501.151422][T10736] RBP: 00007fd4f99a50a0 R08: 0000000000000000 R09: 0000000000000000 [ 501.159388][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.167355][T10736] R13: 0000000000000000 R14: 00007fd4f8d45fa0 R15: 00007fff5cd4de18 [ 501.175333][T10736] [ 501.339263][T10638] usb 2-1: Using ep0 maxpacket: 32 [ 501.761124][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.767603][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.802349][T10638] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 501.821597][T10638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.972921][T10638] usb 2-1: config 0 descriptor?? [ 502.113722][T10638] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 502.627644][T10638] gspca_nw80x: reg_w err -110 [ 502.627706][T10638] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 503.381054][ T5865] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 505.096164][ T5865] usb 3-1: device descriptor read/64, error -71 [ 505.168046][T10757] cgroup: fork rejected by pids controller in /syz2 [ 505.288960][ T8] usb 2-1: USB disconnect, device number 19 [ 506.133793][ T5865] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 506.698456][T10817] FAULT_INJECTION: forcing a failure. [ 506.698456][T10817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.726123][T10817] CPU: 1 UID: 0 PID: 10817 Comm: syz.3.1304 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 506.736927][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 506.747001][T10817] Call Trace: [ 506.750299][T10817] [ 506.753251][T10817] dump_stack_lvl+0x241/0x360 [ 506.757961][T10817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.763185][T10817] ? __pfx__printk+0x10/0x10 [ 506.767803][T10817] ? __pfx_lock_release+0x10/0x10 [ 506.772856][T10817] should_fail_ex+0x3b0/0x4e0 [ 506.777560][T10817] _copy_from_user+0x2f/0xc0 [ 506.782184][T10817] copy_msghdr_from_user+0xae/0x680 [ 506.787409][T10817] ? read_tsc+0x9/0x20 [ 506.791510][T10817] ? timespec64_add_safe+0x1be/0x220 [ 506.796813][T10817] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 506.802624][T10817] ? __fget_files+0x2a/0x410 [ 506.807216][T10817] ? __fget_files+0x2a/0x410 [ 506.811818][T10817] do_recvmmsg+0x3bd/0xab0 [ 506.816241][T10817] ? __pfx_do_recvmmsg+0x10/0x10 [ 506.821190][T10817] ? __pfx___might_resched+0x10/0x10 [ 506.826476][T10817] ? __might_fault+0xaa/0x120 [ 506.831151][T10817] ? __pfx_lock_release+0x10/0x10 [ 506.836172][T10817] ? vfs_write+0x730/0xd30 [ 506.840596][T10817] ? get_timespec64+0x19c/0x280 [ 506.845454][T10817] __x64_sys_recvmmsg+0x1b8/0x250 [ 506.850476][T10817] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 506.856019][T10817] ? do_syscall_64+0x100/0x230 [ 506.860783][T10817] ? do_syscall_64+0xb6/0x230 [ 506.865460][T10817] do_syscall_64+0xf3/0x230 [ 506.869960][T10817] ? clear_bhb_loop+0x35/0x90 [ 506.874631][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.880527][T10817] RIP: 0033:0x7f9e5377fed9 [ 506.884937][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.904535][T10817] RSP: 002b:00007f9e515f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 506.912946][T10817] RAX: ffffffffffffffda RBX: 00007f9e53945fa0 RCX: 00007f9e5377fed9 [ 506.920911][T10817] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 506.928875][T10817] RBP: 00007f9e515f60a0 R08: 0000000020003700 R09: 0000000000000000 [ 506.936839][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.944801][T10817] R13: 0000000000000000 R14: 00007f9e53945fa0 R15: 00007ffd862e10a8 [ 506.952777][T10817] [ 507.723266][T10822] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1306'. [ 507.723294][T10822] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 507.753902][T10638] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 507.934527][T10638] usb 4-1: Using ep0 maxpacket: 8 [ 507.973558][T10638] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 507.992943][T10638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.051846][T10638] usb 4-1: Product: syz [ 508.056141][T10638] usb 4-1: Manufacturer: syz [ 508.060754][T10638] usb 4-1: SerialNumber: syz [ 508.100966][T10638] usb 4-1: config 0 descriptor?? [ 508.339120][T10638] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 511.170972][T10853] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.1314'. [ 511.255753][T10638] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 513.496358][ T8] usb 4-1: USB disconnect, device number 15 [ 514.405401][T10883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.458397][T10876] netlink: 'syz.4.1316': attribute type 8 has an invalid length. [ 514.767869][T10885] dlm: no locking on control device [ 515.733704][T10895] 9pnet_fd: Insufficient options for proto=fd [ 515.801182][T10902] overlayfs: failed to resolve 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/': -2 [ 515.873730][ T5817] Bluetooth: hci1: sending frame failed (-49) [ 515.883182][ T5827] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 516.020380][ T29] audit: type=1326 audit(1733599526.415:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.061654][ T29] audit: type=1326 audit(1733599526.415:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.096064][ T29] audit: type=1326 audit(1733599526.415:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.160920][ T29] audit: type=1326 audit(1733599526.415:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.209631][ T29] audit: type=1326 audit(1733599526.415:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.497738][T10916] FAULT_INJECTION: forcing a failure. [ 516.497738][T10916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.530083][T10916] CPU: 1 UID: 0 PID: 10916 Comm: syz.1.1337 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 516.540883][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 516.550936][T10916] Call Trace: [ 516.554211][T10916] [ 516.557138][T10916] dump_stack_lvl+0x241/0x360 [ 516.561824][T10916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.567021][T10916] ? __pfx__printk+0x10/0x10 [ 516.571615][T10916] ? __pfx_lock_release+0x10/0x10 [ 516.576637][T10916] ? __lock_acquire+0x1397/0x2100 [ 516.581663][T10916] should_fail_ex+0x3b0/0x4e0 [ 516.586345][T10916] _copy_from_user+0x2f/0xc0 [ 516.590938][T10916] kstrtouint_from_user+0xc6/0x190 [ 516.596048][T10916] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 516.601769][T10916] ? __pfx_lock_acquire+0x10/0x10 [ 516.606800][T10916] proc_fail_nth_write+0xaa/0x2d0 [ 516.611827][T10916] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 516.617725][T10916] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.623360][T10916] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.628988][T10916] vfs_write+0x2a3/0xd30 [ 516.633238][T10916] ? __pfx_vfs_write+0x10/0x10 [ 516.638001][T10916] ? __fget_files+0x2a/0x410 [ 516.642593][T10916] ? __fget_files+0x395/0x410 [ 516.647281][T10916] ? __fget_files+0x2a/0x410 [ 516.651889][T10916] ksys_write+0x18f/0x2b0 [ 516.656222][T10916] ? __pfx_ksys_write+0x10/0x10 [ 516.661080][T10916] ? do_syscall_64+0x100/0x230 [ 516.665848][T10916] ? do_syscall_64+0xb6/0x230 [ 516.670525][T10916] do_syscall_64+0xf3/0x230 [ 516.675028][T10916] ? clear_bhb_loop+0x35/0x90 [ 516.679700][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.685594][T10916] RIP: 0033:0x7fd2f477e98f [ 516.690004][T10916] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 516.709606][T10916] RSP: 002b:00007fd2f5655050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 516.718022][T10916] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd2f477e98f [ 516.725988][T10916] RDX: 0000000000000001 RSI: 00007fd2f56550b0 RDI: 0000000000000008 [ 516.733957][T10916] RBP: 00007fd2f56550a0 R08: 0000000000000000 R09: 0000000000000000 [ 516.741930][T10916] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 516.749896][T10916] R13: 0000000000000000 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 516.757877][T10916] [ 516.761878][ T29] audit: type=1326 audit(1733599526.415:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.807761][ T29] audit: type=1326 audit(1733599526.415:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.871704][ T29] audit: type=1326 audit(1733599526.415:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 516.938603][ T29] audit: type=1326 audit(1733599526.445:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 516.939555][T10925] fuse: Bad value for 'fd' [ 516.966788][ T29] audit: type=1326 audit(1733599526.445:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477f97fed9 code=0x7ffc0000 [ 518.967583][ T5865] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 519.232179][ T5865] usb 3-1: device descriptor read/64, error -71 [ 519.644252][ T5865] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 519.932625][ T5865] usb 3-1: device descriptor read/64, error -71 [ 520.704024][T10957] 9pnet_fd: Insufficient options for proto=fd [ 520.715268][ T5865] usb usb3-port1: attempt power cycle [ 520.872005][T10964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.001993][ T5865] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 521.801379][ T5865] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 521.837587][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 521.844649][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.855983][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.962407][ T5865] usb 3-1: New USB device found, idVendor=046d, idProduct=c707, bcdDevice= 0.00 [ 521.971488][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.082532][ T5865] usb 3-1: config 0 descriptor?? [ 522.461847][T10034] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 523.291835][T10966] bridge0: port 4(erspan0) entered blocking state [ 523.298414][T10966] bridge0: port 4(erspan0) entered disabled state [ 523.305158][T10966] erspan0: entered allmulticast mode [ 523.311904][T10966] erspan0: entered promiscuous mode [ 523.317967][T10966] bridge0: port 4(erspan0) entered blocking state [ 523.324539][T10966] bridge0: port 4(erspan0) entered forwarding state [ 523.345415][T10034] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 523.560750][T10034] usb 5-1: can't read configurations, error -22 [ 523.724772][T10993] syz.1.1359 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 523.731623][T10034] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 524.733286][T10638] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 524.755880][T10034] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 524.799915][T10034] usb 5-1: can't read configurations, error -22 [ 524.832207][T10034] usb usb5-port1: attempt power cycle [ 524.853520][ T5865] usbhid 3-1:0.0: can't add hid device: -71 [ 524.859529][ T5865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 524.889517][ T5865] usb 3-1: USB disconnect, device number 19 [ 524.898806][T10638] usb 4-1: Using ep0 maxpacket: 8 [ 524.912666][T10638] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 524.941671][T10638] usb 4-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 524.970122][T10638] usb 4-1: config 0 has no interface number 0 [ 524.992162][T10638] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.016958][T10638] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.042113][T10638] usb 4-1: config 0 interface 52 has no altsetting 0 [ 525.048862][T10638] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 525.067756][T10638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.191706][T10638] usb 4-1: config 0 descriptor?? [ 525.201806][T10034] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 525.698427][T10034] usb 5-1: device descriptor read/8, error -71 [ 526.341919][T10992] macvlan1: entered allmulticast mode [ 526.359361][T10992] veth1_vlan: entered allmulticast mode [ 526.423257][ T8] usb 4-1: USB disconnect, device number 16 [ 526.437821][T10992] team0: Port device macvlan1 added [ 526.451110][T11012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.644486][ T5865] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 526.823758][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 527.171608][ T5865] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 527.180690][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.192246][ T5865] usb 2-1: Product: syz [ 527.196405][ T5865] usb 2-1: Manufacturer: syz [ 527.208899][ T5865] usb 2-1: SerialNumber: syz [ 527.233196][ T5865] usb 2-1: config 0 descriptor?? [ 527.245085][ T5865] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 528.488178][ T5820] bond0: (slave syz_tun): Releasing backup interface [ 529.088692][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.181222][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.201705][T10638] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 529.210451][T11049] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 529.335152][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.387206][T10638] usb 5-1: Using ep0 maxpacket: 16 [ 529.395282][T10034] usb 2-1: USB disconnect, device number 20 [ 529.955249][T10638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.975104][T10638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.976362][T10962] buffer_io_error: 7 callbacks suppressed [ 529.976378][T10962] Buffer I/O error on dev loop7, logical block 4095, async page read [ 530.026060][T10638] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.059182][T10638] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 530.110628][T10638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.137593][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.174113][T10638] usb 5-1: config 0 descriptor?? [ 530.313711][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.314120][T11064] FAULT_INJECTION: forcing a failure. [ 530.314120][T11064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.341941][T11064] CPU: 1 UID: 0 PID: 11064 Comm: syz.2.1385 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 530.352737][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.362810][T11064] Call Trace: [ 530.366101][T11064] [ 530.369042][T11064] dump_stack_lvl+0x241/0x360 [ 530.373751][T11064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.378977][T11064] ? __pfx__printk+0x10/0x10 [ 530.383595][T11064] ? __pfx_lock_release+0x10/0x10 [ 530.388651][T11064] should_fail_ex+0x3b0/0x4e0 [ 530.393352][T11064] _copy_from_user+0x2f/0xc0 [ 530.397967][T11064] get_timespec64+0x97/0x280 [ 530.402584][T11064] ? __pfx_get_timespec64+0x10/0x10 [ 530.407807][T11064] ? __fget_files+0x395/0x410 [ 530.412502][T11064] ? __fget_files+0x2a/0x410 [ 530.417114][T11064] __se_sys_io_uring_enter+0x825/0x33b0 [ 530.422693][T11064] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 530.428611][T11064] ? ksys_write+0x22a/0x2b0 [ 530.433139][T11064] ? __pfx_lock_release+0x10/0x10 [ 530.438198][T11064] ? vfs_write+0x730/0xd30 [ 530.442640][T11064] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 530.448637][T11064] ? __mutex_unlock_slowpath+0x21e/0x790 [ 530.454289][T11064] ? __pfx_vfs_write+0x10/0x10 [ 530.459076][T11064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 530.465074][T11064] ? __fget_files+0x2a/0x410 [ 530.469685][T11064] ? __fget_files+0x2a/0x410 [ 530.474296][T11064] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 530.480294][T11064] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 530.486639][T11064] ? do_syscall_64+0x100/0x230 [ 530.491424][T11064] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 530.496991][T11064] do_syscall_64+0xf3/0x230 [ 530.501512][T11064] ? clear_bhb_loop+0x35/0x90 [ 530.506206][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.512120][T11064] RIP: 0033:0x7ff776b7fed9 [ 530.516554][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.536178][T11064] RSP: 002b:00007ff777929058 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 530.544610][T11064] RAX: ffffffffffffffda RBX: 00007ff776d46080 RCX: 00007ff776b7fed9 [ 530.552601][T11064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 530.560584][T11064] RBP: 00007ff7779290a0 R08: 0000000020000000 R09: 0000000000000018 [ 530.568568][T11064] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 530.576552][T11064] R13: 0000000000000001 R14: 00007ff776d46080 R15: 00007ffff4027608 [ 530.584559][T11064] [ 530.606553][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.618400][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.676360][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.743303][ T5817] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 530.750711][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.900000][ T35] bridge_slave_1: left allmulticast mode [ 530.906440][ T35] bridge_slave_1: left promiscuous mode [ 530.933705][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.944813][ T35] bridge_slave_0: left allmulticast mode [ 530.950574][ T35] bridge_slave_0: left promiscuous mode [ 530.956592][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.244406][T10638] usbhid 5-1:0.0: can't add hid device: -71 [ 531.255918][T10638] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 531.805137][T10638] usb 5-1: USB disconnect, device number 19 [ 531.865387][T11078] overlayfs: failed to resolve './file1': -2 [ 533.032245][ T5817] Bluetooth: hci1: command tx timeout [ 535.073301][ T5817] Bluetooth: hci1: command tx timeout [ 536.451220][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.705461][ T35] bond_slave_0: left promiscuous mode [ 536.726190][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.804431][ T35] bond_slave_1: left promiscuous mode [ 536.921077][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 537.040122][ T35] batadv0: left promiscuous mode [ 537.181918][ T5817] Bluetooth: hci1: command tx timeout [ 537.225381][ T35] bond0 (unregistering): Released all slaves [ 537.447889][T11118] overlayfs: conflicting options: userxattr,verity=on [ 537.467182][T11060] lo speed is unknown, defaulting to 1000 [ 539.186535][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1406'. [ 539.235889][ T5817] Bluetooth: hci1: command tx timeout [ 539.243193][ T5897] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 539.265939][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'. [ 539.402303][ T5897] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 539.410885][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.419968][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.430938][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.492729][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.508121][ T35] hsr_slave_0: left promiscuous mode [ 539.512796][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.531789][ T1540] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 539.539455][ T35] hsr_slave_1: left promiscuous mode [ 539.549890][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.557760][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.571173][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.578907][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.591610][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.602784][ T35] veth1_macvtap: left promiscuous mode [ 539.607131][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.608772][ T35] veth0_macvtap: left promiscuous mode [ 539.624870][ T35] veth1_vlan: left allmulticast mode [ 539.630305][ T35] veth1_vlan: left promiscuous mode [ 539.633090][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.636318][ T35] veth0_vlan: left promiscuous mode [ 539.658677][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.669504][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.679003][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.690418][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.698211][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.707504][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.713811][ T1540] usb 6-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 539.718610][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.736931][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.746978][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.747438][ T1540] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.763035][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.775209][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.782314][ T1540] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 539.784666][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.797180][ T1540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.814209][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.824587][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.833941][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.840544][ T1540] usb 6-1: SerialNumber: syz [ 539.845562][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.860468][ T5897] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 539.878100][ T5897] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 539.888343][ T5897] usb 2-1: Product: syz [ 539.897254][ T5897] usb 2-1: Manufacturer: syz [ 539.902352][ T5897] usb 2-1: SerialNumber: syz [ 539.909018][ T5897] usb 2-1: config 0 descriptor?? [ 539.944635][ T5897] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 540.025221][ T35] team0 (unregistering): Port device macvlan1 removed [ 540.087890][ T1540] usb 6-1: 0:2 : does not exist [ 540.108400][ T1540] usb 6-1: unit 255 not found! [ 540.146713][ T1540] usb 6-1: USB disconnect, device number 4 [ 540.148961][ T8] usb 2-1: USB disconnect, device number 21 [ 540.165939][ T8] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 540.612748][T10962] udevd[10962]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.812447][T11169] program syz.2.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.256178][ T35] team0 (unregistering): Port device team_slave_1 removed [ 541.462672][ T35] team0 (unregistering): Port device team_slave_0 removed [ 542.270257][T11135] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1403'. [ 542.284015][T11135] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1403'. [ 542.291605][ T1540] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 542.352418][T11060] chnl_net:caif_netlink_parms(): no params data found [ 542.484496][ T1540] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 542.493940][ T1540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.532188][ T1540] usb 6-1: Product: syz [ 542.540162][ T1540] usb 6-1: Manufacturer: syz [ 542.550289][ T1540] usb 6-1: SerialNumber: syz [ 542.852050][T11188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.863420][T11188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 543.621216][ T1540] usb 6-1: config 0 descriptor?? [ 543.636414][ T1540] ch341 6-1:0.0: ch341-uart converter detected [ 544.394952][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.494585][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.529440][T11060] bridge_slave_0: entered allmulticast mode [ 544.593795][T11060] bridge_slave_0: entered promiscuous mode [ 544.615849][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.662235][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.669530][T11060] bridge_slave_1: entered allmulticast mode [ 544.677211][T11060] bridge_slave_1: entered promiscuous mode [ 544.743570][T11060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.763273][T11060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.845682][T11060] team0: Port device team_slave_0 added [ 544.863628][T11060] team0: Port device team_slave_1 added [ 544.916906][T11060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.955171][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.006806][T11060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.020193][T11060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.027257][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.070034][T11060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.163209][T11205] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 545.797003][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 545.931629][ T1540] ch341-uart ttyUSB0: failed to read break control: -71 [ 545.939100][ T1540] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 545.962430][ T1540] usb 6-1: USB disconnect, device number 5 [ 545.971369][ T1540] ch341 6-1:0.0: device disconnected [ 545.995794][ T35] IPVS: stop unused estimator thread 0... [ 546.263548][T11060] hsr_slave_0: entered promiscuous mode [ 547.256433][T11060] hsr_slave_1: entered promiscuous mode [ 547.265440][T11220] FAULT_INJECTION: forcing a failure. [ 547.265440][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 547.280662][T11220] CPU: 1 UID: 0 PID: 11220 Comm: syz.1.1424 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 547.291453][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.301521][T11220] Call Trace: [ 547.304815][T11220] [ 547.307756][T11220] dump_stack_lvl+0x241/0x360 [ 547.312462][T11220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.317677][T11220] ? __pfx__printk+0x10/0x10 [ 547.322284][T11220] ? __kmalloc_cache_noprof+0x48/0x390 [ 547.327763][T11220] ? __pfx___might_resched+0x10/0x10 [ 547.333084][T11220] should_fail_ex+0x3b0/0x4e0 [ 547.337786][T11220] should_failslab+0xac/0x100 [ 547.342489][T11220] __kmalloc_cache_noprof+0x70/0x390 [ 547.347781][T11220] ? fuse_file_alloc+0x56/0x230 [ 547.352640][T11220] fuse_file_alloc+0x56/0x230 [ 547.357317][T11220] fuse_file_open+0x156/0xb00 [ 547.362003][T11220] ? __pfx_fuse_file_open+0x10/0x10 [ 547.367194][T11220] ? smk_tskacc+0x300/0x370 [ 547.371703][T11220] ? smack_file_open+0x233/0x2b0 [ 547.376635][T11220] ? __pfx_smack_file_open+0x10/0x10 [ 547.381923][T11220] fuse_open+0x33b/0x740 [ 547.386165][T11220] ? __pfx_fuse_open+0x10/0x10 [ 547.390926][T11220] do_dentry_open+0xbe1/0x1b70 [ 547.395695][T11220] vfs_open+0x3e/0x330 [ 547.399761][T11220] path_openat+0x2c84/0x3590 [ 547.404374][T11220] ? __pfx_path_openat+0x10/0x10 [ 547.409325][T11220] do_filp_open+0x27f/0x4e0 [ 547.413827][T11220] ? __pfx_do_filp_open+0x10/0x10 [ 547.418847][T11220] ? do_raw_spin_lock+0x14f/0x370 [ 547.423895][T11220] do_sys_openat2+0x13e/0x1d0 [ 547.428625][T11220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 547.434631][T11220] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.439830][T11220] ? __fget_files+0x2a/0x410 [ 547.444423][T11220] __x64_sys_creat+0x123/0x170 [ 547.449184][T11220] ? __pfx___x64_sys_creat+0x10/0x10 [ 547.454471][T11220] ? do_syscall_64+0x100/0x230 [ 547.459236][T11220] ? do_syscall_64+0xb6/0x230 [ 547.463913][T11220] do_syscall_64+0xf3/0x230 [ 547.468415][T11220] ? clear_bhb_loop+0x35/0x90 [ 547.473127][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.479026][T11220] RIP: 0033:0x7fd2f477fed9 [ 547.483445][T11220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.503050][T11220] RSP: 002b:00007fd2f5655058 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 547.511469][T11220] RAX: ffffffffffffffda RBX: 00007fd2f4945fa0 RCX: 00007fd2f477fed9 [ 547.519440][T11220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 547.527405][T11220] RBP: 00007fd2f56550a0 R08: 0000000000000000 R09: 0000000000000000 [ 547.535374][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.543345][T11220] R13: 0000000000000000 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 547.551322][T11220] [ 547.672620][T11226] netlink: 'syz.5.1425': attribute type 10 has an invalid length. [ 547.700292][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1425'. [ 547.804089][T11226] team0: Port device geneve0 added [ 548.108644][T11060] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 548.124386][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 548.136517][T11060] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 548.247141][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 549.207685][T11060] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 549.251158][T11060] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 549.508559][T11060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.376973][T11252] lo speed is unknown, defaulting to 1000 [ 550.400052][T10960] Buffer I/O error on dev loop7, logical block 4095, async page read [ 550.451085][T11060] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.477136][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.484233][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.546998][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.554157][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.591605][ T5897] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 550.761699][T10638] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 550.805404][T11060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.876980][T11265] FAULT_INJECTION: forcing a failure. [ 550.876980][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 550.889706][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.5.1435 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 550.900483][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 550.910548][T11265] Call Trace: [ 550.913834][T11265] [ 550.916772][T11265] dump_stack_lvl+0x241/0x360 [ 550.921475][T11265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.926685][T11265] ? __pfx__printk+0x10/0x10 [ 550.931297][T11265] ? __pfx___might_resched+0x10/0x10 [ 550.936602][T11265] should_fail_ex+0x3b0/0x4e0 [ 550.941294][T11265] should_failslab+0xac/0x100 [ 550.945986][T11265] __kmalloc_noprof+0xdd/0x4c0 [ 550.950767][T11265] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 550.956506][T11265] tomoyo_realpath_from_path+0xcf/0x5e0 [ 550.962077][T11265] tomoyo_path_number_perm+0x236/0x860 [ 550.967554][T11265] ? __lock_acquire+0x1397/0x2100 [ 550.972590][T11265] ? tomoyo_path_number_perm+0x206/0x860 [ 550.978233][T11265] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 550.984263][T11265] ? __fget_files+0x2a/0x410 [ 550.988869][T11265] ? __fget_files+0x2a/0x410 [ 550.993482][T11265] security_file_ioctl+0xc6/0x2a0 [ 550.998519][T11265] __se_sys_ioctl+0x46/0x170 [ 551.003127][T11265] do_syscall_64+0xf3/0x230 [ 551.007645][T11265] ? clear_bhb_loop+0x35/0x90 [ 551.012341][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.018252][T11265] RIP: 0033:0x7f477f97fed9 [ 551.022675][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.042291][T11265] RSP: 002b:00007f47806c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.050726][T11265] RAX: ffffffffffffffda RBX: 00007f477fb46160 RCX: 00007f477f97fed9 [ 551.058703][T11265] RDX: 0000000020000140 RSI: 000000004020565a RDI: 0000000000000007 [ 551.066683][T11265] RBP: 00007f47806c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 551.074667][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.082646][T11265] R13: 0000000000000000 R14: 00007f477fb46160 R15: 00007ffcb71a92f8 [ 551.090645][T11265] [ 551.095796][T11265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.329069][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 551.341235][ T5897] usb 5-1: config 0 has no interfaces? [ 551.346990][T10638] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 551.355764][T10638] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.374906][T10638] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 551.384868][T10638] usb 3-1: config 1 has no interface number 1 [ 551.391039][T10638] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 551.404029][T10638] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 38, changing to 7 [ 551.415698][ T5897] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 551.425188][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.436169][T11060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.438805][ T5897] usb 5-1: Product: syz [ 551.447363][ T5897] usb 5-1: Manufacturer: syz [ 551.452046][ T5897] usb 5-1: SerialNumber: syz [ 551.461154][ T5897] usb 5-1: config 0 descriptor?? [ 551.491868][T10638] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.500938][T10638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.555086][T10638] usb 3-1: Product: syz [ 551.559340][T10638] usb 3-1: Manufacturer: syz [ 551.603132][T10638] usb 3-1: SerialNumber: syz [ 552.189025][ T46] usb 5-1: USB disconnect, device number 20 [ 552.202154][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 552.202169][ T29] audit: type=1326 audit(1733599562.595:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11258 comm="syz.2.1432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff776b7fed9 code=0x0 [ 552.307865][T11289] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1440'. [ 552.323960][T11289] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 552.356994][T10638] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 552.474594][T10638] usb 3-1: USB disconnect, device number 20 [ 552.611643][T11300] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1442'. [ 552.766418][T10960] udevd[10960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.947544][T11060] veth0_vlan: entered promiscuous mode [ 554.201313][T11060] veth1_vlan: entered promiscuous mode [ 554.307291][T11060] veth0_macvtap: entered promiscuous mode [ 554.330274][T11060] veth1_macvtap: entered promiscuous mode [ 554.360100][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.390909][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.410915][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.431617][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.441439][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.481624][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.501565][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.519553][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.543419][T11060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.561025][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.587805][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.598690][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.610531][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.623382][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.640293][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.665777][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.677581][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.694528][T11060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.894588][T11060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.915074][T11060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.532457][T11060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.571780][T11060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.605325][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1451'. [ 556.868271][T11340] overlayfs: failed to resolve './file0': -2 [ 556.995080][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.047112][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.326792][T11344] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1453'. [ 557.338750][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.364824][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.162387][T11356] lo: entered allmulticast mode [ 559.385626][T11356] tunl0: entered allmulticast mode [ 559.445076][T11356] gre0: entered allmulticast mode [ 559.957519][T11356] gretap0: entered allmulticast mode [ 560.022236][T11356] erspan0: entered allmulticast mode [ 560.036079][T11356] ip_vti0: entered allmulticast mode [ 560.044622][T11356] ip6_vti0: entered allmulticast mode [ 560.085440][T11356] sit0: entered allmulticast mode [ 560.110333][T11356] ip6tnl0: entered allmulticast mode [ 560.176879][T11356] ip6gre0: entered allmulticast mode [ 560.196880][T11356] syz_tun: entered allmulticast mode [ 560.204318][T11356] ip6gretap0: entered allmulticast mode [ 560.224287][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.231723][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.254408][T11356] bridge0: entered allmulticast mode [ 560.275853][T11356] vcan0: entered allmulticast mode [ 560.296151][T11356] bond0: entered allmulticast mode [ 560.301722][T11356] bond_slave_0: entered allmulticast mode [ 560.307726][T11356] bond_slave_1: entered allmulticast mode [ 560.325019][T11356] team0: entered allmulticast mode [ 560.331081][T11356] team_slave_0: entered allmulticast mode [ 560.341182][T11356] team_slave_1: entered allmulticast mode [ 560.348779][T11356] geneve0: entered allmulticast mode [ 560.360019][T11356] dummy0: entered allmulticast mode [ 560.376430][T11356] nlmon0: entered allmulticast mode [ 560.385544][T11356] caif0: entered allmulticast mode [ 560.391196][T11356] batadv0: entered allmulticast mode [ 560.405234][T11356] vxcan0: entered allmulticast mode [ 560.411411][T11356] vxcan1: entered allmulticast mode [ 560.424164][T11356] veth0: entered allmulticast mode [ 560.436681][T11356] veth1: entered allmulticast mode [ 560.447555][T11356] wg0: entered allmulticast mode [ 560.458205][T11356] wg1: entered allmulticast mode [ 560.468783][T11356] wg2: entered allmulticast mode [ 560.501702][T11356] veth0_to_bridge: entered allmulticast mode [ 560.510916][T11356] veth1_to_bridge: entered allmulticast mode [ 560.523519][T11356] veth0_to_bond: entered allmulticast mode [ 560.532246][T11356] veth1_to_bond: entered allmulticast mode [ 560.540995][T11356] veth0_to_team: entered allmulticast mode [ 560.549958][T11356] veth1_to_team: entered allmulticast mode [ 560.803780][T11356] veth0_to_batadv: entered allmulticast mode [ 560.811394][T11356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.819532][T11356] batadv_slave_0: entered allmulticast mode [ 560.828412][T11356] veth1_to_batadv: entered allmulticast mode [ 560.835954][T11356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.845935][T11356] batadv_slave_1: entered allmulticast mode [ 560.854964][T11356] xfrm0: entered allmulticast mode [ 560.862075][T11356] veth0_to_hsr: entered allmulticast mode [ 560.869796][T11356] hsr_slave_0: entered allmulticast mode [ 560.876810][T11356] veth1_to_hsr: entered allmulticast mode [ 560.885368][T11356] hsr_slave_1: entered allmulticast mode [ 560.896443][T11356] hsr0: entered allmulticast mode [ 560.906936][T11356] veth1_virt_wifi: entered allmulticast mode [ 560.917278][T11356] veth0_virt_wifi: entered allmulticast mode [ 560.925821][T11356] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 560.934446][T11356] veth1_vlan: entered allmulticast mode [ 560.947453][T11356] veth0_vlan: entered allmulticast mode [ 560.968763][T11356] vlan0: entered allmulticast mode [ 560.974712][T11356] vlan1: entered allmulticast mode [ 560.987777][T11356] macvlan0: entered allmulticast mode [ 561.008608][T11356] macvlan1: entered allmulticast mode [ 561.028894][T11356] ipvlan0: entered allmulticast mode [ 561.038990][T11356] ipvlan1: entered allmulticast mode [ 561.050433][T11356] veth1_macvtap: entered allmulticast mode [ 561.064475][T11356] veth0_macvtap: entered allmulticast mode [ 561.072188][T11356] macvtap0: entered allmulticast mode [ 561.093422][T11356] macsec0: entered allmulticast mode [ 561.108785][T11356] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.122235][T11356] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.139680][T11356] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.160370][T11356] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.180953][T11356] geneve1: entered allmulticast mode [ 561.201197][T11356] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 561.221149][T11356] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 561.237230][T11356] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 561.246037][T11356] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 561.256953][T11356] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 561.278200][T11356] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 561.293292][T11356] syztnl0: entered allmulticast mode [ 563.288901][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.295244][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.413143][T11427] FAULT_INJECTION: forcing a failure. [ 564.413143][T11427] name failslab, interval 1, probability 0, space 0, times 0 [ 564.426518][T11427] CPU: 0 UID: 0 PID: 11427 Comm: syz.1.1476 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 564.437304][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.447371][T11427] Call Trace: [ 564.450660][T11427] [ 564.453612][T11427] dump_stack_lvl+0x241/0x360 [ 564.458323][T11427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.463539][T11427] ? __pfx__printk+0x10/0x10 [ 564.468153][T11427] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 564.473558][T11427] ? __pfx___might_resched+0x10/0x10 [ 564.478834][T11427] should_fail_ex+0x3b0/0x4e0 [ 564.483521][T11427] should_failslab+0xac/0x100 [ 564.488219][T11427] __kmalloc_node_noprof+0xe1/0x4d0 [ 564.493435][T11427] ? crypto_create_tfm_node+0x88/0x3d0 [ 564.498920][T11427] crypto_create_tfm_node+0x88/0x3d0 [ 564.504236][T11427] crypto_alloc_tfm_node+0x161/0x360 [ 564.509520][T11427] __keyctl_dh_compute+0x5c6/0xf50 [ 564.514629][T11427] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 564.520253][T11427] ? __pfx___might_resched+0x10/0x10 [ 564.525537][T11427] ? __might_fault+0xc6/0x120 [ 564.530209][T11427] keyctl_dh_compute+0x107/0x160 [ 564.535156][T11427] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 564.540652][T11427] ? vfs_write+0x730/0xd30 [ 564.545087][T11427] __se_sys_keyctl+0x3f3/0x910 [ 564.549845][T11427] ? __mutex_unlock_slowpath+0x21e/0x790 [ 564.555469][T11427] ? __pfx___se_sys_keyctl+0x10/0x10 [ 564.560743][T11427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 564.566711][T11427] ? __fget_files+0x2a/0x410 [ 564.571290][T11427] ? __fget_files+0x2a/0x410 [ 564.575877][T11427] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 564.581860][T11427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 564.588196][T11427] ? do_syscall_64+0x100/0x230 [ 564.592952][T11427] ? __x64_sys_keyctl+0x20/0xc0 [ 564.597794][T11427] do_syscall_64+0xf3/0x230 [ 564.602294][T11427] ? clear_bhb_loop+0x35/0x90 [ 564.606956][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.612841][T11427] RIP: 0033:0x7fd2f477fed9 [ 564.617241][T11427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.636862][T11427] RSP: 002b:00007fd2f5613058 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 564.645266][T11427] RAX: ffffffffffffffda RBX: 00007fd2f4946160 RCX: 00007fd2f477fed9 [ 564.653225][T11427] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000017 [ 564.661184][T11427] RBP: 00007fd2f56130a0 R08: 00000000200000c0 R09: 0000000000000000 [ 564.669141][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.677097][T11427] R13: 0000000000000000 R14: 00007fd2f4946160 R15: 00007ffef8c4ee48 [ 564.685069][T11427] [ 564.806819][T11430] FAULT_INJECTION: forcing a failure. [ 564.806819][T11430] name failslab, interval 1, probability 0, space 0, times 0 [ 564.819641][T11430] CPU: 1 UID: 0 PID: 11430 Comm: syz.5.1477 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 564.830417][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.840486][T11430] Call Trace: [ 564.843777][T11430] [ 564.846719][T11430] dump_stack_lvl+0x241/0x360 [ 564.851414][T11430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.856628][T11430] ? __pfx__printk+0x10/0x10 [ 564.861234][T11430] ? __kmalloc_cache_noprof+0x48/0x390 [ 564.866715][T11430] ? __pfx___might_resched+0x10/0x10 [ 564.872020][T11430] should_fail_ex+0x3b0/0x4e0 [ 564.876712][T11430] should_failslab+0xac/0x100 [ 564.881399][T11430] __kmalloc_cache_noprof+0x70/0x390 [ 564.886695][T11430] ? ovl_init_fs_context+0x58/0x4f0 [ 564.891909][T11430] ovl_init_fs_context+0x58/0x4f0 [ 564.896951][T11430] alloc_fs_context+0x68a/0x800 [ 564.901821][T11430] do_new_mount+0x160/0xb40 [ 564.906343][T11430] ? __pfx_do_new_mount+0x10/0x10 [ 564.911390][T11430] __se_sys_mount+0x2d6/0x3c0 [ 564.916083][T11430] ? __pfx___se_sys_mount+0x10/0x10 [ 564.921292][T11430] ? do_syscall_64+0x100/0x230 [ 564.926074][T11430] ? __x64_sys_mount+0x20/0xc0 [ 564.930851][T11430] do_syscall_64+0xf3/0x230 [ 564.935367][T11430] ? clear_bhb_loop+0x35/0x90 [ 564.940060][T11430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.945975][T11430] RIP: 0033:0x7f477f97fed9 [ 564.950399][T11430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.970015][T11430] RSP: 002b:00007f47806c7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.978447][T11430] RAX: ffffffffffffffda RBX: 00007f477fb46160 RCX: 00007f477f97fed9 [ 564.986428][T11430] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 564.994406][T11430] RBP: 00007f47806c70a0 R08: 0000000020000900 R09: 0000000000000000 [ 565.002388][T11430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.010363][T11430] R13: 0000000000000000 R14: 00007f477fb46160 R15: 00007ffcb71a92f8 [ 565.018361][T11430] [ 565.021444][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.904433][T11518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 577.360545][T11534] mmap: syz.4.1504 (11534): VmData 37466112 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 580.402072][ T5863] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 580.575764][ T5863] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.587187][ T5863] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.611557][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 580.618208][ T5863] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00 [ 580.627337][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.642813][ T5863] usb 2-1: config 0 descriptor?? [ 582.302633][T11560] sp0: Synchronizing with TNC [ 584.911120][T11581] xt_bpf: check failed: parse error [ 585.097928][T11579] netlink: 'syz.5.1517': attribute type 4 has an invalid length. [ 586.195159][T11609] FAULT_INJECTION: forcing a failure. [ 586.195159][T11609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.301750][T11609] CPU: 1 UID: 0 PID: 11609 Comm: syz.2.1524 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 586.312571][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 586.322621][T11609] Call Trace: [ 586.325892][T11609] [ 586.328818][T11609] dump_stack_lvl+0x241/0x360 [ 586.333502][T11609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.338701][T11609] ? __pfx__printk+0x10/0x10 [ 586.343309][T11609] ? snprintf+0xda/0x120 [ 586.347554][T11609] should_fail_ex+0x3b0/0x4e0 [ 586.352232][T11609] _copy_to_user+0x31/0xb0 [ 586.356648][T11609] simple_read_from_buffer+0xca/0x150 [ 586.362018][T11609] proc_fail_nth_read+0x1e9/0x250 [ 586.367037][T11609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.372578][T11609] ? rw_verify_area+0x568/0x6f0 [ 586.377425][T11609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.382969][T11609] vfs_read+0x1fc/0xb70 [ 586.387127][T11609] ? __pfx___mutex_lock+0x10/0x10 [ 586.392148][T11609] ? __pfx_vfs_read+0x10/0x10 [ 586.396824][T11609] ? __fget_files+0x2a/0x410 [ 586.401416][T11609] ? __fget_files+0x395/0x410 [ 586.406089][T11609] ? __fget_files+0x2a/0x410 [ 586.410682][T11609] ksys_read+0x18f/0x2b0 [ 586.414925][T11609] ? __pfx_ksys_read+0x10/0x10 [ 586.419686][T11609] ? do_syscall_64+0x100/0x230 [ 586.424447][T11609] ? do_syscall_64+0xb6/0x230 [ 586.429124][T11609] do_syscall_64+0xf3/0x230 [ 586.433626][T11609] ? clear_bhb_loop+0x35/0x90 [ 586.438298][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.444193][T11609] RIP: 0033:0x7ff776b7e8ec [ 586.448604][T11609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 586.468207][T11609] RSP: 002b:00007ff777929050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.476620][T11609] RAX: ffffffffffffffda RBX: 00007ff776d46080 RCX: 00007ff776b7e8ec [ 586.484584][T11609] RDX: 000000000000000f RSI: 00007ff7779290b0 RDI: 0000000000000003 [ 586.492548][T11609] RBP: 00007ff7779290a0 R08: 0000000000000000 R09: 0000000000000000 [ 586.500512][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.508474][T11609] R13: 0000000000000001 R14: 00007ff776d46080 R15: 00007ffff4027608 [ 586.516450][T11609] [ 586.840703][ T5863] usbhid 2-1:0.0: can't add hid device: -71 [ 586.910761][ T5863] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 587.004150][T11622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.734399][ T5863] usb 2-1: USB disconnect, device number 22 [ 590.708223][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 591.528029][T11685] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1547'. [ 591.574804][T11680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.079148][T11697] FAULT_INJECTION: forcing a failure. [ 593.079148][T11697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.141656][T11697] CPU: 1 UID: 0 PID: 11697 Comm: syz.6.1551 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 593.152469][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.162543][T11697] Call Trace: [ 593.165839][T11697] [ 593.168787][T11697] dump_stack_lvl+0x241/0x360 [ 593.173496][T11697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.178721][T11697] ? __pfx__printk+0x10/0x10 [ 593.183344][T11697] ? snprintf+0xda/0x120 [ 593.187610][T11697] should_fail_ex+0x3b0/0x4e0 [ 593.192317][T11697] _copy_to_user+0x31/0xb0 [ 593.196749][T11697] simple_read_from_buffer+0xca/0x150 [ 593.202129][T11697] proc_fail_nth_read+0x1e9/0x250 [ 593.207155][T11697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.212701][T11697] ? rw_verify_area+0x55e/0x6f0 [ 593.217551][T11697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.223097][T11697] vfs_read+0x1fc/0xb70 [ 593.227257][T11697] ? __pfx___mutex_lock+0x10/0x10 [ 593.232281][T11697] ? __pfx_vfs_read+0x10/0x10 [ 593.236956][T11697] ? __fget_files+0x2a/0x410 [ 593.241552][T11697] ? __fget_files+0x395/0x410 [ 593.246231][T11697] ? __fget_files+0x2a/0x410 [ 593.250822][T11697] ksys_read+0x18f/0x2b0 [ 593.255067][T11697] ? __pfx_ksys_read+0x10/0x10 [ 593.259831][T11697] ? do_syscall_64+0x100/0x230 [ 593.264594][T11697] ? do_syscall_64+0xb6/0x230 [ 593.269272][T11697] do_syscall_64+0xf3/0x230 [ 593.273773][T11697] ? clear_bhb_loop+0x35/0x90 [ 593.278449][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.284342][T11697] RIP: 0033:0x7ff457f7e8ec [ 593.288749][T11697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 593.308356][T11697] RSP: 002b:00007ff458e66050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 593.316769][T11697] RAX: ffffffffffffffda RBX: 00007ff458145fa0 RCX: 00007ff457f7e8ec [ 593.324736][T11697] RDX: 000000000000000f RSI: 00007ff458e660b0 RDI: 0000000000000005 [ 593.332701][T11697] RBP: 00007ff458e660a0 R08: 0000000000000000 R09: 0000000000000000 [ 593.340663][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.348629][T11697] R13: 0000000000000000 R14: 00007ff458145fa0 R15: 00007ffc16a4ff18 [ 593.356604][T11697] [ 593.984758][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1554'. [ 594.004727][T11711] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1555' sets config #0 [ 594.296672][T11723] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.289222][ T29] audit: type=1326 audit(1733599605.685:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11734 comm="syz.4.1560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8b7fed9 code=0x0 [ 596.186489][T11743] FAULT_INJECTION: forcing a failure. [ 596.186489][T11743] name failslab, interval 1, probability 0, space 0, times 0 [ 596.292191][T11743] CPU: 1 UID: 0 PID: 11743 Comm: syz.1.1562 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 596.302976][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 596.313037][T11743] Call Trace: [ 596.316304][T11743] [ 596.319219][T11743] dump_stack_lvl+0x241/0x360 [ 596.323892][T11743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.329078][T11743] ? __pfx__printk+0x10/0x10 [ 596.333658][T11743] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 596.339557][T11743] ? __pfx___might_resched+0x10/0x10 [ 596.344834][T11743] should_fail_ex+0x3b0/0x4e0 [ 596.349521][T11743] should_failslab+0xac/0x100 [ 596.354187][T11743] ? __get_vm_area_node+0x132/0x2d0 [ 596.359374][T11743] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 596.365085][T11743] __get_vm_area_node+0x132/0x2d0 [ 596.370097][T11743] __vmalloc_node_range_noprof+0x344/0x1380 [ 596.375978][T11743] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 596.381524][T11743] ? mark_lock+0x9a/0x360 [ 596.385857][T11743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.392176][T11743] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 596.397706][T11743] __vmalloc_noprof+0x79/0x90 [ 596.402370][T11743] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 596.407898][T11743] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 596.413253][T11743] ? bpf_prog_alloc+0x28/0x1b0 [ 596.418005][T11743] bpf_prog_alloc+0x3a/0x1b0 [ 596.422580][T11743] bpf_prog_load+0x7f7/0x20f0 [ 596.427244][T11743] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.432337][T11743] ? __pfx___might_resched+0x10/0x10 [ 596.437614][T11743] ? __might_fault+0xc6/0x120 [ 596.442285][T11743] __sys_bpf+0x4ee/0x810 [ 596.446514][T11743] ? __pfx___sys_bpf+0x10/0x10 [ 596.451262][T11743] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 596.457229][T11743] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 596.463542][T11743] ? do_syscall_64+0x100/0x230 [ 596.468296][T11743] __x64_sys_bpf+0x7c/0x90 [ 596.472702][T11743] do_syscall_64+0xf3/0x230 [ 596.477200][T11743] ? clear_bhb_loop+0x35/0x90 [ 596.481866][T11743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.487771][T11743] RIP: 0033:0x7fd2f477fed9 [ 596.492173][T11743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.511765][T11743] RSP: 002b:00007fd2f5655058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.520169][T11743] RAX: ffffffffffffffda RBX: 00007fd2f4945fa0 RCX: 00007fd2f477fed9 [ 596.528127][T11743] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 596.536087][T11743] RBP: 00007fd2f56550a0 R08: 0000000000000000 R09: 0000000000000000 [ 596.544044][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.551999][T11743] R13: 0000000000000001 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 596.559962][T11743] [ 596.581965][T11743] syz.1.1562: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 596.598608][T11743] CPU: 0 UID: 0 PID: 11743 Comm: syz.1.1562 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 596.609393][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 596.619467][T11743] Call Trace: [ 596.622757][T11743] [ 596.625715][T11743] dump_stack_lvl+0x241/0x360 [ 596.630415][T11743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.635631][T11743] ? __pfx__printk+0x10/0x10 [ 596.640252][T11743] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 596.646693][T11743] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 596.653224][T11743] warn_alloc+0x278/0x410 [ 596.657573][T11743] ? __pfx_warn_alloc+0x10/0x10 [ 596.662424][T11743] ? __kasan_kmalloc+0x23/0xb0 [ 596.667191][T11743] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 596.673170][T11743] ? __get_vm_area_node+0x280/0x2d0 [ 596.678367][T11743] __vmalloc_node_range_noprof+0x369/0x1380 [ 596.684262][T11743] ? mark_lock+0x9a/0x360 [ 596.688608][T11743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.694938][T11743] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 596.700476][T11743] __vmalloc_noprof+0x79/0x90 [ 596.705153][T11743] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 596.710697][T11743] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 596.716062][T11743] ? bpf_prog_alloc+0x28/0x1b0 [ 596.720822][T11743] bpf_prog_alloc+0x3a/0x1b0 [ 596.725406][T11743] bpf_prog_load+0x7f7/0x20f0 [ 596.730086][T11743] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.735195][T11743] ? __pfx___might_resched+0x10/0x10 [ 596.740494][T11743] ? __might_fault+0xc6/0x120 [ 596.745175][T11743] __sys_bpf+0x4ee/0x810 [ 596.749411][T11743] ? __pfx___sys_bpf+0x10/0x10 [ 596.754181][T11743] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 596.760157][T11743] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 596.766478][T11743] ? do_syscall_64+0x100/0x230 [ 596.771246][T11743] __x64_sys_bpf+0x7c/0x90 [ 596.775663][T11743] do_syscall_64+0xf3/0x230 [ 596.780167][T11743] ? clear_bhb_loop+0x35/0x90 [ 596.784841][T11743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.790733][T11743] RIP: 0033:0x7fd2f477fed9 [ 596.795143][T11743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.814752][T11743] RSP: 002b:00007fd2f5655058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.823167][T11743] RAX: ffffffffffffffda RBX: 00007fd2f4945fa0 RCX: 00007fd2f477fed9 [ 596.831131][T11743] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 596.839094][T11743] RBP: 00007fd2f56550a0 R08: 0000000000000000 R09: 0000000000000000 [ 596.847062][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.855026][T11743] R13: 0000000000000001 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 596.863002][T11743] [ 596.921102][T11743] Mem-Info: [ 596.945860][T11743] active_anon:2397 inactive_anon:11506 isolated_anon:0 [ 596.945860][T11743] active_file:24783 inactive_file:34733 isolated_file:0 [ 596.945860][T11743] unevictable:768 dirty:70 writeback:0 [ 596.945860][T11743] slab_reclaimable:10935 slab_unreclaimable:102712 [ 596.945860][T11743] mapped:37516 shmem:9224 pagetables:968 [ 596.945860][T11743] sec_pagetables:0 bounce:0 [ 596.945860][T11743] kernel_misc_reclaimable:0 [ 596.945860][T11743] free:1311032 free_pcp:246 free_cma:0 [ 597.096560][T11743] Node 0 active_anon:9592kB inactive_anon:46668kB active_file:99056kB inactive_file:138932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150100kB dirty:280kB writeback:0kB shmem:35364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11088kB pagetables:3936kB sec_pagetables:0kB all_unreclaimable? no [ 597.191559][T11743] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 597.274986][T11743] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.333311][T11743] lowmem_reserve[]: 0 2465 2466 0 0 [ 597.370624][T11743] Node 0 DMA32 free:1321660kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:31492kB inactive_anon:24400kB active_file:98284kB inactive_file:138880kB unevictable:1536kB writepending:280kB present:3129332kB managed:2552836kB mlocked:0kB bounce:0kB free_pcp:2756kB local_pcp:2168kB free_cma:0kB [ 597.462287][T11743] lowmem_reserve[]: 0 0 0 0 0 [ 597.467207][T11743] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:772kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 597.566538][T11743] lowmem_reserve[]: 0 0 0 0 0 [ 597.581621][T11743] Node 1 Normal free:3904756kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.666396][T11743] lowmem_reserve[]: 0 0 0 0 0 [ 597.677069][T11743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 597.731580][T11743] Node 0 DMA32: 600*4kB (UME) 735*8kB (UME) 564*16kB (UME) 293*32kB (UME) 157*64kB (ME) 126*128kB (UME) 72*256kB (UME) 41*512kB (UME) 32*1024kB (UM) 5*2048kB (UME) 295*4096kB (UME) = 1343608kB [ 597.770832][T11743] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 598.641588][T11743] Node 1 Normal: 219*4kB (UME) 63*8kB (UME) 33*16kB (UME) 192*32kB (UME) 88*64kB (UME) 27*128kB (UME) 14*256kB (UME) 10*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3904756kB [ 598.660308][T11743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.688148][T11743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.708988][T11743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.726943][T11743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.737251][T11743] 63006 total pagecache pages [ 598.743130][T11743] 2 pages in swap cache [ 598.747373][T11743] Free swap = 124520kB [ 598.753013][T11743] Total swap = 124996kB [ 598.757263][T11743] 2097051 pages RAM [ 598.762261][T11743] 0 pages HighMem/MovableOnly [ 598.771551][T11743] 426990 pages reserved [ 598.781562][T11743] 0 pages cma reserved [ 598.899092][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 598.942081][T11754] FAULT_INJECTION: forcing a failure. [ 598.942081][T11754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.959876][T11754] CPU: 1 UID: 0 PID: 11754 Comm: syz.4.1566 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 598.970674][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.970690][T11754] Call Trace: [ 598.970698][T11754] [ 598.970706][T11754] dump_stack_lvl+0x241/0x360 [ 598.970738][T11754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.970755][T11754] ? __pfx__printk+0x10/0x10 [ 598.970768][T11754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 598.970781][T11754] ? __pfx_lock_release+0x10/0x10 [ 598.970793][T11754] ? _raw_spin_lock_irq+0xdf/0x120 [ 598.970808][T11754] should_fail_ex+0x3b0/0x4e0 [ 598.970822][T11754] _copy_from_user+0x2f/0xc0 [ 598.970838][T11754] restore_altstack+0x99/0x150 [ 598.970851][T11754] ? __pfx_restore_altstack+0x10/0x10 [ 598.970864][T11754] ? __task_pid_nr_ns+0x28/0x450 [ 598.970881][T11754] __do_sys_rt_sigreturn+0x194/0x280 [ 598.970904][T11754] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 598.970920][T11754] ? do_syscall_64+0x100/0x230 [ 598.970936][T11754] ? do_syscall_64+0xb6/0x230 [ 598.970952][T11754] do_syscall_64+0xf3/0x230 [ 598.970966][T11754] ? clear_bhb_loop+0x35/0x90 [ 598.970978][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.970993][T11754] RIP: 0033:0x7fd4f8b1c0e9 [ 598.971004][T11754] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 598.971014][T11754] RSP: 002b:00007fd4f99a4ac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 598.971029][T11754] RAX: ffffffffffffffda RBX: 00007fd4f8d45fa0 RCX: 00007fd4f8b1c0e9 [ 598.971037][T11754] RDX: 00007fd4f99a4ac0 RSI: 00007fd4f99a4bf0 RDI: 0000000000000021 [ 598.971045][T11754] RBP: 00007fd4f99a50a0 R08: 0000000000000000 R09: 0000000000000000 [ 598.971053][T11754] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 598.971060][T11754] R13: 0000000000000000 R14: 00007fd4f8d45fa0 R15: 00007fff5cd4de18 [ 598.971075][T11754] [ 600.983276][T11760] tipc: Started in network mode [ 600.988189][T11760] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 600.995595][T11760] tipc: Enabled bearer , priority 10 [ 601.122340][T10638] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 601.374887][T10638] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 601.385565][T10638] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 601.395066][T10638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.422740][T11770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.494761][T10638] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.797406][T10638] usb 2-1: USB disconnect, device number 23 [ 602.114632][ T5863] tipc: Node number set to 10136234 [ 605.548520][T11831] @: renamed from vlan0 (while UP) [ 606.725351][T11841] FAULT_INJECTION: forcing a failure. [ 606.725351][T11841] name failslab, interval 1, probability 0, space 0, times 0 [ 606.861586][T11841] CPU: 1 UID: 0 PID: 11841 Comm: syz.1.1593 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 606.872396][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 606.882461][T11841] Call Trace: [ 606.885737][T11841] [ 606.888660][T11841] dump_stack_lvl+0x241/0x360 [ 606.893340][T11841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.898537][T11841] ? __pfx__printk+0x10/0x10 [ 606.903128][T11841] ? kmem_cache_alloc_noprof+0x48/0x380 [ 606.908676][T11841] ? __pfx___might_resched+0x10/0x10 [ 606.913958][T11841] ? validate_chain+0x11e/0x5920 [ 606.918894][T11841] should_fail_ex+0x3b0/0x4e0 [ 606.923577][T11841] should_failslab+0xac/0x100 [ 606.928253][T11841] ? vm_area_dup+0x27/0x290 [ 606.932754][T11841] kmem_cache_alloc_noprof+0x70/0x380 [ 606.938125][T11841] vm_area_dup+0x27/0x290 [ 606.942457][T11841] __split_vma+0x1cb/0xc50 [ 606.946875][T11841] ? __pfx___split_vma+0x10/0x10 [ 606.951816][T11841] ? mas_find+0x950/0xbb0 [ 606.956146][T11841] ? __pfx_lock_release+0x10/0x10 [ 606.961170][T11841] vms_gather_munmap_vmas+0x4c1/0x1600 [ 606.966625][T11841] ? __pfx_validate_chain+0x10/0x10 [ 606.971828][T11841] ? __lock_acquire+0x1397/0x2100 [ 606.976848][T11841] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 606.982747][T11841] do_vmi_align_munmap+0x3ff/0x6f0 [ 606.987857][T11841] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 606.993507][T11841] ? mas_find+0x8c0/0xbb0 [ 606.997840][T11841] do_vmi_munmap+0x24e/0x2d0 [ 607.002430][T11841] __se_sys_mremap+0xc01/0x1ac0 [ 607.007282][T11841] ? __pfx___se_sys_mremap+0x10/0x10 [ 607.012584][T11841] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 607.018561][T11841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.024887][T11841] ? do_syscall_64+0x100/0x230 [ 607.029653][T11841] ? __x64_sys_mremap+0x20/0xc0 [ 607.034501][T11841] do_syscall_64+0xf3/0x230 [ 607.039001][T11841] ? clear_bhb_loop+0x35/0x90 [ 607.043672][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.049566][T11841] RIP: 0033:0x7fd2f477fed9 [ 607.053974][T11841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.073573][T11841] RSP: 002b:00007fd2f5655058 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 607.081982][T11841] RAX: ffffffffffffffda RBX: 00007fd2f4945fa0 RCX: 00007fd2f477fed9 [ 607.089946][T11841] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000000020000000 [ 607.097912][T11841] RBP: 00007fd2f56550a0 R08: 0000000020a00000 R09: 0000000000000000 [ 607.105876][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.113842][T11841] R13: 0000000000000000 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 607.121819][T11841] [ 607.413235][T11847] binder: 11846:11847 unknown command 1074553622 [ 607.419590][T11847] binder: 11846:11847 ioctl c0306201 20000580 returned -22 [ 607.488625][T11850] FAULT_INJECTION: forcing a failure. [ 607.488625][T11850] name failslab, interval 1, probability 0, space 0, times 0 [ 607.681704][T11850] CPU: 1 UID: 0 PID: 11850 Comm: syz.1.1597 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 607.692525][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 607.702594][T11850] Call Trace: [ 607.705874][T11850] [ 607.708797][T11850] dump_stack_lvl+0x241/0x360 [ 607.713481][T11850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.718676][T11850] ? __pfx__printk+0x10/0x10 [ 607.723258][T11850] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 607.728616][T11850] ? __pfx___might_resched+0x10/0x10 [ 607.733895][T11850] should_fail_ex+0x3b0/0x4e0 [ 607.738560][T11850] should_failslab+0xac/0x100 [ 607.743230][T11850] __kmalloc_node_noprof+0xe1/0x4d0 [ 607.748418][T11850] ? __kvmalloc_node_noprof+0x72/0x190 [ 607.753868][T11850] __kvmalloc_node_noprof+0x72/0x190 [ 607.759144][T11850] alloc_netdev_mqs+0x8d4/0x1080 [ 607.764075][T11850] rtnl_create_link+0x2f9/0xc20 [ 607.768917][T11850] rtnl_newlink_create+0x210/0xa40 [ 607.774044][T11850] ? __pfx___mutex_lock+0x10/0x10 [ 607.779072][T11850] ? cap_capable+0x1b4/0x250 [ 607.783659][T11850] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 607.789161][T11854] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 607.789303][T11850] ? nla_strscpy+0x100/0x180 [ 607.797412][T11854] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 607.801765][T11850] ? full_name_hash+0x89/0xe0 [ 607.801796][T11850] rtnl_newlink+0x1b40/0x20e0 [ 607.810325][T11854] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 607.814602][T11850] ? __pfx_rtnl_newlink+0x10/0x10 [ 607.819265][T11854] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 607.826952][T11850] ? __netlink_deliver_tap+0x56b/0x7f0 [ 607.827000][T11850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 607.851569][T11850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.857901][T11850] ? mark_lock+0x9a/0x360 [ 607.862233][T11850] ? __lock_acquire+0x1397/0x2100 [ 607.867275][T11850] ? __pfx_lock_release+0x10/0x10 [ 607.872291][T11850] ? cap_capable+0x1b4/0x250 [ 607.876885][T11850] ? __pfx_rtnl_newlink+0x10/0x10 [ 607.881911][T11850] rtnetlink_rcv_msg+0x791/0xcf0 [ 607.886842][T11850] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 607.891955][T11850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.897418][T11850] ? ref_tracker_free+0x643/0x7e0 [ 607.902441][T11850] netlink_rcv_skb+0x1e3/0x430 [ 607.907198][T11850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.912654][T11850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.917949][T11850] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.923143][T11850] netlink_unicast+0x7f6/0x990 [ 607.927913][T11850] ? __pfx_netlink_unicast+0x10/0x10 [ 607.933196][T11850] ? __virt_addr_valid+0x183/0x530 [ 607.938306][T11850] ? __check_object_size+0x48e/0x900 [ 607.943592][T11850] netlink_sendmsg+0x8e4/0xcb0 [ 607.948366][T11850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.953661][T11850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.958939][T11850] __sock_sendmsg+0x221/0x270 [ 607.963617][T11850] ____sys_sendmsg+0x52a/0x7e0 [ 607.968384][T11850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.973662][T11850] ? __fget_files+0x2a/0x410 [ 607.978249][T11850] ? __fget_files+0x2a/0x410 [ 607.982844][T11850] __sys_sendmsg+0x269/0x350 [ 607.987427][T11850] ? __pfx_lock_release+0x10/0x10 [ 607.992452][T11850] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.997569][T11850] ? __pfx_vfs_write+0x10/0x10 [ 608.002352][T11850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 608.008672][T11850] ? do_syscall_64+0x100/0x230 [ 608.013436][T11850] ? do_syscall_64+0xb6/0x230 [ 608.018113][T11850] do_syscall_64+0xf3/0x230 [ 608.022615][T11850] ? clear_bhb_loop+0x35/0x90 [ 608.027289][T11850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.033181][T11850] RIP: 0033:0x7fd2f477fed9 [ 608.037587][T11850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.057192][T11850] RSP: 002b:00007fd2f5655058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.065605][T11850] RAX: ffffffffffffffda RBX: 00007fd2f4945fa0 RCX: 00007fd2f477fed9 [ 608.073570][T11850] RDX: 0000000004000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 608.081533][T11850] RBP: 00007fd2f56550a0 R08: 0000000000000000 R09: 0000000000000000 [ 608.089497][T11850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.097461][T11850] R13: 0000000000000000 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 608.105440][T11850] [ 608.393741][T11868] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 5, id = 0 [ 609.817124][T11883] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.035472][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 613.013717][T11908] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:16384 [ 613.037769][T11908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.211595][T11910] netlink: 'syz.4.1615': attribute type 7 has an invalid length. [ 613.663529][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 613.821584][ T5863] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 614.124742][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 614.146403][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 614.161204][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 614.171812][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.184877][ T5863] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.195040][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.208482][ T5863] usb 6-1: config 0 descriptor?? [ 614.667595][ T5863] usbhid 6-1:0.0: can't add hid device: -71 [ 614.673736][ T5863] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 614.747477][ T5863] usb 6-1: USB disconnect, device number 6 [ 615.150160][T11930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1621'. [ 616.271800][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 616.446344][ T5863] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 616.463536][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.485396][ T5863] usb 6-1: Product: syz [ 616.495473][ T5863] usb 6-1: Manufacturer: syz [ 616.507384][ T5863] usb 6-1: SerialNumber: syz [ 616.526161][ T5863] usb 6-1: config 0 descriptor?? [ 616.754810][ T973] usb 6-1: USB disconnect, device number 7 [ 619.836833][T11970] lo speed is unknown, defaulting to 1000 [ 620.586286][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1638'. [ 621.482706][T11971] lo speed is unknown, defaulting to 1000 [ 622.096460][T12009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1645'. [ 624.872079][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.878461][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.065875][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 627.881969][ T973] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 628.058725][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.090210][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.121572][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 628.129904][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.131510][ T973] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 628.140058][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 628.160159][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 628.189888][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.211150][ T973] usb 5-1: config 0 descriptor?? [ 628.287454][ T5863] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 628.296671][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.304909][ T5863] usb 2-1: Product: syz [ 628.309092][ T5863] usb 2-1: Manufacturer: syz [ 628.313844][ T5863] usb 2-1: SerialNumber: syz [ 628.320401][ T5863] usb 2-1: config 0 descriptor?? [ 628.328915][ T5863] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 628.868637][ T973] usbhid 5-1:0.0: can't add hid device: -71 [ 628.881100][ T973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 628.909587][ T973] usb 5-1: USB disconnect, device number 21 [ 630.287597][ T8] usb 2-1: USB disconnect, device number 24 [ 631.331962][ T5827] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 631.341994][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u9:5 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 631.352871][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 631.362946][ T5827] Workqueue: hci4 hci_rx_work [ 631.367662][ T5827] Call Trace: [ 631.370951][ T5827] [ 631.373895][ T5827] dump_stack_lvl+0x241/0x360 [ 631.378598][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.383823][ T5827] ? __pfx__printk+0x10/0x10 [ 631.388436][ T5827] ? __kmalloc_cache_noprof+0x243/0x390 [ 631.393996][ T5827] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 631.399311][ T5827] sysfs_create_dir_ns+0x2ce/0x3a0 [ 631.404451][ T5827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 631.410115][ T5827] kobject_add_internal+0x435/0x8d0 [ 631.415604][ T5827] kobject_add+0x152/0x220 [ 631.420047][ T5827] ? do_raw_spin_unlock+0x13c/0x8b0 [ 631.425265][ T5827] ? device_add+0x3e7/0xbf0 [ 631.429783][ T5827] ? __pfx_kobject_add+0x10/0x10 [ 631.434747][ T5827] ? _raw_spin_unlock+0x28/0x50 [ 631.439622][ T5827] ? get_device_parent+0x165/0x410 [ 631.444753][ T5827] device_add+0x4e5/0xbf0 [ 631.449113][ T5827] hci_conn_add_sysfs+0xe8/0x200 [ 631.454092][ T5827] le_conn_complete_evt+0xc9f/0x12e0 [ 631.459419][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 631.465157][ T5827] ? __mutex_unlock_slowpath+0x21e/0x790 [ 631.470822][ T5827] ? __pfx___mutex_lock+0x10/0x10 [ 631.475867][ T5827] ? skb_pull_data+0x112/0x230 [ 631.480656][ T5827] hci_le_conn_complete_evt+0x18c/0x420 [ 631.486242][ T5827] hci_event_packet+0xa55/0x1540 [ 631.491212][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 631.496520][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 631.501918][ T5827] ? do_raw_spin_unlock+0x13c/0x8b0 [ 631.507153][ T5827] ? hci_send_to_monitor+0xd8/0x7f0 [ 631.512370][ T5827] ? kcov_remote_start+0x97/0x7d0 [ 631.517414][ T5827] hci_rx_work+0x3f3/0xdb0 [ 631.521864][ T5827] ? process_scheduled_works+0x976/0x1840 [ 631.527604][ T5827] process_scheduled_works+0xa66/0x1840 [ 631.533200][ T5827] ? __pfx_process_scheduled_works+0x10/0x10 [ 631.539213][ T5827] ? assign_work+0x364/0x3d0 [ 631.543836][ T5827] worker_thread+0x870/0xd30 [ 631.548449][ T5827] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 631.554364][ T5827] ? __kthread_parkme+0x169/0x1d0 [ 631.559419][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 631.564546][ T5827] kthread+0x2f0/0x390 [ 631.568630][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 631.573750][ T5827] ? __pfx_kthread+0x10/0x10 [ 631.578339][ T5827] ret_from_fork+0x4b/0x80 [ 631.582744][ T5827] ? __pfx_kthread+0x10/0x10 [ 631.587321][ T5827] ret_from_fork_asm+0x1a/0x30 [ 631.592085][ T5827] [ 631.722044][ T5827] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 631.736416][ T5827] Bluetooth: hci4: failed to register connection device [ 632.867367][T12134] FAULT_INJECTION: forcing a failure. [ 632.867367][T12134] name failslab, interval 1, probability 0, space 0, times 0 [ 632.910374][T12134] CPU: 0 UID: 0 PID: 12134 Comm: syz.1.1678 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 632.921449][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 632.931521][T12134] Call Trace: [ 632.934799][T12134] [ 632.937724][T12134] dump_stack_lvl+0x241/0x360 [ 632.942406][T12134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.947603][T12134] ? __pfx__printk+0x10/0x10 [ 632.952193][T12134] ? __kmalloc_cache_noprof+0x48/0x390 [ 632.957649][T12134] ? __pfx___might_resched+0x10/0x10 [ 632.962939][T12134] should_fail_ex+0x3b0/0x4e0 [ 632.967614][T12134] should_failslab+0xac/0x100 [ 632.972287][T12134] __kmalloc_cache_noprof+0x70/0x390 [ 632.977566][T12134] ? __se_sys_mount+0x15a/0x3c0 [ 632.982414][T12134] ? memdup_user+0x9f/0xc0 [ 632.986831][T12134] __se_sys_mount+0x15a/0x3c0 [ 632.991510][T12134] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 632.997484][T12134] ? __pfx___se_sys_mount+0x10/0x10 [ 633.002681][T12134] ? do_syscall_64+0x100/0x230 [ 633.007443][T12134] ? __x64_sys_mount+0x20/0xc0 [ 633.012203][T12134] do_syscall_64+0xf3/0x230 [ 633.016703][T12134] ? clear_bhb_loop+0x35/0x90 [ 633.021373][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.027263][T12134] RIP: 0033:0x7fd2f477fed9 [ 633.031674][T12134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.051277][T12134] RSP: 002b:00007fd2f5655058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 633.059692][T12134] RAX: ffffffffffffffda RBX: 00007fd2f4945fa0 RCX: 00007fd2f477fed9 [ 633.067662][T12134] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 633.075628][T12134] RBP: 00007fd2f56550a0 R08: 0000000020000480 R09: 0000000000000000 [ 633.083594][T12134] R10: 0000000003800048 R11: 0000000000000246 R12: 0000000000000001 [ 633.091562][T12134] R13: 0000000000000000 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 633.099539][T12134] [ 633.103612][T12132] kAFS: No cell specified [ 633.678422][T10962] Buffer I/O error on dev loop7, logical block 4095, async page read [ 634.832269][T12167] binder_alloc: 12166: binder_alloc_buf size 8 failed, no address space [ 634.841263][T12167] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 634.859622][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1686'. [ 634.870013][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1686'. [ 634.921391][T12167] tipc: Can't bind to reserved service type 2 [ 636.488621][T12183] lo speed is unknown, defaulting to 1000 [ 636.822130][ T8] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 636.974064][T12186] lo speed is unknown, defaulting to 1000 [ 637.105244][ T8] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 637.113541][ T8] usb 5-1: config 0 has no interface number 0 [ 637.119794][ T8] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 637.135115][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.152242][ T8] usb 5-1: config 0 descriptor?? [ 637.162978][ T8] hub 5-1:0.3: bad descriptor, ignoring hub [ 637.169148][ T8] hub 5-1:0.3: probe with driver hub failed with error -5 [ 637.210799][ T8] sierra 5-1:0.3: Sierra USB modem converter detected [ 637.439637][ T8] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 637.472956][ T8] usb 5-1: USB disconnect, device number 22 [ 637.525782][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 637.546777][ T8] sierra 5-1:0.3: device disconnected [ 637.991864][ T5863] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 638.172394][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 638.228915][ T5863] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 638.261634][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.280526][ T5863] usb 2-1: Product: syz [ 638.286223][ T5863] usb 2-1: Manufacturer: syz [ 638.290849][ T5863] usb 2-1: SerialNumber: syz [ 638.305090][ T5863] usb 2-1: config 0 descriptor?? [ 638.350841][T12217] FAULT_INJECTION: forcing a failure. [ 638.350841][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 638.372608][T12209] virtio-fs: tag <> not found [ 638.389357][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.6.1700 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 638.400148][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 638.410215][T12217] Call Trace: [ 638.413505][T12217] [ 638.416449][T12217] dump_stack_lvl+0x241/0x360 [ 638.421149][T12217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.426365][T12217] ? __pfx__printk+0x10/0x10 [ 638.430989][T12217] ? fs_reclaim_acquire+0x93/0x130 [ 638.436131][T12217] ? __pfx___might_resched+0x10/0x10 [ 638.441443][T12217] should_fail_ex+0x3b0/0x4e0 [ 638.446140][T12217] should_failslab+0xac/0x100 [ 638.450840][T12217] __kmalloc_noprof+0xdd/0x4c0 [ 638.455620][T12217] ? kstrtouint_from_user+0x128/0x190 [ 638.461010][T12217] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 638.466758][T12217] tomoyo_realpath_from_path+0xcf/0x5e0 [ 638.472332][T12217] tomoyo_path_number_perm+0x236/0x860 [ 638.477802][T12217] ? __lock_acquire+0x1397/0x2100 [ 638.482848][T12217] ? tomoyo_path_number_perm+0x206/0x860 [ 638.488508][T12217] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 638.490376][ T5863] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 638.494525][T12217] ? __fget_files+0x2a/0x410 [ 638.494572][T12217] ? __fget_files+0x2a/0x410 [ 638.512852][T12217] security_file_ioctl+0xc6/0x2a0 [ 638.517916][T12217] __se_sys_ioctl+0x46/0x170 [ 638.522539][T12217] do_syscall_64+0xf3/0x230 [ 638.527072][T12217] ? clear_bhb_loop+0x35/0x90 [ 638.531766][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.537681][T12217] RIP: 0033:0x7ff457f7fed9 [ 638.542114][T12217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.561739][T12217] RSP: 002b:00007ff458e66058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.570178][T12217] RAX: ffffffffffffffda RBX: 00007ff458145fa0 RCX: 00007ff457f7fed9 [ 638.578159][T12217] RDX: 0000000020000200 RSI: 00000000c048aeca RDI: 000000000000000b [ 638.586125][T12217] RBP: 00007ff458e660a0 R08: 0000000000000000 R09: 0000000000000000 [ 638.594101][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.602089][T12217] R13: 0000000000000000 R14: 00007ff458145fa0 R15: 00007ffc16a4ff18 [ 638.610079][T12217] [ 638.656190][T12217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 640.284937][T12236] FAULT_INJECTION: forcing a failure. [ 640.284937][T12236] name failslab, interval 1, probability 0, space 0, times 0 [ 640.307189][T12236] CPU: 0 UID: 0 PID: 12236 Comm: syz.2.1707 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 640.318000][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 640.328062][T12236] Call Trace: [ 640.331331][T12236] [ 640.334259][T12236] dump_stack_lvl+0x241/0x360 [ 640.338950][T12236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.344162][T12236] ? __pfx__printk+0x10/0x10 [ 640.348760][T12236] ? fs_reclaim_acquire+0x93/0x130 [ 640.353880][T12236] ? __pfx___might_resched+0x10/0x10 [ 640.359173][T12236] should_fail_ex+0x3b0/0x4e0 [ 640.363852][T12236] should_failslab+0xac/0x100 [ 640.368526][T12236] __kmalloc_noprof+0xdd/0x4c0 [ 640.373284][T12236] ? tomoyo_encode+0x26f/0x540 [ 640.378048][T12236] tomoyo_encode+0x26f/0x540 [ 640.382642][T12236] tomoyo_realpath_from_path+0x59e/0x5e0 [ 640.388278][T12236] tomoyo_path_number_perm+0x236/0x860 [ 640.393733][T12236] ? __lock_acquire+0x1397/0x2100 [ 640.398756][T12236] ? tomoyo_path_number_perm+0x206/0x860 [ 640.404384][T12236] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 640.410391][T12236] ? __fget_files+0x2a/0x410 [ 640.414996][T12236] ? __fget_files+0x2a/0x410 [ 640.419601][T12236] security_file_ioctl+0xc6/0x2a0 [ 640.424627][T12236] __se_sys_ioctl+0x46/0x170 [ 640.429220][T12236] do_syscall_64+0xf3/0x230 [ 640.433727][T12236] ? clear_bhb_loop+0x35/0x90 [ 640.438403][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.444300][T12236] RIP: 0033:0x7ff776b7fed9 [ 640.448714][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.468318][T12236] RSP: 002b:00007ff77794a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.476735][T12236] RAX: ffffffffffffffda RBX: 00007ff776d45fa0 RCX: 00007ff776b7fed9 [ 640.484706][T12236] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 640.492675][T12236] RBP: 00007ff77794a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 640.500643][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.508611][T12236] R13: 0000000000000000 R14: 00007ff776d45fa0 R15: 00007ffff4027608 [ 640.516595][T12236] [ 640.532310][T12236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 640.543805][T12236] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 640.850252][T10034] usb 2-1: USB disconnect, device number 25 [ 640.872750][T10962] Buffer I/O error on dev loop7, logical block 4095, async page read [ 640.959128][T12246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.021616][ T5863] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 642.171683][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 642.180197][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.200415][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 642.222435][ T5863] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 642.237284][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 642.246446][ T5863] usb 3-1: Product: syz [ 642.251341][ T5863] usb 3-1: Manufacturer: syz [ 642.262003][ T5863] usb 3-1: SerialNumber: syz [ 642.269653][ T5863] usb 3-1: config 0 descriptor?? [ 642.280738][ T5863] usb 3-1: NFC: intf ffff888028641000 id ffffffff8f2f7820 [ 642.497047][ T5863] usb 3-1: USB disconnect, device number 21 [ 642.565638][T10962] Buffer I/O error on dev loop7, logical block 4095, async page read [ 643.351833][T12274] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1722'. [ 644.239003][T12279] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 644.278712][ T5863] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 644.432156][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 644.441277][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 644.457038][ T5863] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 644.471657][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.510547][ T5863] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 644.520847][ T5863] usb 5-1: config 1 has no interface number 1 [ 644.527117][ T5863] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 644.542961][ T5863] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.543053][T10638] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 644.556391][ T5863] usb 5-1: config 1 interface 2 has no altsetting 0 [ 644.588255][ T5863] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.606148][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.657152][ T5863] usb 5-1: Product: syz [ 644.713427][ T5863] usb 5-1: Manufacturer: syz [ 644.736158][ T5863] usb 5-1: SerialNumber: syz [ 644.821610][T10638] usb 3-1: device descriptor read/64, error -71 [ 645.076753][ T5863] usb 5-1: USB disconnect, device number 23 [ 645.101980][T10638] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 645.260123][T10638] usb 3-1: device descriptor read/64, error -71 [ 645.282420][T10962] udevd[10962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.381952][T10638] usb usb3-port1: attempt power cycle [ 646.512131][T10638] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 646.532554][T10638] usb 3-1: device descriptor read/8, error -71 [ 646.821563][T10638] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 646.851680][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 646.864438][T10638] usb 3-1: device descriptor read/8, error -71 [ 646.971774][T10638] usb usb3-port1: unable to enumerate USB device [ 647.023292][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.044596][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.071944][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.114577][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 647.149337][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.178447][ T8] usb 2-1: config 0 descriptor?? [ 647.822116][ T8] playstation 0003:054C:0BA0.0007: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 648.864243][ T8] playstation 0003:054C:0BA0.0007: Failed to retrieve feature with reportID 18: -71 [ 648.886953][ T8] playstation 0003:054C:0BA0.0007: Failed to retrieve DualShock4 pairing info: -71 [ 648.905214][ T8] playstation 0003:054C:0BA0.0007: Failed to get MAC address from DualShock4 [ 648.923163][ T8] playstation 0003:054C:0BA0.0007: Failed to create dualshock4. [ 648.962132][T10034] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 649.200982][T10034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.206000][ T8] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -71 [ 649.354069][ T8] usb 2-1: USB disconnect, device number 26 [ 649.358391][T10034] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 649.370084][T10034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.449043][T10034] usb 3-1: Product: syz [ 649.587591][T10034] usb 3-1: Manufacturer: syz [ 649.620597][T10034] usb 3-1: SerialNumber: syz [ 649.875706][T10034] usb 3-1: config 0 descriptor?? [ 649.897864][T10034] hub 3-1:0.0: bad descriptor, ignoring hub [ 649.991266][T10034] hub 3-1:0.0: probe with driver hub failed with error -5 [ 650.021330][T10034] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.229017][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.239013][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.333295][T10034] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 650.740719][T10034] usb 3-1: USB disconnect, device number 26 [ 650.802349][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 650.847724][T12350] team0: Port device macvlan1 added [ 650.983371][ T8] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 650.991947][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.013506][ T8] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 651.032224][ T8] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 651.039160][T12352] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.055765][ T8] usb 6-1: Manufacturer: syz [ 651.062055][T10962] udevd[10962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.078901][ T8] usb 6-1: config 0 descriptor?? [ 651.271597][ T8] rc_core: IR keymap rc-hauppauge not found [ 651.280780][ T8] Registered IR keymap rc-empty [ 651.293688][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 651.308723][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54 [ 653.870929][ T973] usb 6-1: USB disconnect, device number 8 [ 654.703355][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 656.051337][T12405] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 656.057977][T12405] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 656.122050][T12405] vhci_hcd vhci_hcd.0: Device attached [ 656.132341][T12413] IPv6: sit1: Disabled Multicast RS [ 656.210983][T12419] vhci_hcd: connection closed [ 656.217464][ T35] vhci_hcd: stop threads [ 657.060115][ T35] vhci_hcd: release socket [ 657.082150][ T35] vhci_hcd: disconnect device [ 658.490287][T12441] netlink: 'syz.6.1773': attribute type 7 has an invalid length. [ 658.520208][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1773'. [ 658.738841][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'. [ 661.116122][T12455] block device autoloading is deprecated and will be removed. [ 664.107456][T12484] binder_alloc: binder_alloc_mmap_handler: 12473 20ffd000-21000000 already mapped failed -16 [ 664.220850][T12481] netlink: 'syz.1.1784': attribute type 7 has an invalid length. [ 664.271570][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 664.460846][ T5817] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 664.952706][T10034] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 665.177710][T10034] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 665.219107][T10034] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 665.309809][T10034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.434396][T10034] usb 6-1: Product: syz [ 665.561535][T10034] usb 6-1: Manufacturer: syz [ 665.621532][T10034] usb 6-1: SerialNumber: syz [ 665.633577][T10034] usb 6-1: config 0 descriptor?? [ 666.703148][ T46] usb 6-1: USB disconnect, device number 9 [ 667.097344][T12525] netlink: 'syz.2.1795': attribute type 4 has an invalid length. [ 670.498806][ T46] IPVS: starting estimator thread 0... [ 670.881716][T12557] IPVS: using max 19 ests per chain, 45600 per kthread [ 672.193513][ T29] audit: type=1326 audit(1733599682.515:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12570 comm="syz.2.1811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff776b7fed9 code=0x0 [ 672.350003][T12576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.281758][ T46] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 674.456139][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.466672][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 674.592648][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 674.724386][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 674.736277][ T46] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 674.747285][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.761495][ T46] usb 2-1: Product: syz [ 674.765683][ T46] usb 2-1: Manufacturer: syz [ 674.770285][ T46] usb 2-1: SerialNumber: syz [ 674.789792][ T46] usb 2-1: config 0 descriptor?? [ 674.820987][ T46] usb 2-1: ucan: probing device on interface #0 [ 674.858282][ T46] usb 2-1: ucan: invalid endpoint configuration [ 674.878418][ T46] usb 2-1: ucan: probe failed; try to update the device firmware [ 675.032472][T10034] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 675.205519][T10034] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 675.219739][T10034] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.273591][ T973] usb 2-1: USB disconnect, device number 27 [ 675.286835][T10034] usb 5-1: config 0 has no interface number 0 [ 675.980134][T10034] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 675.991224][T10034] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 676.002279][T10034] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 239 [ 676.018279][T10034] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 676.331591][T10034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.363998][T10034] usb 5-1: Product: syz [ 676.368200][T10034] usb 5-1: Manufacturer: syz [ 676.630480][T10034] usb 5-1: SerialNumber: syz [ 676.637187][T10034] usb 5-1: config 0 descriptor?? [ 676.646219][T10034] HFC-S_USB 5-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 676.778377][T10034] usb 5-1: USB disconnect, device number 24 [ 678.110393][T12633] netlink: 'syz.5.1826': attribute type 10 has an invalid length. [ 678.118787][T12633] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 678.233579][T12633] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 678.255441][T12633] team0: Port device wlan1 added [ 679.432279][T12658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 683.007138][T12690] FAULT_INJECTION: forcing a failure. [ 683.007138][T12690] name failslab, interval 1, probability 0, space 0, times 0 [ 683.050640][T12690] CPU: 0 UID: 0 PID: 12690 Comm: syz.1.1842 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 683.061441][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 683.071515][T12690] Call Trace: [ 683.074799][T12690] [ 683.077722][T12690] dump_stack_lvl+0x241/0x360 [ 683.082416][T12690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.087642][T12690] ? __pfx__printk+0x10/0x10 [ 683.092249][T12690] ? fs_reclaim_acquire+0x93/0x130 [ 683.097356][T12690] ? __pfx___might_resched+0x10/0x10 [ 683.102645][T12690] should_fail_ex+0x3b0/0x4e0 [ 683.107335][T12690] should_failslab+0xac/0x100 [ 683.112018][T12690] __kmalloc_cache_noprof+0x70/0x390 [ 683.117322][T12690] ? netlbl_catmap_setbit+0x1bc/0x3a0 [ 683.122726][T12690] netlbl_catmap_setbit+0x1bc/0x3a0 [ 683.127924][T12690] smk_netlbl_mls+0x17b/0x630 [ 683.132617][T12690] smk_import_entry+0x35e/0x610 [ 683.137498][T12690] smack_inode_setxattr+0x1fc/0x510 [ 683.142727][T12690] ? __pfx_smack_inode_setxattr+0x10/0x10 [ 683.148475][T12690] ? cap_capable+0x1b4/0x250 [ 683.153092][T12690] ? safesetid_security_capable+0xb2/0x1d0 [ 683.158915][T12690] ? bpf_lsm_capable+0x9/0x10 [ 683.163581][T12690] ? security_capable+0x7e/0x2d0 [ 683.168505][T12690] ? ns_capable+0x8a/0xf0 [ 683.172832][T12690] security_inode_setxattr+0x3c0/0x710 [ 683.178277][T12690] __vfs_setxattr_locked+0xaa/0x240 [ 683.183467][T12690] vfs_setxattr+0x221/0x430 [ 683.187958][T12690] ? __pfx_vfs_setxattr+0x10/0x10 [ 683.192976][T12690] filename_setxattr+0x2af/0x430 [ 683.197911][T12690] ? __pfx_filename_setxattr+0x10/0x10 [ 683.203360][T12690] ? getname_flags+0x1e3/0x540 [ 683.208113][T12690] path_setxattrat+0x440/0x510 [ 683.212873][T12690] ? __pfx_path_setxattrat+0x10/0x10 [ 683.218156][T12690] ? vfs_write+0x730/0xd30 [ 683.222582][T12690] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 683.228551][T12690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 683.234890][T12690] __x64_sys_lsetxattr+0xbf/0xe0 [ 683.239816][T12690] do_syscall_64+0xf3/0x230 [ 683.244313][T12690] ? clear_bhb_loop+0x35/0x90 [ 683.248982][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.254868][T12690] RIP: 0033:0x7fd2f477fed9 [ 683.259272][T12690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.278863][T12690] RSP: 002b:00007fd2f5655058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 683.287282][T12690] RAX: ffffffffffffffda RBX: 00007fd2f4945fa0 RCX: 00007fd2f477fed9 [ 683.295247][T12690] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000000 [ 683.303206][T12690] RBP: 00007fd2f56550a0 R08: 0000000000000000 R09: 0000000000000000 [ 683.311174][T12690] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 683.319148][T12690] R13: 0000000000000000 R14: 00007fd2f4945fa0 R15: 00007ffef8c4ee48 [ 683.327118][T12690] [ 683.567555][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1843'. [ 686.003601][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.003703][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.132180][T12723] fuse: Unknown parameter 'Šþ40xffffffffffffffff' [ 689.520426][T12755] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.989118][ T8] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 690.458542][T12766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.493795][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.511648][ T8] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 690.529368][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 690.576892][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.586532][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 690.594922][ T8] usb 5-1: SerialNumber: syz [ 690.609230][T12759] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 690.699144][T12772] program syz.6.1868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.091841][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.100881][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.479728][T12784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.192685][T12783] tty tty1: ldisc open failed (-12), clearing slot 0 [ 693.037750][T12797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.599656][T12799] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1874'. [ 694.909102][ T8] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 694.958133][ T8] usb 5-1: USB disconnect, device number 25 [ 695.345944][T12812] fuse: root generation should be zero [ 695.454357][T12814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 698.026249][ T5817] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 698.528759][T12834] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 698.560880][T12834] team0: Device hsr_slave_0 failed to register rx_handler [ 698.811563][ T973] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 698.932048][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 698.942515][ T973] usb 6-1: device descriptor read/64, error -71 [ 699.191766][ T973] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 699.216145][ T1540] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 699.731689][ T973] usb 6-1: device descriptor read/64, error -71 [ 699.751623][ T1540] usb 2-1: device descriptor read/64, error -71 [ 699.842227][ T973] usb usb6-port1: attempt power cycle [ 700.124233][ T46] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 700.132023][ T1540] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 700.293674][ T973] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 700.332275][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 700.337613][ T1540] usb 2-1: device descriptor read/64, error -71 [ 700.388021][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.391678][ T973] usb 6-1: device descriptor read/8, error -71 [ 700.459799][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 700.482461][ T1540] usb usb2-port1: attempt power cycle [ 700.488213][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.656774][ T46] usb 3-1: config 0 descriptor?? [ 700.949816][ T973] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 700.964179][T12851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.976171][T12851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.991415][ T46] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 700.993060][ T973] usb 6-1: device descriptor read/8, error -71 [ 701.011741][ T1540] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 701.058895][ T1540] usb 2-1: device descriptor read/8, error -71 [ 701.225964][ T973] usb usb6-port1: unable to enumerate USB device [ 701.266402][ T973] usb 3-1: USB disconnect, device number 27 [ 701.711573][ T1540] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 701.742468][ T1540] usb 2-1: device descriptor read/8, error -71 [ 701.851909][ T1540] usb usb2-port1: unable to enumerate USB device [ 702.775046][T12875] infiniband s}z2: set down [ 702.779606][T12875] infiniband s}z2: added ipvlan1 [ 702.785059][T12875] s}z2: rxe_create_cq: returned err = -12 [ 702.790846][T12875] infiniband s}z2: Couldn't create ib_mad CQ [ 702.796975][T12875] infiniband s}z2: Couldn't open port 1 [ 702.818418][T12875] RDS/IB: s}z2: added [ 702.822508][T12875] smc: adding ib device s}z2 with port count 1 [ 702.828693][T12875] smc: ib device s}z2 port 1 has pnetid [ 702.882211][T10034] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 703.491751][ T46] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 703.522808][T10034] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 703.539487][T10034] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 703.561473][T10034] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 703.570533][T10034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.607427][T12866] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 703.624364][T12884] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1902'. [ 703.644828][T10034] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 703.652233][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 703.667931][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 703.681600][ T46] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 703.732514][ T46] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 703.801200][ T46] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 703.866235][ T46] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 703.957961][ T46] usb 5-1: config 1 interface 0 has no altsetting 0 [ 703.965021][ T46] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 703.974977][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.023742][ T46] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 704.419658][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1904'. [ 705.051407][ T46] scsi host1: usb-storage 5-1:1.0 [ 705.237652][ T973] usb 6-1: USB disconnect, device number 14 [ 705.289031][T12908] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1900'. [ 706.197336][ T11] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 706.298958][ T11] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 706.476929][ T46] usb 5-1: USB disconnect, device number 26 [ 706.483131][T12894] sddr09: could not read card info [ 706.564267][T10158] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 706.571773][T10158] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 706.577909][T10158] sd 1:0:0:0: [sdb] Write Protect is off [ 706.597409][T10158] sd 1:0:0:0: [sdb] Asking for cache data failed [ 706.603870][T10158] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 706.612876][T10158] [ 706.615221][T10158] ====================================================== [ 706.622239][T10158] WARNING: possible circular locking dependency detected [ 706.629258][T10158] 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 Not tainted [ 706.636360][T10158] ------------------------------------------------------ [ 706.643357][T10158] kworker/u8:12/10158 is trying to acquire lock: [ 706.649679][T10158] ffff8880291ceae8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x3fa/0x830 [ 706.659253][T10158] [ 706.659253][T10158] but task is already holding lock: [ 706.666603][T10158] ffff8880291ce2b0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 706.677034][T10158] [ 706.677034][T10158] which lock already depends on the new lock. [ 706.677034][T10158] [ 706.687422][T10158] [ 706.687422][T10158] the existing dependency chain (in reverse order) is: [ 706.696427][T10158] [ 706.696427][T10158] -> #5 (&q->q_usage_counter(queue)#53){++++}-{0:0}: [ 706.705279][T10158] lock_acquire+0x1ed/0x550 [ 706.710306][T10158] blk_queue_enter+0xe1/0x600 [ 706.715515][T10158] blk_mq_alloc_request+0x4fa/0xaa0 [ 706.721233][T10158] scsi_execute_cmd+0x177/0x1090 [ 706.726684][T10158] read_capacity_10+0x256/0x9c0 [ 706.732048][T10158] sd_revalidate_disk+0x1066/0xbce0 [ 706.737756][T10158] sd_probe+0x9fa/0x1100 [ 706.742524][T10158] really_probe+0x2b8/0xad0 [ 706.747537][T10158] __driver_probe_device+0x1a2/0x390 [ 706.753332][T10158] driver_probe_device+0x50/0x430 [ 706.758865][T10158] __device_attach_driver+0x2d6/0x530 [ 706.764749][T10158] bus_for_each_drv+0x24e/0x2e0 [ 706.770112][T10158] __device_attach_async_helper+0x22d/0x300 [ 706.776514][T10158] async_run_entry_fn+0xa8/0x420 [ 706.781964][T10158] process_scheduled_works+0xa66/0x1840 [ 706.788021][T10158] worker_thread+0x870/0xd30 [ 706.793117][T10158] kthread+0x2f0/0x390 [ 706.797695][T10158] ret_from_fork+0x4b/0x80 [ 706.802620][T10158] ret_from_fork_asm+0x1a/0x30 [ 706.807904][T10158] [ 706.807904][T10158] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 706.815543][T10158] lock_acquire+0x1ed/0x550 [ 706.820555][T10158] __mutex_lock+0x1ac/0xee0 [ 706.825571][T10158] loop_reconfigure_limits+0x43f/0x900 [ 706.831538][T10158] lo_ioctl+0x1351/0x1f50 [ 706.836374][T10158] blkdev_ioctl+0x57d/0x6a0 [ 706.841394][T10158] __se_sys_ioctl+0xf5/0x170 [ 706.846498][T10158] do_syscall_64+0xf3/0x230 [ 706.851515][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.857922][T10158] [ 706.857922][T10158] -> #3 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 706.866523][T10158] lock_acquire+0x1ed/0x550 [ 706.871539][T10158] blk_mq_submit_bio+0x1536/0x2390 [ 706.877160][T10158] __submit_bio+0x2c6/0x560 [ 706.882171][T10158] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 706.888312][T10158] mpage_readahead+0x7da/0x930 [ 706.893587][T10158] read_pages+0x176/0x830 [ 706.898431][T10158] page_cache_ra_unbounded+0x797/0x8c0 [ 706.904401][T10158] filemap_get_pages+0x621/0x2540 [ 706.909941][T10158] filemap_splice_read+0x68e/0xef0 [ 706.915561][T10158] splice_direct_to_actor+0x4af/0xc80 [ 706.921442][T10158] do_splice_direct+0x289/0x3e0 [ 706.926800][T10158] do_sendfile+0x564/0x8a0 [ 706.931730][T10158] __se_sys_sendfile64+0x17c/0x1e0 [ 706.937349][T10158] do_syscall_64+0xf3/0x230 [ 706.942367][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.948775][T10158] [ 706.948775][T10158] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 706.957291][T10158] lock_acquire+0x1ed/0x550 [ 706.962303][T10158] down_read+0xb1/0xa40 [ 706.966973][T10158] page_cache_ra_unbounded+0x143/0x8c0 [ 706.972952][T10158] filemap_fault+0x82a/0x1950 [ 706.978138][T10158] __do_fault+0x135/0x460 [ 706.982981][T10158] handle_pte_fault+0x335a/0x68a0 [ 706.988518][T10158] handle_mm_fault+0x1053/0x1ad0 [ 706.993967][T10158] __get_user_pages+0x1c82/0x49e0 [ 706.999499][T10158] get_dump_page+0x155/0x2f0 [ 707.004602][T10158] dump_user_range+0x14d/0x970 [ 707.009884][T10158] elf_core_dump+0x3e9f/0x4790 [ 707.015159][T10158] do_coredump+0x229b/0x3100 [ 707.020263][T10158] get_signal+0x140b/0x1750 [ 707.025276][T10158] arch_do_signal_or_restart+0x96/0x860 [ 707.031333][T10158] irqentry_exit_to_user_mode+0x7e/0x250 [ 707.037481][T10158] exc_page_fault+0x590/0x8b0 [ 707.042670][T10158] asm_exc_page_fault+0x26/0x30 [ 707.048036][T10158] [ 707.048036][T10158] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 707.055589][T10158] lock_acquire+0x1ed/0x550 [ 707.060612][T10158] __might_fault+0xc6/0x120 [ 707.065628][T10158] _copy_from_user+0x2a/0xc0 [ 707.070734][T10158] blk_trace_ioctl+0x1ad/0x9a0 [ 707.076009][T10158] blkdev_ioctl+0x40c/0x6a0 [ 707.081022][T10158] __se_sys_ioctl+0xf5/0x170 [ 707.086123][T10158] do_syscall_64+0xf3/0x230 [ 707.091138][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.097546][T10158] [ 707.097546][T10158] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 707.105359][T10158] validate_chain+0x18ef/0x5920 [ 707.110722][T10158] __lock_acquire+0x1397/0x2100 [ 707.116081][T10158] lock_acquire+0x1ed/0x550 [ 707.121093][T10158] __mutex_lock+0x1ac/0xee0 [ 707.126106][T10158] blk_mq_init_sched+0x3fa/0x830 [ 707.131550][T10158] elevator_init_mq+0x20e/0x320 [ 707.136912][T10158] add_disk_fwnode+0x10d/0xf80 [ 707.142181][T10158] sd_probe+0xba6/0x1100 [ 707.146933][T10158] really_probe+0x2b8/0xad0 [ 707.151947][T10158] __driver_probe_device+0x1a2/0x390 [ 707.157743][T10158] driver_probe_device+0x50/0x430 [ 707.163280][T10158] __device_attach_driver+0x2d6/0x530 [ 707.169161][T10158] bus_for_each_drv+0x24e/0x2e0 [ 707.174525][T10158] __device_attach_async_helper+0x22d/0x300 [ 707.180933][T10158] async_run_entry_fn+0xa8/0x420 [ 707.186383][T10158] process_scheduled_works+0xa66/0x1840 [ 707.192441][T10158] worker_thread+0x870/0xd30 [ 707.197540][T10158] kthread+0x2f0/0x390 [ 707.202117][T10158] ret_from_fork+0x4b/0x80 [ 707.207039][T10158] ret_from_fork_asm+0x1a/0x30 [ 707.212319][T10158] [ 707.212319][T10158] other info that might help us debug this: [ 707.212319][T10158] [ 707.222534][T10158] Chain exists of: [ 707.222534][T10158] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#53 [ 707.222534][T10158] [ 707.236963][T10158] Possible unsafe locking scenario: [ 707.236963][T10158] [ 707.244405][T10158] CPU0 CPU1 [ 707.249752][T10158] ---- ---- [ 707.255100][T10158] lock(&q->q_usage_counter(queue)#53); [ 707.260727][T10158] lock(&q->limits_lock); [ 707.267654][T10158] lock(&q->q_usage_counter(queue)#53); [ 707.275802][T10158] lock(&q->debugfs_mutex); [ 707.280383][T10158] [ 707.280383][T10158] *** DEADLOCK *** [ 707.280383][T10158] [ 707.288524][T10158] 4 locks held by kworker/u8:12/10158: [ 707.293971][T10158] #0: ffff88801baef148 ((wq_completion)async){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 707.304846][T10158] #1: ffffc9000cd87d00 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 707.316673][T10158] #2: ffff88806237a378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0xfc/0x300 [ 707.327020][T10158] #3: ffff8880291ce2b0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 707.337893][T10158] [ 707.337893][T10158] stack backtrace: [ 707.343765][T10158] CPU: 0 UID: 0 PID: 10158 Comm: kworker/u8:12 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 707.354772][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 707.364815][T10158] Workqueue: async async_run_entry_fn [ 707.370186][T10158] Call Trace: [ 707.373454][T10158] [ 707.376377][T10158] dump_stack_lvl+0x241/0x360 [ 707.381058][T10158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.386273][T10158] ? __pfx__printk+0x10/0x10 [ 707.390861][T10158] print_circular_bug+0x13a/0x1b0 [ 707.395880][T10158] check_noncircular+0x36a/0x4a0 [ 707.400810][T10158] ? __pfx_check_noncircular+0x10/0x10 [ 707.406260][T10158] ? lockdep_lock+0x123/0x2b0 [ 707.410928][T10158] validate_chain+0x18ef/0x5920 [ 707.415791][T10158] ? validate_chain+0x11e/0x5920 [ 707.420728][T10158] ? preempt_count_add+0x93/0x190 [ 707.425746][T10158] ? __pfx_validate_chain+0x10/0x10 [ 707.430935][T10158] ? stack_trace_save+0x118/0x1d0 [ 707.435953][T10158] ? unwind_next_frame+0x18e6/0x22d0 [ 707.441226][T10158] ? deref_stack_reg+0x17c/0x210 [ 707.446155][T10158] ? preempt_count_add+0x93/0x190 [ 707.451174][T10158] ? unwind_next_frame+0x193b/0x22d0 [ 707.456450][T10158] ? ret_from_fork_asm+0x1a/0x30 [ 707.461381][T10158] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 707.467529][T10158] ? arch_stack_walk+0x11c/0x150 [ 707.472457][T10158] ? mark_lock+0x9a/0x360 [ 707.476778][T10158] __lock_acquire+0x1397/0x2100 [ 707.481625][T10158] lock_acquire+0x1ed/0x550 [ 707.486118][T10158] ? blk_mq_init_sched+0x3fa/0x830 [ 707.491222][T10158] ? __pfx_lock_acquire+0x10/0x10 [ 707.496237][T10158] ? __device_attach_driver+0x2d6/0x530 [ 707.501772][T10158] ? bus_for_each_drv+0x24e/0x2e0 [ 707.506785][T10158] ? __pfx___might_resched+0x10/0x10 [ 707.512065][T10158] ? kthread+0x2f0/0x390 [ 707.516299][T10158] ? ret_from_fork+0x4b/0x80 [ 707.520879][T10158] ? ret_from_fork_asm+0x1a/0x30 [ 707.525814][T10158] __mutex_lock+0x1ac/0xee0 [ 707.530312][T10158] ? blk_mq_init_sched+0x3fa/0x830 [ 707.535419][T10158] ? __asan_memset+0x23/0x50 [ 707.540000][T10158] ? lockdep_init_map_type+0xa1/0x910 [ 707.545359][T10158] ? blk_mq_init_sched+0x3fa/0x830 [ 707.550459][T10158] ? __pfx___mutex_lock+0x10/0x10 [ 707.555478][T10158] ? blk_queue_flag_set+0x24/0x40 [ 707.560498][T10158] blk_mq_init_sched+0x3fa/0x830 [ 707.565425][T10158] ? percpu_ref_is_zero+0xe9/0x100 [ 707.570532][T10158] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 707.575975][T10158] ? blk_mq_cancel_work_sync+0xf3/0x140 [ 707.581516][T10158] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 707.587488][T10158] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 707.593373][T10158] ? add_disk_fwnode+0x10d/0xf80 [ 707.598297][T10158] elevator_init_mq+0x20e/0x320 [ 707.603146][T10158] add_disk_fwnode+0x10d/0xf80 [ 707.607919][T10158] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.613122][T10158] ? lockdep_hardirqs_on+0x99/0x150 [ 707.618316][T10158] sd_probe+0xba6/0x1100 [ 707.622553][T10158] ? __pfx_sd_probe+0x10/0x10 [ 707.627220][T10158] really_probe+0x2b8/0xad0 [ 707.631720][T10158] __driver_probe_device+0x1a2/0x390 [ 707.636994][T10158] driver_probe_device+0x50/0x430 [ 707.642008][T10158] __device_attach_driver+0x2d6/0x530 [ 707.647369][T10158] bus_for_each_drv+0x24e/0x2e0 [ 707.652212][T10158] ? __pfx___device_attach_driver+0x10/0x10 [ 707.658092][T10158] ? __pfx_bus_for_each_drv+0x10/0x10 [ 707.663458][T10158] ? ktime_get+0x3e/0x1f0 [ 707.667779][T10158] ? lockdep_hardirqs_on+0x99/0x150 [ 707.672968][T10158] __device_attach_async_helper+0x22d/0x300 [ 707.678851][T10158] ? __pfx___device_attach_async_helper+0x10/0x10 [ 707.685257][T10158] ? process_scheduled_works+0x976/0x1840 [ 707.690967][T10158] ? read_tsc+0x9/0x20 [ 707.695029][T10158] ? ktime_get+0x1c5/0x1f0 [ 707.699438][T10158] ? __pfx___device_attach_async_helper+0x10/0x10 [ 707.705840][T10158] async_run_entry_fn+0xa8/0x420 [ 707.710769][T10158] ? process_scheduled_works+0x976/0x1840 [ 707.716485][T10158] process_scheduled_works+0xa66/0x1840 [ 707.722035][T10158] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.728013][T10158] ? assign_work+0x364/0x3d0 [ 707.732599][T10158] worker_thread+0x870/0xd30 [ 707.737178][T10158] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 707.743061][T10158] ? __kthread_parkme+0x169/0x1d0 [ 707.748076][T10158] ? __pfx_worker_thread+0x10/0x10 [ 707.753175][T10158] kthread+0x2f0/0x390 [ 707.757233][T10158] ? __pfx_worker_thread+0x10/0x10 [ 707.762332][T10158] ? __pfx_kthread+0x10/0x10 [ 707.766912][T10158] ret_from_fork+0x4b/0x80 [ 707.771318][T10158] ? __pfx_kthread+0x10/0x10 [ 707.775903][T10158] ret_from_fork_asm+0x1a/0x30 [ 707.780663][T10158] [ 707.825630][T10158] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 708.022042][T12937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.534347][T10960] udevd[10960]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 708.569598][T10962] udevd[10962]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 713.681503][ T5827] Bluetooth: hci1: command 0x0406 tx timeout