last executing test programs: 24.108269358s ago: executing program 0 (id=1284): mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x89a0, &(0x7f0000000040)='.') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x1, 0x2, 0x0, 0x8, 0x30, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x189, 0x38, &(0x7f0000000180)=""/56, 0x40f00, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4, 0x7, 0x80000001}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r2], &(0x7f0000000380)=[{0x0, 0x3, 0x7, 0x2}, {0x1, 0x5, 0x7, 0x6}, {0x5, 0x4, 0xa, 0x2}, {0x0, 0x1, 0xe, 0x3}], 0x10, 0x9, @void, @value}, 0x94) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x7fffffff, 0x7, 0x3) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 23.437292553s ago: executing program 0 (id=1286): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x67, 0x20, 0x401}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000b00)) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1da}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc", 0x89}, {&(0x7f0000000580)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb837033927039b7de06e09c0dfd89a9db1973eae", 0x2f}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f4", 0xab}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000000780)="8d75938ba9bc69841009f07eee392592a6014e55025d4c6612fbb793e3ed0100000002529226d68c755f1ba09d1296de95a014de768bbdc3cba9893b5a7b10c3d6ff0e5bcb88c56bd0b17c6e30d75fe785b6a2eec3e3d1ded3a5ee7c509223fb6d99f05e0a970fde9fbe3081162fd6e48744c4dd621bbb79b8ca12d3ee4cf1088441aa54a7a1cc0370366f06f8c5c7c86fc31525ef", 0x95}, {&(0x7f0000001300)="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", 0x179}], 0x5}}], 0x3, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 20.62510327s ago: executing program 0 (id=1292): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) msgget$private(0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x1000, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d0e000073080002"], 0x78}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3dc9fffbffffffffff62616c2c"]) 18.894100006s ago: executing program 2 (id=1296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x16, 0x7c, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x7, 0x0, 0x4, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 17.807508843s ago: executing program 0 (id=1298): r0 = syz_open_dev$usbfs(0x0, 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xa2000003) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303, 0x36}, "5ef40e7ab852acb6", "582f7cccfda6a677c372675d88becd932053048ac5a438b0e48fdb55bdc83053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) madvise(&(0x7f0000a5a000/0x1000)=nil, 0x1000, 0x19) 15.945782484s ago: executing program 2 (id=1304): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380), 0x0, 0x3e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x2000400) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800015800000000000000000000000095c155987c68f937ce6c395823b7075369000000000000000999e241526e9c7911aa97fc303504c6ad92a116b1af62f78704c7af2bce783db485fe8825964620a7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES32], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0) socket(0x10, 0x4, 0x3) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 13.675194295s ago: executing program 0 (id=1309): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x1000, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d0e000073080002"], 0x78}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3dc9fffbffffffffff62616c2c"]) 12.225574594s ago: executing program 0 (id=1313): socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@deltclass={0x40, 0x29, 0x309, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xfff3, 0x6}, {0x6, 0xd}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x99d3}}}, @tclass_kind_options=@c_red={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x18100, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000140)={r8, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x1, 0xf9a, 0x4, r8}, &(0x7f0000000280)=0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="ab"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x10, &(0x7f0000001280), 0x4) write$cgroup_subtree(r10, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091"], 0xfe33) ioctl$sock_proto_private(r9, 0x89e7, 0x0) 12.172266372s ago: executing program 4 (id=1315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000180)=0x2, 0x4) userfaultfd(0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7d, 0x0, 0x5}) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) lseek(r6, 0xffffffff, 0x0) 11.183467219s ago: executing program 2 (id=1317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x269) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000002000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00"/135]}, 0xff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c0000000e0a010200000000002000000200000608000440000000032c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a01040000000000000000010000000c000640000000000000000378000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c00078008000100bb91dc7808000640000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0x114}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x7, &(0x7f0000000000)={0x1, 0x8c}) 9.273668144s ago: executing program 2 (id=1319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x67, 0x20, 0x401}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000b00)) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1da}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc", 0x89}, {&(0x7f0000000580)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb837033927039b7de06e09c0dfd89a9db1973eae", 0x2f}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f4", 0xab}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000001300)="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", 0x179}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 9.184037692s ago: executing program 4 (id=1322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}]}, 0x24}}, 0x0) 6.769334134s ago: executing program 2 (id=1324): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380), 0x0, 0x3e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x2000400) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800015800000000000000000000000095c155987c68f937ce6c395823b7075369000000000000000999e241526e9c7911aa97fc303504c6ad92a116b1af62f78704c7af2bce783db485fe8825964620a7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES32], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0) socket(0x10, 0x4, 0x3) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 6.732705547s ago: executing program 1 (id=1325): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 5.446786349s ago: executing program 4 (id=1326): write$smackfs_label(0xffffffffffffffff, 0x0, 0x89) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x2, 'aead\x00', 0x0, 0x0, 'pcrypt(essiv(gcm_base(ctr(aes-aesni),ghash-generic),hmac(sha256-'}, 0x58) r3 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x24008040, &(0x7f0000000100)={0x2, 0x4e25, @multicast2}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd98, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7a8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='fsi_master_acf_cmd_abs_addr\x00', 0xffffffffffffffff, 0x0, 0xfff}, 0x18) 5.324314253s ago: executing program 1 (id=1327): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a800008100000008"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4f8cad880499afeee309c31888a8", 0x12, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 5.323688528s ago: executing program 3 (id=1328): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0xa, 0x0, @dev, @rand_addr=' \x01\x00', 0x0, 0x1, 0xfffffffe}}) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x73) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="cc229765ef6e922a6eb8bf7499196d457c842ba98169cf566a43178d10c31ae8c4e5792a", @ANYRES64=0x0], 0x10) socket$kcm(0xa, 0x2, 0x73) r10 = dup2(r5, r7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r7, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r7, &(0x7f0000002300)="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", &(0x7f0000000200)=""/10, 0x4}, 0x20) timer_create(0x5, &(0x7f00000021c0)={0x0, 0x1e, 0x4, @thr={0x0, 0x0}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x5, [0x8001, 0x83, 0x2, 0x8000, 0x800]}, &(0x7f0000000080)=0x12) 5.061064145s ago: executing program 1 (id=1329): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 4) 5.01336648s ago: executing program 3 (id=1330): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='fd/3\x00') (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x250, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x20, 0x0, {}, {}, {0x0, 0x2, 0xffffffff}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfcc2bb8dafb2b72d}) close_range(r0, r1, 0x0) 4.914855709s ago: executing program 3 (id=1331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, &(0x7f00000001c0)}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) writev(r5, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000000080)='j', 0x1}], 0x2) 4.679498518s ago: executing program 1 (id=1332): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x4000600) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000200)={0xd7, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x7, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9) 3.871305303s ago: executing program 4 (id=1333): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x11, r0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (fail_nth: 4) 3.783298777s ago: executing program 3 (id=1334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x67, 0x20, 0x401}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000b00)) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1da}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc", 0x89}, {&(0x7f0000000580)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb837033927039b7de06e09c0dfd89a9db1973eae", 0x2f}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f4", 0xab}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000001300)="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", 0x179}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 3.414876152s ago: executing program 4 (id=1335): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 2.03580751s ago: executing program 1 (id=1336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@delnexthop={0x18, 0x69, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf010000001aa477030000000000000000eb000000000000", @ANYRES32=r8, @ANYBLOB='\f\x00X\x00{\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x4004) writev(r7, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000000080)='j', 0x1}], 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x97, 0x44810, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @mcast1}, 0x1c) 2.035177528s ago: executing program 2 (id=1337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x67, 0x20, 0x401}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000b00)) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1da}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc", 0x89}, {&(0x7f0000000580)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb837033927039b7de06e09c0dfd89a9db1973eae", 0x2f}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f4", 0xab}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000000780)="8d75938ba9bc69841009f07eee392592a6014e55025d4c6612fbb793e3ed0100000002529226d68c755f1ba09d1296de95a014de768bbdc3cba9893b5a7b10c3d6ff0e5bcb88c56bd0b17c6e30d75fe785b6a2eec3e3d1ded3a5ee7c509223fb6d99f05e0a970fde9fbe3081162fd6e48744c4dd621bbb79b8ca12d3ee4cf1088441aa54a7a1cc0370366f06f8c5c7c86fc31525ef", 0x95}, {&(0x7f0000001300)="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", 0x179}], 0x5}}], 0x3, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 2.03443849s ago: executing program 3 (id=1338): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 1.174052214s ago: executing program 4 (id=1339): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001"], 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (fail_nth: 3) 63.148586ms ago: executing program 1 (id=1340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, &(0x7f00000001c0)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@delnexthop={0x18, 0x69, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf010000001aa477030000000000000000eb000000000000", @ANYRES32=r6, @ANYBLOB='\f\x00X\x00{\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x4004) sendto$inet6(r1, 0x0, 0x97, 0x44810, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 3 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): ce number: 219 but max is 0 [ 362.796570][ T8] usb 1-1: config 0 has no interface number 0 [ 362.837062][ T8] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 362.846151][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.867102][ T8] usb 1-1: Product: syz [ 362.871309][ T8] usb 1-1: Manufacturer: syz [ 362.875914][ T8] usb 1-1: SerialNumber: syz [ 362.902493][ T8] usb 1-1: config 0 descriptor?? [ 363.484538][ T8] usb 1-1: can't set config #0, error -71 [ 363.497385][ T5886] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 363.559998][ T8] usb 1-1: USB disconnect, device number 2 [ 363.757414][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 363.766990][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 363.791941][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 363.804244][ T5886] usb 2-1: can't read configurations, error -22 [ 363.825367][ T8531] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 364.590579][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 364.817596][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 364.828942][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 364.838593][ T5886] usb 2-1: can't read configurations, error -22 [ 364.854623][ T5886] usb usb2-port1: attempt power cycle [ 365.198847][ T5886] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 365.243324][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 365.267729][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 365.276235][ T5886] usb 2-1: can't read configurations, error -22 [ 365.422611][ T5886] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 365.468180][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 365.475355][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 365.490913][ T5886] usb 2-1: can't read configurations, error -22 [ 365.511841][ T5886] usb usb2-port1: unable to enumerate USB device [ 365.532123][ T8556] FAULT_INJECTION: forcing a failure. [ 365.532123][ T8556] name failslab, interval 1, probability 0, space 0, times 0 [ 365.551748][ T8556] CPU: 0 UID: 0 PID: 8556 Comm: syz.4.756 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 365.562091][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 365.572185][ T8556] Call Trace: [ 365.575483][ T8556] [ 365.578429][ T8556] dump_stack_lvl+0x241/0x360 [ 365.583142][ T8556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.588369][ T8556] ? __pfx__printk+0x10/0x10 [ 365.592957][ T8556] ? __kmalloc_noprof+0xb0/0x400 [ 365.597892][ T8556] ? __pfx___might_resched+0x10/0x10 [ 365.603185][ T8556] should_fail_ex+0x3b0/0x4e0 [ 365.607872][ T8556] ? qrtr_tun_write_iter+0xc0/0x170 [ 365.613097][ T8556] should_failslab+0xac/0x100 [ 365.617802][ T8556] ? qrtr_tun_write_iter+0xc0/0x170 [ 365.623023][ T8556] __kmalloc_noprof+0xd8/0x400 [ 365.627809][ T8556] qrtr_tun_write_iter+0xc0/0x170 [ 365.632849][ T8556] vfs_write+0xaeb/0xd30 [ 365.637127][ T8556] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 365.642790][ T8556] ? __pfx_vfs_write+0x10/0x10 [ 365.647583][ T8556] ? __fget_files+0x2a/0x410 [ 365.652208][ T8556] ? __fget_files+0x2a/0x410 [ 365.656832][ T8556] ksys_write+0x18f/0x2b0 [ 365.661199][ T8556] ? __pfx_ksys_write+0x10/0x10 [ 365.666070][ T8556] ? do_syscall_64+0x100/0x230 [ 365.670856][ T8556] ? do_syscall_64+0xb6/0x230 [ 365.675554][ T8556] do_syscall_64+0xf3/0x230 [ 365.680078][ T8556] ? clear_bhb_loop+0x35/0x90 [ 365.684774][ T8556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.690685][ T8556] RIP: 0033:0x7fb31a97e819 [ 365.695121][ T8556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.714754][ T8556] RSP: 002b:00007fb31b833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.723205][ T8556] RAX: ffffffffffffffda RBX: 00007fb31ab35fa0 RCX: 00007fb31a97e819 [ 365.731208][ T8556] RDX: 00000000000000c8 RSI: 0000000020000200 RDI: 0000000000000003 [ 365.739193][ T8556] RBP: 00007fb31b833090 R08: 0000000000000000 R09: 0000000000000000 [ 365.747207][ T8556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.755188][ T8556] R13: 0000000000000000 R14: 00007fb31ab35fa0 R15: 00007ffe673754a8 [ 365.763210][ T8556] [ 366.798047][ T8573] delete_channel: no stack [ 366.997099][ T5886] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 367.041315][ T8578] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 367.059496][ T8578] netlink: 36 bytes leftover after parsing attributes in process `syz.2.763'. [ 367.092777][ T8578] x_tables: duplicate underflow at hook 2 [ 367.107715][ T8578] autofs: Bad value for 'fd' [ 367.137012][ T5886] usb 4-1: device descriptor read/64, error -71 [ 367.215530][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 367.255721][ T8585] batman_adv: batadv1: Adding interface: netdevsim0 [ 367.272156][ T8585] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.339606][ T8585] batman_adv: batadv1: Interface activated: netdevsim0 [ 367.376974][ T5886] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 367.598027][ T5886] usb 4-1: device descriptor read/64, error -71 [ 368.597022][ T5886] usb usb4-port1: attempt power cycle [ 369.114074][ T5886] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 369.261051][ T8612] process 'syz.0.775' launched './file1' with NULL argv: empty string added [ 369.289446][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 369.467422][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 369.482363][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.640191][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.650509][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.660734][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.673812][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.683043][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.280649][ T5886] usb 4-1: device not accepting address 9, error -71 [ 371.374988][ T25] usb 5-1: usb_control_msg returned -32 [ 371.381069][ T25] usbtmc 5-1:16.0: can't read capabilities [ 371.478189][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 371.632287][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.780'. [ 372.405885][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 372.417816][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.780'. [ 372.439815][ T8635] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 372.475324][ T8] usb 5-1: USB disconnect, device number 3 [ 373.530753][ T8650] FAULT_INJECTION: forcing a failure. [ 373.530753][ T8650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.552344][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.2.783 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 373.562649][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 373.572728][ T8650] Call Trace: [ 373.576018][ T8650] [ 373.578963][ T8650] dump_stack_lvl+0x241/0x360 [ 373.583669][ T8650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.588895][ T8650] ? __pfx__printk+0x10/0x10 [ 373.593507][ T8650] ? __pfx_lock_release+0x10/0x10 [ 373.598554][ T8650] should_fail_ex+0x3b0/0x4e0 [ 373.603247][ T8650] set_fd_set+0x3a/0xa0 [ 373.607409][ T8650] core_sys_select+0x72c/0x910 [ 373.612188][ T8650] ? __pfx_core_sys_select+0x10/0x10 [ 373.617474][ T8650] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 373.623468][ T8650] ? __pfx_vfs_write+0x10/0x10 [ 373.628242][ T8650] ? __pfx_set_user_sigmask+0x10/0x10 [ 373.633627][ T8650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.639602][ T8650] ? __fget_files+0x2a/0x410 [ 373.644194][ T8650] __se_sys_pselect6+0x323/0x3f0 [ 373.649139][ T8650] ? __pfx___se_sys_pselect6+0x10/0x10 [ 373.654614][ T8650] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.660932][ T8650] ? do_syscall_64+0x100/0x230 [ 373.665691][ T8650] ? __x64_sys_pselect6+0x21/0xf0 [ 373.670710][ T8650] do_syscall_64+0xf3/0x230 [ 373.675206][ T8650] ? clear_bhb_loop+0x35/0x90 [ 373.679878][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.685766][ T8650] RIP: 0033:0x7fefd057e819 [ 373.690181][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.709779][ T8650] RSP: 002b:00007fefd138c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 373.718191][ T8650] RAX: ffffffffffffffda RBX: 00007fefd0735fa0 RCX: 00007fefd057e819 [ 373.726175][ T8650] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000040 [ 373.734142][ T8650] RBP: 00007fefd138c090 R08: 0000000000000000 R09: 0000000000000000 [ 373.742191][ T8650] R10: 0000000020000680 R11: 0000000000000246 R12: 0000000000000001 [ 373.750157][ T8650] R13: 0000000000000000 R14: 00007fefd0735fa0 R15: 00007ffd275ed578 [ 373.758136][ T8650] [ 373.761303][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.214296][ T8665] tty tty29: ldisc open failed (-12), clearing slot 28 [ 377.494001][ T8683] xt_hashlimit: max too large, truncated to 1048576 [ 377.727051][ T5886] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 378.066966][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 378.096505][ T5886] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 378.174172][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.319007][ T5886] usb 5-1: Product: syz [ 378.333109][ T5886] usb 5-1: Manufacturer: syz [ 378.348019][ T5886] usb 5-1: SerialNumber: syz [ 378.370387][ T5886] usb 5-1: config 0 descriptor?? [ 378.391589][ T5886] gspca_main: sq930x-2.14.0 probing 2770:930c [ 378.911186][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.911727][ T5886] gspca_sq930x: reg_r 001f failed -110 [ 378.917839][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.974117][ T5886] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 379.241564][ T5888] usb 5-1: USB disconnect, device number 4 [ 380.466197][ T8716] FAULT_INJECTION: forcing a failure. [ 380.466197][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 380.479255][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.1.801 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 380.489508][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 380.499596][ T8716] Call Trace: [ 380.502893][ T8716] [ 380.505844][ T8716] dump_stack_lvl+0x241/0x360 [ 380.510550][ T8716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.515776][ T8716] ? __pfx__printk+0x10/0x10 [ 380.520377][ T8716] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 380.525931][ T8716] ? __pfx___might_resched+0x10/0x10 [ 380.531257][ T8716] should_fail_ex+0x3b0/0x4e0 [ 380.535945][ T8716] ? mas_alloc_nodes+0x26c/0x840 [ 380.540886][ T8716] should_failslab+0xac/0x100 [ 380.545569][ T8716] ? mas_alloc_nodes+0x26c/0x840 [ 380.550508][ T8716] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 380.555888][ T8716] mas_alloc_nodes+0x26c/0x840 [ 380.560661][ T8716] mas_preallocate+0x554/0x8c0 [ 380.565447][ T8716] ? __pfx_mas_preallocate+0x10/0x10 [ 380.570756][ T8716] ? __mas_set_range+0x133/0x3c0 [ 380.575702][ T8716] __split_vma+0x302/0xc50 [ 380.580132][ T8716] ? __pfx___split_vma+0x10/0x10 [ 380.585086][ T8716] vms_gather_munmap_vmas+0x2ee/0x15d0 [ 380.590571][ T8716] ? mtree_range_walk+0x6fd/0x8e0 [ 380.595606][ T8716] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 380.601514][ T8716] ? mas_find+0x8c0/0xbb0 [ 380.605855][ T8716] mmap_region+0x938/0x23f0 [ 380.610489][ T8716] ? __pfx_mmap_region+0x10/0x10 [ 380.615438][ T8716] ? __asan_memset+0x23/0x50 [ 380.620036][ T8716] ? process_measurement+0x3ca/0x1fb0 [ 380.625460][ T8716] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 380.632065][ T8716] ? bpf_lsm_mmap_addr+0x9/0x10 [ 380.636922][ T8716] ? security_mmap_addr+0x6f/0x250 [ 380.642047][ T8716] do_mmap+0x8f0/0x1000 [ 380.646219][ T8716] ? __pfx_do_mmap+0x10/0x10 [ 380.650814][ T8716] ? __pfx_down_write_killable+0x10/0x10 [ 380.656450][ T8716] ? __pfx_lock_acquire+0x10/0x10 [ 380.661480][ T8716] vm_mmap_pgoff+0x1dd/0x3d0 [ 380.666083][ T8716] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 380.671195][ T8716] ? __fget_files+0x2a/0x410 [ 380.675793][ T8716] ? __fget_files+0x395/0x410 [ 380.680474][ T8716] ? __fget_files+0x2a/0x410 [ 380.685074][ T8716] ksys_mmap_pgoff+0x4eb/0x720 [ 380.689844][ T8716] ? __x64_sys_mmap+0x7f/0x140 [ 380.694616][ T8716] do_syscall_64+0xf3/0x230 [ 380.699121][ T8716] ? clear_bhb_loop+0x35/0x90 [ 380.703808][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.709708][ T8716] RIP: 0033:0x7f7a0eb7e819 [ 380.714128][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.733746][ T8716] RSP: 002b:00007f7a0c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 380.742170][ T8716] RAX: ffffffffffffffda RBX: 00007f7a0ed36080 RCX: 00007f7a0eb7e819 [ 380.750147][ T8716] RDX: 000000000000000f RSI: 0000000000003000 RDI: 000000002001a000 [ 380.758120][ T8716] RBP: 00007f7a0c9f6090 R08: 0000000000000007 R09: 0000000000000000 [ 380.766091][ T8716] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001 [ 380.774060][ T8716] R13: 0000000000000000 R14: 00007f7a0ed36080 R15: 00007ffe37aa07d8 [ 380.782054][ T8716] [ 380.790423][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 381.666992][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 381.673877][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.684414][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.697581][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.755625][ T5886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 381.765597][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.787636][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 381.805371][ T5886] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 381.815447][ T5886] usb 3-1: Manufacturer: syz [ 381.841827][ T5886] usb 3-1: config 0 descriptor?? [ 381.906924][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 382.069416][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.089924][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 382.133758][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.172347][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 382.205080][ T8] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 382.216890][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.235195][ T5886] rc_core: IR keymap rc-hauppauge not found [ 382.241528][ T8] usb 5-1: Product: syz [ 382.246589][ T5886] Registered IR keymap rc-empty [ 382.256854][ T8] usb 5-1: Manufacturer: syz [ 382.261486][ T8] usb 5-1: SerialNumber: syz [ 382.267321][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.285144][ T8] usb 5-1: config 0 descriptor?? [ 382.912209][ T8732] tmpfs: Unknown parameter 'hugf' [ 383.245273][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 383.257695][ T8] usb 5-1: ucan: probing device on interface #0 [ 383.264094][ T8] usb 5-1: ucan: invalid endpoint configuration [ 383.271784][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 383.294978][ T8] usb 5-1: ucan: probe failed; try to update the device firmware [ 384.051398][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 384.065314][ T8] usb 5-1: USB disconnect, device number 5 [ 384.094034][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.157551][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.207229][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.228254][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.271611][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.310366][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.369615][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.426934][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.460811][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.497029][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 384.540782][ T5886] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 384.586998][ T5886] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 384.650034][ T5886] usb 3-1: USB disconnect, device number 4 [ 384.899249][ T8752] netlink: 76 bytes leftover after parsing attributes in process `syz.1.807'. [ 384.934673][ T8752] : entered promiscuous mode [ 385.433599][ T8754] FAULT_INJECTION: forcing a failure. [ 385.433599][ T8754] name failslab, interval 1, probability 0, space 0, times 0 [ 385.534801][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.0.814 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 385.545096][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 385.555183][ T8754] Call Trace: [ 385.558477][ T8754] [ 385.561417][ T8754] dump_stack_lvl+0x241/0x360 [ 385.566120][ T8754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.571334][ T8754] ? __pfx__printk+0x10/0x10 [ 385.575939][ T8754] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 385.581507][ T8754] ? __pfx___might_resched+0x10/0x10 [ 385.586813][ T8754] should_fail_ex+0x3b0/0x4e0 [ 385.591509][ T8754] ? getname_flags+0xb7/0x540 [ 385.596204][ T8754] should_failslab+0xac/0x100 [ 385.600897][ T8754] ? getname_flags+0xb7/0x540 [ 385.605596][ T8754] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 385.610983][ T8754] getname_flags+0xb7/0x540 [ 385.615508][ T8754] user_path_at+0x24/0x60 [ 385.619861][ T8754] __se_sys_mount+0x297/0x3c0 [ 385.624568][ T8754] ? __pfx___se_sys_mount+0x10/0x10 [ 385.629786][ T8754] ? do_syscall_64+0x100/0x230 [ 385.634564][ T8754] ? __x64_sys_mount+0x20/0xc0 [ 385.639438][ T8754] do_syscall_64+0xf3/0x230 [ 385.643956][ T8754] ? clear_bhb_loop+0x35/0x90 [ 385.648664][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.654567][ T8754] RIP: 0033:0x7f369917e819 [ 385.659000][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.678613][ T8754] RSP: 002b:00007f3699ff8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.687045][ T8754] RAX: ffffffffffffffda RBX: 00007f3699335fa0 RCX: 00007f369917e819 [ 385.695029][ T8754] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000000 [ 385.703008][ T8754] RBP: 00007f3699ff8090 R08: 0000000020000180 R09: 0000000000000000 [ 385.710990][ T8754] R10: 00000000002a00a9 R11: 0000000000000246 R12: 0000000000000001 [ 385.718967][ T8754] R13: 0000000000000000 R14: 00007f3699335fa0 R15: 00007ffc585e0758 [ 385.726968][ T8754] [ 386.850178][ T8776] FAULT_INJECTION: forcing a failure. [ 386.850178][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 386.863417][ T46] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 386.894486][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.1.822 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 386.904751][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 386.914800][ T8776] Call Trace: [ 386.918091][ T8776] [ 386.921039][ T8776] dump_stack_lvl+0x241/0x360 [ 386.925758][ T8776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.930983][ T8776] ? __pfx__printk+0x10/0x10 [ 386.935567][ T8776] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 386.941022][ T8776] ? __pfx___might_resched+0x10/0x10 [ 386.946309][ T8776] should_fail_ex+0x3b0/0x4e0 [ 386.950982][ T8776] should_failslab+0xac/0x100 [ 386.955664][ T8776] ? __se_sys_mount+0x15a/0x3c0 [ 386.960532][ T8776] __kmalloc_cache_noprof+0x6c/0x2c0 [ 386.965804][ T8776] ? memdup_user+0x9f/0xc0 [ 386.970214][ T8776] __se_sys_mount+0x15a/0x3c0 [ 386.974877][ T8776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 386.980845][ T8776] ? __pfx___se_sys_mount+0x10/0x10 [ 386.986033][ T8776] ? do_syscall_64+0x100/0x230 [ 386.990799][ T8776] ? __x64_sys_mount+0x20/0xc0 [ 386.995554][ T8776] do_syscall_64+0xf3/0x230 [ 387.000051][ T8776] ? clear_bhb_loop+0x35/0x90 [ 387.004723][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.010607][ T8776] RIP: 0033:0x7f7a0eb7e819 [ 387.015006][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.034607][ T8776] RSP: 002b:00007f7a0f8ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 387.043116][ T8776] RAX: ffffffffffffffda RBX: 00007f7a0ed35fa0 RCX: 00007f7a0eb7e819 [ 387.051093][ T8776] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 387.059058][ T8776] RBP: 00007f7a0f8ae090 R08: 00000000200003c0 R09: 0000000000000000 [ 387.067030][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.075003][ T8776] R13: 0000000000000000 R14: 00007f7a0ed35fa0 R15: 00007ffe37aa07d8 [ 387.082981][ T8776] [ 387.284618][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 387.297607][ T46] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 387.857424][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.865918][ T46] usb 3-1: Product: ࠫ [ 387.870668][ T46] usb 3-1: Manufacturer: 罵鹭鸒ᦩᴽ卮謗识裛␅࿓夘ጶ葢풶㝵紖ᖄ簣ֺ딑ኾ湏黷移㿷鹼⢡ꕠ㌗韝ꖵ莇ᰣ։퐏鬣㠅岤믨矨뼢᳾壦읝 [ 387.888615][ T46] usb 3-1: SerialNumber: ஸ鳇迆⪇롘⦣醄㜆嗾벶䇐灨㚚❒凥约᰺㨂釿熠ꩫሢ텤ࢵ⧣꒷⦨㟆躟굋毫듦깢찭ꙋ쯼ᅡ뮸롼ﲼ픐줶랙䊽ﬞᗌꧣᰩୄ喾忚宇餽詹䉇ᱜ頜摴奴縭㺺趕렃鏳敉貿뺻┺Ꙛᦵ喇锇⾞⹨钤촃贈됧눛厵륀絗 [ 388.011843][ T8786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.826'. [ 388.015264][ T54] Bluetooth: min 3 > max 0 [ 388.751609][ T8805] netlink: 76 bytes leftover after parsing attributes in process `syz.1.831'. [ 388.823043][ T46] usbhid 3-1:1.0: can't add hid device: -71 [ 388.832721][ T46] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 388.847272][ T8805] openvswitch: : Dropping previously announced user features [ 388.874387][ T46] usb 3-1: USB disconnect, device number 5 [ 389.431811][ T8820] netlink: 52 bytes leftover after parsing attributes in process `syz.1.834'. [ 389.519963][ T8800] ALSA: mixer_oss: invalid OSS volume 'j' [ 390.107870][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 390.996854][ T5886] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 392.067325][ T29] audit: type=1326 audit(1732135877.402:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8833 comm="syz.2.838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefd057e819 code=0x0 [ 392.248623][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 392.268693][ T5886] usb 4-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 392.311134][ T5886] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 392.326938][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.334975][ T5886] usb 4-1: Product: syz [ 392.374655][ T5886] usb 4-1: Manufacturer: syz [ 392.383955][ T5886] usb 4-1: SerialNumber: syz [ 392.412604][ T5886] usb 4-1: config 0 descriptor?? [ 392.419840][ T5886] usb 4-1: bad CDC descriptors [ 392.425412][ T5886] usb 4-1: unsupported MDLM descriptors [ 392.667284][ T8737] usb 4-1: USB disconnect, device number 11 [ 392.776086][ T8846] FAULT_INJECTION: forcing a failure. [ 392.776086][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 392.793373][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.0.842 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 392.803666][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 392.813755][ T8846] Call Trace: [ 392.817058][ T8846] [ 392.820002][ T8846] dump_stack_lvl+0x241/0x360 [ 392.824725][ T8846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.829949][ T8846] ? __pfx__printk+0x10/0x10 [ 392.834567][ T8846] ? __kmalloc_node_noprof+0xb7/0x440 [ 392.840071][ T8846] ? __pfx___might_resched+0x10/0x10 [ 392.845389][ T8846] should_fail_ex+0x3b0/0x4e0 [ 392.850101][ T8846] should_failslab+0xac/0x100 [ 392.854811][ T8846] __kmalloc_node_noprof+0xdf/0x440 [ 392.860043][ T8846] ? alloc_slab_obj_exts+0x3a/0xa0 [ 392.865185][ T8846] alloc_slab_obj_exts+0x3a/0xa0 [ 392.870150][ T8846] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 392.876087][ T8846] ? __alloc_skb+0x1c3/0x440 [ 392.880789][ T8846] kmem_cache_alloc_node_noprof+0x222/0x320 [ 392.880824][ T8846] __alloc_skb+0x1c3/0x440 [ 392.880849][ T8846] ? __pfx___alloc_skb+0x10/0x10 [ 392.896163][ T8846] alloc_skb_with_frags+0xc3/0x820 [ 392.896208][ T8846] sock_alloc_send_pskb+0x91a/0xa60 [ 392.896249][ T8846] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 392.896276][ T8846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 392.896308][ T8846] unix_dgram_sendmsg+0x6d3/0x1f80 [ 392.896338][ T8846] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 392.896366][ T8846] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 392.896402][ T8846] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 392.896423][ T8846] ? __import_iovec+0x3a8/0x870 [ 392.896448][ T8846] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 392.896462][ T8846] __sock_sendmsg+0x221/0x270 [ 392.896484][ T8846] ____sys_sendmsg+0x52a/0x7e0 [ 392.896506][ T8846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.896521][ T8846] ? __fget_files+0x2a/0x410 [ 392.896562][ T8846] ? __fget_files+0x2a/0x410 [ 392.896586][ T8846] __sys_sendmsg+0x269/0x350 [ 392.896602][ T8846] ? __pfx_lock_release+0x10/0x10 [ 392.896619][ T8846] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.896643][ T8846] ? __pfx_vfs_write+0x10/0x10 [ 392.896684][ T8846] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.896700][ T8846] ? do_syscall_64+0x100/0x230 [ 392.896719][ T8846] ? do_syscall_64+0xb6/0x230 [ 392.896736][ T8846] do_syscall_64+0xf3/0x230 [ 392.896752][ T8846] ? clear_bhb_loop+0x35/0x90 [ 392.896770][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.896785][ T8846] RIP: 0033:0x7f369917e819 [ 392.896800][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.896813][ T8846] RSP: 002b:00007f3699ff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.896831][ T8846] RAX: ffffffffffffffda RBX: 00007f3699335fa0 RCX: 00007f369917e819 [ 392.896843][ T8846] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 392.896852][ T8846] RBP: 00007f3699ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 392.896862][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.896871][ T8846] R13: 0000000000000000 R14: 00007f3699335fa0 R15: 00007ffc585e0758 [ 392.896892][ T8846] [ 392.899188][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 392.995382][ T8851] Cannot find del_set index 29 as target [ 393.052354][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 393.287438][ T5886] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 393.287471][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.287491][ T5886] usb 5-1: Product: syz [ 393.287506][ T5886] usb 5-1: Manufacturer: syz [ 393.287520][ T5886] usb 5-1: SerialNumber: syz [ 393.289506][ T5886] usb 5-1: config 0 descriptor?? [ 393.292378][ T5886] pwc: Philips SPC 880NC USB webcam detected. [ 393.514067][ T5886] pwc: Failed to set LED on/off time (-71) [ 393.515226][ T5886] pwc: send_video_command error -71 [ 393.515251][ T5886] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 393.516284][ T5886] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 393.518726][ T5886] usb 5-1: USB disconnect, device number 6 [ 394.352259][ T8857] ALSA: mixer_oss: invalid OSS volume 'j' [ 396.039285][ T8878] FAULT_INJECTION: forcing a failure. [ 396.039285][ T8878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.377467][ T8874] ALSA: mixer_oss: invalid OSS volume 'j' [ 396.390809][ T8878] CPU: 1 UID: 0 PID: 8878 Comm: syz.4.850 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 396.401130][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 396.411206][ T8878] Call Trace: [ 396.414499][ T8878] [ 396.417445][ T8878] dump_stack_lvl+0x241/0x360 [ 396.422148][ T8878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.427366][ T8878] ? __pfx__printk+0x10/0x10 [ 396.431973][ T8878] ? __pfx_lock_release+0x10/0x10 [ 396.437019][ T8878] should_fail_ex+0x3b0/0x4e0 [ 396.441718][ T8878] _copy_from_user+0x2f/0xc0 [ 396.446326][ T8878] memdup_user+0x64/0xc0 [ 396.450591][ T8878] strndup_user+0x68/0xc0 [ 396.454943][ T8878] bpf_uprobe_multi_link_attach+0x2e5/0xc20 [ 396.460870][ T8878] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 396.467313][ T8878] ? __fget_files+0x395/0x410 [ 396.472028][ T8878] ? bpf_prog_attach_check_attach_type+0x3e7/0x4b0 [ 396.478545][ T8878] link_create+0x6e3/0x860 [ 396.482990][ T8878] __sys_bpf+0x4bc/0x810 [ 396.487257][ T8878] ? __pfx___sys_bpf+0x10/0x10 [ 396.492049][ T8878] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 396.498046][ T8878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.504392][ T8878] ? do_syscall_64+0x100/0x230 [ 396.509180][ T8878] __x64_sys_bpf+0x7c/0x90 [ 396.513615][ T8878] do_syscall_64+0xf3/0x230 [ 396.518142][ T8878] ? clear_bhb_loop+0x35/0x90 [ 396.522837][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.528745][ T8878] RIP: 0033:0x7fb31a97e819 [ 396.533172][ T8878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.552798][ T8878] RSP: 002b:00007fb31b833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.561237][ T8878] RAX: ffffffffffffffda RBX: 00007fb31ab35fa0 RCX: 00007fb31a97e819 [ 396.569222][ T8878] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 000000000000001c [ 396.577205][ T8878] RBP: 00007fb31b833090 R08: 0000000000000000 R09: 0000000000000000 [ 396.585189][ T8878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.593174][ T8878] R13: 0000000000000000 R14: 00007fb31ab35fa0 R15: 00007ffe673754a8 [ 396.601181][ T8878] [ 398.069911][ T8892] ebtables: ebtables: counters copy to user failed while replacing table [ 400.520866][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.861'. [ 400.837222][ T5922] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 401.456858][ T5922] usb 2-1: device descriptor read/64, error -71 [ 401.720667][ T5922] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 402.526699][ T8924] ALSA: mixer_oss: invalid OSS volume 'j' [ 402.806989][ T5922] usb 2-1: device descriptor read/64, error -71 [ 403.278185][ T5922] usb usb2-port1: attempt power cycle [ 404.411406][ T5922] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 405.719414][ T5922] usb 2-1: device not accepting address 11, error -71 [ 405.741568][ T8947] ebtables: ebtables: counters copy to user failed while replacing table [ 405.751886][ T8947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.869'. [ 405.760963][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'. [ 407.490431][ T8960] netlink: 76 bytes leftover after parsing attributes in process `syz.1.873'. [ 407.501312][ T8960] openvswitch: : Dropping previously announced user features [ 408.679444][ T8961] FAULT_INJECTION: forcing a failure. [ 408.679444][ T8961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.467000][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.3.875 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 409.477295][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 409.487373][ T8961] Call Trace: [ 409.490666][ T8961] [ 409.493608][ T8961] dump_stack_lvl+0x241/0x360 [ 409.498309][ T8961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.503524][ T8961] ? __pfx__printk+0x10/0x10 [ 409.508131][ T8961] ? snprintf+0xda/0x120 [ 409.512389][ T8961] should_fail_ex+0x3b0/0x4e0 [ 409.517092][ T8961] _copy_to_user+0x31/0xb0 [ 409.521521][ T8961] simple_read_from_buffer+0xca/0x150 [ 409.526913][ T8961] proc_fail_nth_read+0x1e9/0x250 [ 409.531962][ T8961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.537532][ T8961] ? rw_verify_area+0x55e/0x6f0 [ 409.542399][ T8961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.547958][ T8961] vfs_read+0x1fc/0xb70 [ 409.552149][ T8961] ? __pfx___mutex_lock+0x10/0x10 [ 409.557184][ T8961] ? __pfx_vfs_read+0x10/0x10 [ 409.561884][ T8961] ? __fget_files+0x2a/0x410 [ 409.566493][ T8961] ? __fget_files+0x395/0x410 [ 409.571184][ T8961] ? __fget_files+0x2a/0x410 [ 409.575797][ T8961] ksys_read+0x18f/0x2b0 [ 409.580062][ T8961] ? __pfx_ksys_read+0x10/0x10 [ 409.584846][ T8961] ? do_syscall_64+0x100/0x230 [ 409.589635][ T8961] ? do_syscall_64+0xb6/0x230 [ 409.594338][ T8961] do_syscall_64+0xf3/0x230 [ 409.598947][ T8961] ? clear_bhb_loop+0x35/0x90 [ 409.603642][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.609548][ T8961] RIP: 0033:0x7fea58d7d25c [ 409.613976][ T8961] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 409.633604][ T8961] RSP: 002b:00007fea59afb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.642053][ T8961] RAX: ffffffffffffffda RBX: 00007fea58f35fa0 RCX: 00007fea58d7d25c [ 409.650048][ T8961] RDX: 000000000000000f RSI: 00007fea59afb0a0 RDI: 0000000000000005 [ 409.658038][ T8961] RBP: 00007fea59afb090 R08: 0000000000000000 R09: 0000000000000000 [ 409.666027][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.674013][ T8961] R13: 0000000000000000 R14: 00007fea58f35fa0 R15: 00007ffe4eed3888 [ 409.682016][ T8961] [ 411.032410][ T8976] ALSA: mixer_oss: invalid OSS volume 'j' [ 412.035283][ T8997] loop5: detected capacity change from 0 to 7 [ 412.044482][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.053109][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.061457][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.069902][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.078391][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.087276][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.096286][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.104474][ T8997] ldm_validate_partition_table(): Disk read failed. [ 412.111505][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.121447][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.129744][ T8997] Buffer I/O error on dev loop5, logical block 0, async page read [ 412.138308][ T8997] Dev loop5: unable to read RDB block 0 [ 412.144656][ T8997] loop5: unable to read partition table [ 412.151288][ T8997] loop5: partition table beyond EOD, truncated [ 412.157670][ T8997] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 412.157670][ T8997] ) failed (rc=-5) [ 413.158122][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 413.371672][ T9005] ebtables: ebtables: counters copy to user failed while replacing table [ 413.384518][ T9005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.885'. [ 413.393515][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 414.057136][ T8993] hsr_slave_1 (unregistering): left promiscuous mode [ 415.326942][ T9019] FAULT_INJECTION: forcing a failure. [ 415.326942][ T9019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.400262][ T9019] CPU: 1 UID: 0 PID: 9019 Comm: syz.2.889 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 415.410561][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 415.420633][ T9019] Call Trace: [ 415.423928][ T9019] [ 415.426883][ T9019] dump_stack_lvl+0x241/0x360 [ 415.431589][ T9019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.436858][ T9019] ? __pfx__printk+0x10/0x10 [ 415.441463][ T9019] ? snprintf+0xda/0x120 [ 415.445731][ T9019] should_fail_ex+0x3b0/0x4e0 [ 415.450438][ T9019] _copy_to_user+0x31/0xb0 [ 415.454881][ T9019] simple_read_from_buffer+0xca/0x150 [ 415.460287][ T9019] proc_fail_nth_read+0x1e9/0x250 [ 415.465327][ T9019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.470873][ T9019] ? rw_verify_area+0x55e/0x6f0 [ 415.475724][ T9019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.481263][ T9019] vfs_read+0x1fc/0xb70 [ 415.485409][ T9019] ? __pfx___mutex_lock+0x10/0x10 [ 415.490417][ T9019] ? __pfx_vfs_read+0x10/0x10 [ 415.495083][ T9019] ? __fget_files+0x2a/0x410 [ 415.499659][ T9019] ? __fget_files+0x395/0x410 [ 415.504325][ T9019] ? __fget_files+0x2a/0x410 [ 415.508927][ T9019] ksys_read+0x18f/0x2b0 [ 415.513292][ T9019] ? __pfx_ksys_read+0x10/0x10 [ 415.518069][ T9019] ? do_syscall_64+0x100/0x230 [ 415.522819][ T9019] ? do_syscall_64+0xb6/0x230 [ 415.527511][ T9019] do_syscall_64+0xf3/0x230 [ 415.532004][ T9019] ? clear_bhb_loop+0x35/0x90 [ 415.536693][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.542610][ T9019] RIP: 0033:0x7fefd057d25c [ 415.547030][ T9019] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 415.561120][ T9022] netlink: 76 bytes leftover after parsing attributes in process `syz.3.888'. [ 415.566622][ T9019] RSP: 002b:00007fefd138c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.581050][ T9022] : entered promiscuous mode [ 415.584063][ T9019] RAX: ffffffffffffffda RBX: 00007fefd0735fa0 RCX: 00007fefd057d25c [ 415.597087][ T9019] RDX: 000000000000000f RSI: 00007fefd138c0a0 RDI: 0000000000000004 [ 415.605077][ T9019] RBP: 00007fefd138c090 R08: 0000000000000000 R09: 0000000000000000 [ 415.613042][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.621024][ T9019] R13: 0000000000000000 R14: 00007fefd0735fa0 R15: 00007ffd275ed578 [ 415.629027][ T9019] [ 416.284560][ T9028] netlink: 76 bytes leftover after parsing attributes in process `syz.4.886'. [ 416.311476][ T9028] : entered promiscuous mode [ 416.915061][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 417.111091][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 417.908196][ T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 418.088347][ T8] usb 3-1: config 0 has no interface number 0 [ 418.298414][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 418.325055][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.340588][ T8] usb 3-1: Product: syz [ 418.344804][ T8] usb 3-1: Manufacturer: syz [ 418.375958][ T8] usb 3-1: SerialNumber: syz [ 418.466465][ T8] usb 3-1: config 0 descriptor?? [ 418.478316][ T9045] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.488880][ T8737] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 418.512094][ T8] smsc95xx v2.0.0 [ 418.646973][ T8737] usb 4-1: Using ep0 maxpacket: 8 [ 418.950775][ T9050] binder: Unknown parameter 'e_time' [ 419.612621][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 419.623556][ T8] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 419.637658][ T8] usb 3-1: USB disconnect, device number 6 [ 419.658206][ T8737] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 419.673909][ T8737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.704560][ T8737] usb 4-1: Product: syz [ 419.743826][ T8737] usb 4-1: Manufacturer: syz [ 419.762197][ T8737] usb 4-1: SerialNumber: syz [ 419.791096][ T8737] usb 4-1: config 0 descriptor?? [ 420.037501][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.046056][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.891653][ T9060] FAULT_INJECTION: forcing a failure. [ 420.891653][ T9060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.929469][ T9064] FAULT_INJECTION: forcing a failure. [ 420.929469][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 420.940698][ T8737] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 420.942479][ T9064] CPU: 1 UID: 0 PID: 9064 Comm: syz.4.902 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 420.958925][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 420.968981][ T9064] Call Trace: [ 420.972257][ T9064] [ 420.975185][ T9064] dump_stack_lvl+0x241/0x360 [ 420.979878][ T9064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.985075][ T9064] ? __pfx__printk+0x10/0x10 [ 420.989681][ T9064] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 420.995658][ T9064] ? __pfx___might_resched+0x10/0x10 [ 421.000945][ T9064] should_fail_ex+0x3b0/0x4e0 [ 421.005625][ T9064] should_failslab+0xac/0x100 [ 421.010316][ T9064] ? __alloc_skb+0x1c3/0x440 [ 421.014900][ T9064] kmem_cache_alloc_node_noprof+0x71/0x320 [ 421.020706][ T9064] __alloc_skb+0x1c3/0x440 [ 421.025136][ T9064] ? __pfx___alloc_skb+0x10/0x10 [ 421.030072][ T9064] ? netlink_autobind+0xd6/0x2f0 [ 421.035011][ T9064] ? netlink_autobind+0x2b0/0x2f0 [ 421.040034][ T9064] netlink_sendmsg+0x638/0xcb0 [ 421.044810][ T9064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.050124][ T9064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.055421][ T9064] __sock_sendmsg+0x221/0x270 [ 421.060122][ T9064] ____sys_sendmsg+0x52a/0x7e0 [ 421.064907][ T9064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.070193][ T9064] ? __fget_files+0x2a/0x410 [ 421.074784][ T9064] ? __fget_files+0x2a/0x410 [ 421.079378][ T9064] __sys_sendmsg+0x269/0x350 [ 421.083962][ T9064] ? __pfx_lock_release+0x10/0x10 [ 421.088990][ T9064] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.094192][ T9064] ? __pfx_vfs_write+0x10/0x10 [ 421.098971][ T9064] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.105291][ T9064] ? do_syscall_64+0x100/0x230 [ 421.110051][ T9064] ? do_syscall_64+0xb6/0x230 [ 421.114729][ T9064] do_syscall_64+0xf3/0x230 [ 421.119225][ T9064] ? clear_bhb_loop+0x35/0x90 [ 421.123896][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.129795][ T9064] RIP: 0033:0x7fb31a97e819 [ 421.134205][ T9064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.153813][ T9064] RSP: 002b:00007fb31b833038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.162245][ T9064] RAX: ffffffffffffffda RBX: 00007fb31ab35fa0 RCX: 00007fb31a97e819 [ 421.170216][ T9064] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 421.178269][ T9064] RBP: 00007fb31b833090 R08: 0000000000000000 R09: 0000000000000000 [ 421.186232][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.194195][ T9064] R13: 0000000000000000 R14: 00007fb31ab35fa0 R15: 00007ffe673754a8 [ 421.202170][ T9064] [ 421.206128][ T9060] CPU: 1 UID: 0 PID: 9060 Comm: syz.0.901 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 421.207775][ T8737] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 421.216378][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 421.216395][ T9060] Call Trace: [ 421.216404][ T9060] [ 421.216411][ T9060] dump_stack_lvl+0x241/0x360 [ 421.216439][ T9060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.216459][ T9060] ? __pfx__printk+0x10/0x10 [ 421.226619][ T8737] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 421.235590][ T9060] should_fail_ex+0x3b0/0x4e0 [ 421.235624][ T9060] _copy_from_user+0x2f/0xc0 [ 421.235644][ T9060] move_addr_to_kernel+0x82/0x150 [ 421.235669][ T9060] copy_msghdr_from_user+0x43e/0x680 [ 421.240200][ T8737] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 421.241892][ T9060] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 421.297036][ T9060] ? __fget_files+0x2a/0x410 [ 421.301808][ T9060] ? __fget_files+0x2a/0x410 [ 421.306420][ T9060] __sys_sendmmsg+0x32b/0x720 [ 421.311113][ T9060] ? __pfx___sys_sendmmsg+0x10/0x10 [ 421.316326][ T9060] ? __pfx_lock_release+0x10/0x10 [ 421.321368][ T9060] ? kstrtouint_from_user+0x128/0x190 [ 421.326784][ T9060] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 421.332712][ T9060] ? ksys_write+0x22a/0x2b0 [ 421.337240][ T9060] ? __pfx_lock_release+0x10/0x10 [ 421.342283][ T9060] ? vfs_write+0x730/0xd30 [ 421.346708][ T9060] ? __mutex_unlock_slowpath+0x21e/0x790 [ 421.352367][ T9060] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 421.358347][ T9060] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.364692][ T9060] ? do_syscall_64+0x100/0x230 [ 421.369477][ T9060] __x64_sys_sendmmsg+0xa0/0xb0 [ 421.374342][ T9060] do_syscall_64+0xf3/0x230 [ 421.378852][ T9060] ? clear_bhb_loop+0x35/0x90 [ 421.383535][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.389425][ T9060] RIP: 0033:0x7f369917e819 [ 421.393926][ T9060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.413529][ T9060] RSP: 002b:00007f3699ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.421946][ T9060] RAX: ffffffffffffffda RBX: 00007f3699335fa0 RCX: 00007f369917e819 [ 421.429912][ T9060] RDX: 0000000000000001 RSI: 0000000020001cc0 RDI: 0000000000000004 [ 421.437876][ T9060] RBP: 00007f3699ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 421.445841][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.453802][ T9060] R13: 0000000000000000 R14: 00007f3699335fa0 R15: 00007ffc585e0758 [ 421.461780][ T9060] [ 421.552266][ T8737] usb 4-1: USB disconnect, device number 12 [ 421.607437][ T9070] FAULT_INJECTION: forcing a failure. [ 421.607437][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 421.613754][ T9071] FAULT_INJECTION: forcing a failure. [ 421.613754][ T9071] name failslab, interval 1, probability 0, space 0, times 0 [ 421.633891][ T9070] CPU: 1 UID: 0 PID: 9070 Comm: syz.4.905 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 421.644178][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 421.654251][ T9070] Call Trace: [ 421.657544][ T9070] [ 421.660485][ T9070] dump_stack_lvl+0x241/0x360 [ 421.665186][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.670408][ T9070] ? __pfx__printk+0x10/0x10 [ 421.675020][ T9070] ? fs_reclaim_acquire+0x93/0x130 [ 421.680156][ T9070] ? __pfx___might_resched+0x10/0x10 [ 421.685546][ T9070] should_fail_ex+0x3b0/0x4e0 [ 421.690240][ T9070] ? tomoyo_encode+0x26f/0x540 [ 421.695003][ T9070] should_failslab+0xac/0x100 [ 421.699679][ T9070] ? tomoyo_encode+0x26f/0x540 [ 421.704435][ T9070] __kmalloc_noprof+0xd8/0x400 [ 421.709214][ T9070] tomoyo_encode+0x26f/0x540 [ 421.713817][ T9070] tomoyo_realpath_from_path+0x59e/0x5e0 [ 421.719452][ T9070] tomoyo_path_number_perm+0x236/0x860 [ 421.724906][ T9070] ? __lock_acquire+0x1397/0x2100 [ 421.729984][ T9070] ? tomoyo_path_number_perm+0x206/0x860 [ 421.735618][ T9070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 421.741623][ T9070] ? __fget_files+0x2a/0x410 [ 421.746219][ T9070] ? __fget_files+0x2a/0x410 [ 421.750810][ T9070] security_file_ioctl+0xc6/0x2a0 [ 421.755835][ T9070] __se_sys_ioctl+0x46/0x170 [ 421.760427][ T9070] do_syscall_64+0xf3/0x230 [ 421.764926][ T9070] ? clear_bhb_loop+0x35/0x90 [ 421.769634][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.775526][ T9070] RIP: 0033:0x7fb31a97e819 [ 421.779953][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.799559][ T9070] RSP: 002b:00007fb31b833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.807972][ T9070] RAX: ffffffffffffffda RBX: 00007fb31ab35fa0 RCX: 00007fb31a97e819 [ 421.815942][ T9070] RDX: 0000000020000bc0 RSI: 0000000040505330 RDI: 0000000000000005 [ 421.823914][ T9070] RBP: 00007fb31b833090 R08: 0000000000000000 R09: 0000000000000000 [ 421.831899][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.839867][ T9070] R13: 0000000000000000 R14: 00007fb31ab35fa0 R15: 00007ffe673754a8 [ 421.847847][ T9070] [ 421.861433][ T9071] CPU: 0 UID: 0 PID: 9071 Comm: syz.1.903 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 421.862396][ T9070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.871782][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 421.871797][ T9071] Call Trace: [ 421.871805][ T9071] [ 421.871813][ T9071] dump_stack_lvl+0x241/0x360 [ 421.871841][ T9071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.871861][ T9071] ? __pfx__printk+0x10/0x10 [ 421.909162][ T9071] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 421.915151][ T9071] ? __pfx___might_resched+0x10/0x10 [ 421.920445][ T9071] should_fail_ex+0x3b0/0x4e0 [ 421.925124][ T9071] should_failslab+0xac/0x100 [ 421.929798][ T9071] ? __alloc_skb+0x1c3/0x440 [ 421.934383][ T9071] kmem_cache_alloc_node_noprof+0x71/0x320 [ 421.940193][ T9071] __alloc_skb+0x1c3/0x440 [ 421.944608][ T9071] ? __pfx___alloc_skb+0x10/0x10 [ 421.949540][ T9071] ? netlink_autobind+0xd6/0x2f0 [ 421.954470][ T9071] ? netlink_autobind+0x2b0/0x2f0 [ 421.959497][ T9071] netlink_sendmsg+0x638/0xcb0 [ 421.964264][ T9071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.969549][ T9071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.974827][ T9071] __sock_sendmsg+0x221/0x270 [ 421.979511][ T9071] ____sys_sendmsg+0x52a/0x7e0 [ 421.984289][ T9071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.989569][ T9071] ? __fget_files+0x2a/0x410 [ 421.994173][ T9071] ? __fget_files+0x2a/0x410 [ 421.998860][ T9071] __sys_sendmsg+0x269/0x350 [ 422.003452][ T9071] ? __pfx_lock_release+0x10/0x10 [ 422.008474][ T9071] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.013587][ T9071] ? __pfx_vfs_write+0x10/0x10 [ 422.018369][ T9071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.024689][ T9071] ? do_syscall_64+0x100/0x230 [ 422.029451][ T9071] ? do_syscall_64+0xb6/0x230 [ 422.034129][ T9071] do_syscall_64+0xf3/0x230 [ 422.038636][ T9071] ? clear_bhb_loop+0x35/0x90 [ 422.043308][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.049195][ T9071] RIP: 0033:0x7f7a0eb7e819 [ 422.053604][ T9071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.073206][ T9071] RSP: 002b:00007f7a0c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.081626][ T9071] RAX: ffffffffffffffda RBX: 00007f7a0ed36080 RCX: 00007f7a0eb7e819 [ 422.089596][ T9071] RDX: 0000000020000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 422.097563][ T9071] RBP: 00007f7a0c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.105530][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.113500][ T9071] R13: 0000000000000000 R14: 00007f7a0ed36080 R15: 00007ffe37aa07d8 [ 422.121480][ T9071] [ 422.196883][ T5922] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 423.988280][ T9085] netlink: 76 bytes leftover after parsing attributes in process `syz.0.907'. [ 424.001050][ T9085] : entered promiscuous mode [ 424.061947][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 424.595183][ T9088] netlink: 17 bytes leftover after parsing attributes in process `syz.3.910'. [ 425.205078][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 425.212789][ T5922] usb 3-1: can't read configurations, error -71 [ 425.240837][ T9088] netlink: 696 bytes leftover after parsing attributes in process `syz.3.910'. [ 425.241621][ T9094] program syz.0.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.711491][ T9111] FAULT_INJECTION: forcing a failure. [ 426.711491][ T9111] name failslab, interval 1, probability 0, space 0, times 0 [ 426.776171][ T9103] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 426.815982][ T9111] CPU: 1 UID: 0 PID: 9111 Comm: syz.4.914 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 426.826289][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 426.836373][ T9111] Call Trace: [ 426.839674][ T9111] [ 426.842630][ T9111] dump_stack_lvl+0x241/0x360 [ 426.847338][ T9111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.852562][ T9111] ? __pfx__printk+0x10/0x10 [ 426.857183][ T9111] ? fs_reclaim_acquire+0x93/0x130 [ 426.862322][ T9111] ? __pfx___might_resched+0x10/0x10 [ 426.867640][ T9111] should_fail_ex+0x3b0/0x4e0 [ 426.872351][ T9111] ? tomoyo_encode+0x26f/0x540 [ 426.877136][ T9111] should_failslab+0xac/0x100 [ 426.881844][ T9111] ? tomoyo_encode+0x26f/0x540 [ 426.886627][ T9111] __kmalloc_noprof+0xd8/0x400 [ 426.891428][ T9111] tomoyo_encode+0x26f/0x540 [ 426.896048][ T9111] tomoyo_realpath_from_path+0x59e/0x5e0 [ 426.901728][ T9111] tomoyo_path_number_perm+0x236/0x860 [ 426.907216][ T9111] ? __lock_acquire+0x1397/0x2100 [ 426.912269][ T9111] ? tomoyo_path_number_perm+0x206/0x860 [ 426.917945][ T9111] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 426.923991][ T9111] ? __fget_files+0x2a/0x410 [ 426.928614][ T9111] ? __fget_files+0x2a/0x410 [ 426.933237][ T9111] security_file_ioctl+0xc6/0x2a0 [ 426.938294][ T9111] __se_sys_ioctl+0x46/0x170 [ 426.942909][ T9111] do_syscall_64+0xf3/0x230 [ 426.947421][ T9111] ? clear_bhb_loop+0x35/0x90 [ 426.952110][ T9111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.958004][ T9111] RIP: 0033:0x7fb31a97e819 [ 426.962430][ T9111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.982037][ T9111] RSP: 002b:00007fb31b833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.990452][ T9111] RAX: ffffffffffffffda RBX: 00007fb31ab35fa0 RCX: 00007fb31a97e819 [ 426.998436][ T9111] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 427.006433][ T9111] RBP: 00007fb31b833090 R08: 0000000000000000 R09: 0000000000000000 [ 427.014413][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.022381][ T9111] R13: 0000000000000000 R14: 00007fb31ab35fa0 R15: 00007ffe673754a8 [ 427.030368][ T9111] [ 427.057093][ T9111] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.066023][ T9111] input: syz0 as /devices/virtual/input/input9 [ 427.087260][ T9106] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 427.110462][ T9106] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 428.522330][ T9128] netlink: 76 bytes leftover after parsing attributes in process `syz.1.917'. [ 429.087246][ T9127] netlink: 76 bytes leftover after parsing attributes in process `syz.3.918'. [ 429.751131][ T9128] openvswitch: : Dropping previously announced user features [ 429.760116][ T9127] openvswitch: : Dropping previously announced user features [ 429.893543][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 431.619245][ T9151] FAULT_INJECTION: forcing a failure. [ 431.619245][ T9151] name failslab, interval 1, probability 0, space 0, times 0 [ 431.632048][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.2.924 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 431.642307][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 431.652376][ T9151] Call Trace: [ 431.655666][ T9151] [ 431.658605][ T9151] dump_stack_lvl+0x241/0x360 [ 431.663315][ T9151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.668527][ T9151] ? __pfx__printk+0x10/0x10 [ 431.673133][ T9151] ? fs_reclaim_acquire+0x93/0x130 [ 431.678266][ T9151] ? __pfx___might_resched+0x10/0x10 [ 431.683571][ T9151] should_fail_ex+0x3b0/0x4e0 [ 431.688266][ T9151] ? tomoyo_encode+0x26f/0x540 [ 431.693039][ T9151] should_failslab+0xac/0x100 [ 431.697739][ T9151] ? tomoyo_encode+0x26f/0x540 [ 431.702602][ T9151] __kmalloc_noprof+0xd8/0x400 [ 431.707395][ T9151] tomoyo_encode+0x26f/0x540 [ 431.712006][ T9151] tomoyo_realpath_from_path+0x59e/0x5e0 [ 431.717663][ T9151] tomoyo_path_number_perm+0x236/0x860 [ 431.723142][ T9151] ? tomoyo_path_number_perm+0x206/0x860 [ 431.728791][ T9151] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.734897][ T9151] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 431.741873][ T9151] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.747901][ T9151] ? rcu_read_unlock_special+0x497/0x570 [ 431.753575][ T9151] ? __rcu_read_unlock+0xa1/0x110 [ 431.758610][ T9151] ? __fget_files+0x2a/0x410 [ 431.763227][ T9151] ? __fget_files+0x2a/0x410 [ 431.767845][ T9151] security_file_ioctl+0xc6/0x2a0 [ 431.772892][ T9151] __se_sys_ioctl+0x46/0x170 [ 431.777505][ T9151] do_syscall_64+0xf3/0x230 [ 431.782023][ T9151] ? clear_bhb_loop+0x35/0x90 [ 431.786713][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.792612][ T9151] RIP: 0033:0x7fefd057e819 [ 431.797058][ T9151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.816688][ T9151] RSP: 002b:00007fefd134a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.825125][ T9151] RAX: ffffffffffffffda RBX: 00007fefd0736160 RCX: 00007fefd057e819 [ 431.833112][ T9151] RDX: 00000000200000c0 RSI: 00000000c004562f RDI: 0000000000000005 [ 431.841097][ T9151] RBP: 00007fefd134a090 R08: 0000000000000000 R09: 0000000000000000 [ 431.849083][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.857068][ T9151] R13: 0000000000000000 R14: 00007fefd0736160 R15: 00007ffd275ed578 [ 431.865077][ T9151] [ 431.868747][ T9151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.440585][ T9155] netlink: 76 bytes leftover after parsing attributes in process `syz.4.921'. [ 432.451861][ T9155] openvswitch: : Dropping previously announced user features [ 433.128546][ T9162] binder: Unknown parameter 'e_time' [ 433.703468][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 434.563022][ T9176] netlink: 76 bytes leftover after parsing attributes in process `syz.0.928'. [ 434.574671][ T9176] openvswitch: : Dropping previously announced user features [ 435.734180][ T9184] netlink: 76 bytes leftover after parsing attributes in process `syz.1.932'. [ 435.745389][ T9184] openvswitch: : Dropping previously announced user features [ 439.124293][ T969] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 439.969260][ T9197] ALSA: mixer_oss: invalid OSS volume 'j' [ 440.465696][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.514154][ T9212] netlink: 76 bytes leftover after parsing attributes in process `syz.3.940'. [ 441.523563][ T9212] openvswitch: : Dropping previously announced user features [ 441.597671][ T969] usb 2-1: device descriptor read/all, error -71 [ 442.490992][ T9214] ALSA: mixer_oss: invalid OSS volume 'j' [ 443.707376][ T9233] netlink: 76 bytes leftover after parsing attributes in process `syz.4.943'. [ 443.718686][ T9233] openvswitch: : Dropping previously announced user features [ 444.870201][ T9234] netlink: 76 bytes leftover after parsing attributes in process `syz.1.946'. [ 444.879649][ T9234] openvswitch: : Dropping previously announced user features [ 449.447041][ T8737] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 449.522574][ T9273] netlink: 76 bytes leftover after parsing attributes in process `syz.1.956'. [ 449.533453][ T9273] openvswitch: : Dropping previously announced user features [ 449.547632][ T9273] binder: Unknown parameter '' [ 449.559048][ T9263] ALSA: mixer_oss: invalid OSS volume 'j' [ 450.178547][ T8737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.191525][ T8737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.201424][ T8737] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 450.227036][ T8737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.287944][ T8737] usb 3-1: config 0 descriptor?? [ 451.367827][ T9268] FAULT_INJECTION: forcing a failure. [ 451.367827][ T9268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.745313][ T9268] CPU: 1 UID: 0 PID: 9268 Comm: syz.2.955 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 451.755616][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 451.765697][ T9268] Call Trace: [ 451.768992][ T9268] [ 451.771935][ T9268] dump_stack_lvl+0x241/0x360 [ 451.776639][ T9268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.781863][ T9268] ? __pfx__printk+0x10/0x10 [ 451.786483][ T9268] should_fail_ex+0x3b0/0x4e0 [ 451.791180][ T9268] strncpy_from_user+0x36/0x260 [ 451.796053][ T9268] getname_flags+0xf1/0x540 [ 451.800580][ T9268] do_sys_openat2+0xd2/0x1d0 [ 451.805193][ T9268] ? __pfx_do_sys_openat2+0x10/0x10 [ 451.810408][ T9268] ? __fget_files+0x2a/0x410 [ 451.815015][ T9268] ? __fget_files+0x2a/0x410 [ 451.819625][ T9268] __x64_sys_openat+0x247/0x2a0 [ 451.824493][ T9268] ? __pfx___x64_sys_openat+0x10/0x10 [ 451.829887][ T9268] ? do_syscall_64+0x100/0x230 [ 451.834653][ T9268] ? do_syscall_64+0xb6/0x230 [ 451.839325][ T9268] do_syscall_64+0xf3/0x230 [ 451.843823][ T9268] ? clear_bhb_loop+0x35/0x90 [ 451.848499][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.854387][ T9268] RIP: 0033:0x7fefd057d1b0 [ 451.858793][ T9268] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 451.878396][ T9268] RSP: 002b:00007fefd138bb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 451.886810][ T9268] RAX: ffffffffffffffda RBX: 0000000000004180 RCX: 00007fefd057d1b0 [ 451.894782][ T9268] RDX: 0000000000004180 RSI: 00007fefd138bc10 RDI: 00000000ffffff9c [ 451.902756][ T9268] RBP: 00007fefd138bc10 R08: 0000000000000000 R09: 0023776172646968 [ 451.910725][ T9268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 451.918695][ T9268] R13: 0000000000000000 R14: 00007fefd0735fa0 R15: 00007ffd275ed578 [ 451.926671][ T9268] [ 452.611161][ T8737] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 452.678213][ T8737] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 452.705232][ T8737] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 452.759930][ T8737] usb 3-1: USB disconnect, device number 9 [ 452.947036][ T8737] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 453.111344][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 453.754267][ T9299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.014183][ T9315] netlink: 76 bytes leftover after parsing attributes in process `syz.3.962'. [ 455.101722][ T9316] binder: Unknown parameter '' [ 455.426875][ T969] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 456.146373][ T969] usb 3-1: config index 0 descriptor too short (expected 244, got 18) [ 456.230192][ T969] usb 3-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 456.424040][ T9309] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 456.446919][ T969] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 456.477680][ T969] usb 3-1: Product: syz [ 456.481899][ T969] usb 3-1: Manufacturer: syz [ 456.728279][ T969] usb 3-1: SerialNumber: syz [ 457.160667][ T9315] openvswitch: : Dropping previously announced user features [ 457.409604][ T969] usb 3-1: config 0 descriptor?? [ 457.651097][ T969] usb 3-1: can't set config #0, error -71 [ 457.659889][ T969] usb 3-1: USB disconnect, device number 10 [ 458.471657][ T9328] ALSA: mixer_oss: invalid OSS volume 'j' [ 459.436319][ T9353] FAULT_INJECTION: forcing a failure. [ 459.436319][ T9353] name failslab, interval 1, probability 0, space 0, times 0 [ 460.450581][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.2.974 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 460.460899][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 460.470984][ T9353] Call Trace: [ 460.474285][ T9353] [ 460.477240][ T9353] dump_stack_lvl+0x241/0x360 [ 460.481951][ T9353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.487174][ T9353] ? __pfx__printk+0x10/0x10 [ 460.491785][ T9353] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 460.497355][ T9353] ? __pfx___might_resched+0x10/0x10 [ 460.502669][ T9353] should_fail_ex+0x3b0/0x4e0 [ 460.507371][ T9353] ? mas_alloc_nodes+0x26c/0x840 [ 460.512326][ T9353] should_failslab+0xac/0x100 [ 460.517028][ T9353] ? mas_alloc_nodes+0x26c/0x840 [ 460.521985][ T9353] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 460.527390][ T9353] mas_alloc_nodes+0x26c/0x840 [ 460.532185][ T9353] mas_preallocate+0x554/0x8c0 [ 460.536982][ T9353] ? __pfx_mas_preallocate+0x10/0x10 [ 460.542310][ T9353] ? __mas_set_range+0x133/0x3c0 [ 460.547281][ T9353] __split_vma+0x302/0xc50 [ 460.551735][ T9353] ? __pfx___split_vma+0x10/0x10 [ 460.556699][ T9353] ? mas_find+0x950/0xbb0 [ 460.561058][ T9353] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 460.566561][ T9353] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 460.572583][ T9353] ? mas_find+0x8c0/0xbb0 [ 460.576962][ T9353] mmap_region+0x938/0x23f0 [ 460.581518][ T9353] ? __pfx_mmap_region+0x10/0x10 [ 460.586481][ T9353] ? __asan_memset+0x23/0x50 [ 460.591099][ T9353] ? process_measurement+0x3ca/0x1fb0 [ 460.596629][ T9353] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 460.603256][ T9353] ? bpf_lsm_mmap_addr+0x9/0x10 [ 460.608137][ T9353] ? security_mmap_addr+0x6f/0x250 [ 460.613286][ T9353] do_mmap+0x8f0/0x1000 [ 460.617484][ T9353] ? __pfx_do_mmap+0x10/0x10 [ 460.622099][ T9353] ? __pfx_down_write_killable+0x10/0x10 [ 460.627757][ T9353] ? __pfx_lock_acquire+0x10/0x10 [ 460.632808][ T9353] vm_mmap_pgoff+0x1dd/0x3d0 [ 460.637433][ T9353] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 460.642566][ T9353] ? __fget_files+0x2a/0x410 [ 460.647183][ T9353] ? __fget_files+0x395/0x410 [ 460.651879][ T9353] ? __fget_files+0x2a/0x410 [ 460.656493][ T9353] ksys_mmap_pgoff+0x4eb/0x720 [ 460.661289][ T9353] ? __x64_sys_mmap+0x7f/0x140 [ 460.666081][ T9353] do_syscall_64+0xf3/0x230 [ 460.670603][ T9353] ? clear_bhb_loop+0x35/0x90 [ 460.675302][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.681218][ T9353] RIP: 0033:0x7fefd057e819 [ 460.685660][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.705298][ T9353] RSP: 002b:00007fefd138c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 460.713750][ T9353] RAX: ffffffffffffffda RBX: 00007fefd0735fa0 RCX: 00007fefd057e819 [ 460.721766][ T9353] RDX: 0000000001000004 RSI: 0000000000004000 RDI: 0000000020000000 [ 460.729777][ T9353] RBP: 00007fefd138c090 R08: 0000000000000004 R09: 0000000000000000 [ 460.737776][ T9353] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 460.745776][ T9353] R13: 0000000000000000 R14: 00007fefd0735fa0 R15: 00007ffd275ed578 [ 460.753797][ T9353] [ 460.756886][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.092021][ T9368] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 461.092077][ T9368] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.977'. [ 461.092113][ T9368] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 461.092128][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.977'. [ 461.685984][ T9374] Cannot find add_set index 0 as target [ 462.592485][ T9378] ALSA: mixer_oss: invalid OSS volume 'j' [ 462.743946][ T9374] program syz.1.980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.927241][ T9384] xt_CT: No such helper "snmp_trap" [ 463.951866][ T9395] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 463.974810][ T9395] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 464.103240][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 466.268609][ T9395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.158084][ T9453] ALSA: mixer_oss: invalid OSS volume 'j' [ 479.358901][ T9495] Bluetooth: MGMT ver 1.23 [ 482.691848][ T9508] ALSA: mixer_oss: invalid OSS volume 'j' [ 482.850377][ T9517] capability: warning: `syz.1.1009' uses 32-bit capabilities (legacy support in use) [ 482.884031][ T9519] ucma_write: process 727 (syz.1.1009) changed security contexts after opening file descriptor, this is not allowed. [ 485.118784][ T9543] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1021'. [ 486.454882][ T9548] netlink: 'syz.0.1024': attribute type 21 has an invalid length. [ 486.483533][ T9548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1024'. [ 486.777335][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1024'. [ 487.692494][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1024'. [ 489.892362][ T9570] ALSA: mixer_oss: invalid OSS volume 'j' [ 490.662056][ T9579] binder: Unknown parameter '' [ 494.706869][ T9624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1041'. [ 495.652913][ T9623] ALSA: mixer_oss: invalid OSS volume 'j' [ 496.822516][ T9644] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1044'. [ 496.832592][ T9644] openvswitch: : Dropping previously announced user features [ 496.844192][ T9641] binder: Unknown parameter '' [ 497.685217][ T9654] binder: Unknown parameter '' [ 499.213379][ T9653] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 500.042563][ T29] audit: type=1326 audit(1732135985.652:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9652 comm="syz.3.1050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea58d7e819 code=0x0 [ 501.717859][ T9687] ebtables: ebtables: counters copy to user failed while replacing table [ 501.867471][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.835623][ T9706] overlayfs: missing 'lowerdir' [ 504.060932][ T9712] binder: 9711:9712 ioctl c0306201 20000580 returned -14 [ 505.418115][ T9720] ebtables: ebtables: counters copy to user failed while replacing table [ 509.589611][ T9749] ebtables: ebtables: counters copy to user failed while replacing table [ 511.243299][ T9765] IPv6: Can't replace route, no match found [ 516.447849][ T9802] ebtables: ebtables: counters copy to user failed while replacing table [ 519.195887][ T9809] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1089'. [ 519.222738][ T9809] : entered promiscuous mode [ 519.242178][ T9809] binder: Unknown parameter '' [ 519.456642][ T9810] FAULT_INJECTION: forcing a failure. [ 519.456642][ T9810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.473484][ T9810] CPU: 1 UID: 0 PID: 9810 Comm: syz.3.1090 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 519.483857][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 519.493938][ T9810] Call Trace: [ 519.497232][ T9810] [ 519.500177][ T9810] dump_stack_lvl+0x241/0x360 [ 519.504877][ T9810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.510094][ T9810] ? __pfx__printk+0x10/0x10 [ 519.514706][ T9810] ? snprintf+0xda/0x120 [ 519.518973][ T9810] should_fail_ex+0x3b0/0x4e0 [ 519.523671][ T9810] _copy_to_user+0x31/0xb0 [ 519.528102][ T9810] simple_read_from_buffer+0xca/0x150 [ 519.533495][ T9810] proc_fail_nth_read+0x1e9/0x250 [ 519.538539][ T9810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.544111][ T9810] ? rw_verify_area+0x55e/0x6f0 [ 519.548991][ T9810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.554565][ T9810] vfs_read+0x1fc/0xb70 [ 519.558759][ T9810] ? __pfx___mutex_lock+0x10/0x10 [ 519.563807][ T9810] ? __pfx_vfs_read+0x10/0x10 [ 519.568518][ T9810] ? __fget_files+0x2a/0x410 [ 519.573134][ T9810] ? __fget_files+0x395/0x410 [ 519.577834][ T9810] ? __fget_files+0x2a/0x410 [ 519.582453][ T9810] ksys_read+0x18f/0x2b0 [ 519.586718][ T9810] ? __pfx_ksys_read+0x10/0x10 [ 519.591499][ T9810] ? do_syscall_64+0x100/0x230 [ 519.596284][ T9810] ? do_syscall_64+0xb6/0x230 [ 519.600986][ T9810] do_syscall_64+0xf3/0x230 [ 519.605510][ T9810] ? clear_bhb_loop+0x35/0x90 [ 519.610205][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.616117][ T9810] RIP: 0033:0x7fea58d7d25c [ 519.620559][ T9810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 519.640189][ T9810] RSP: 002b:00007fea59afb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.648610][ T9810] RAX: ffffffffffffffda RBX: 00007fea58f35fa0 RCX: 00007fea58d7d25c [ 519.656576][ T9810] RDX: 000000000000000f RSI: 00007fea59afb0a0 RDI: 0000000000000004 [ 519.664542][ T9810] RBP: 00007fea59afb090 R08: 0000000000000000 R09: 0000000000000000 [ 519.672512][ T9810] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.680482][ T9810] R13: 0000000000000000 R14: 00007fea58f35fa0 R15: 00007ffe4eed3888 [ 519.688460][ T9810] [ 521.626804][ T5887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 521.827491][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 521.854140][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.011409][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.322478][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.513510][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 522.530857][ T9842] warning: `syz.3.1100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 522.551505][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.574495][ T5887] usb 1-1: config 0 descriptor?? [ 522.592745][ T9815] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.601492][ T5887] hub 1-1:0.0: USB hub found [ 522.637601][ T5887] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 522.774580][ T5887] usbhid 1-1:0.0: can't add hid device: -71 [ 522.781330][ T5887] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 522.820569][ T5887] usb 1-1: USB disconnect, device number 3 [ 524.504227][ T9863] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1102'. [ 524.877122][ T9876] 9pnet: p9_errstr2errno: server reported unknown error FcgKIeB$ [ 526.195481][ T9889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1115'. [ 526.991275][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 527.046546][ T9888] ALSA: mixer_oss: invalid OSS volume 'j' [ 527.623430][ T9902] 9pnet_fd: Insufficient options for proto=fd [ 527.985405][ T9911] lo speed is unknown, defaulting to 1000 [ 527.992079][ T9911] lo speed is unknown, defaulting to 1000 [ 528.003861][ T9911] lo speed is unknown, defaulting to 1000 [ 528.026837][ T9911] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 528.067264][ T9911] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 528.184897][ T9911] lo speed is unknown, defaulting to 1000 [ 528.199472][ T9911] lo speed is unknown, defaulting to 1000 [ 528.213073][ T9911] lo speed is unknown, defaulting to 1000 [ 528.225178][ T9911] lo speed is unknown, defaulting to 1000 [ 528.237328][ T9911] lo speed is unknown, defaulting to 1000 [ 532.299981][ T9933] binder: Unknown parameter 'e_time' [ 532.656275][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 533.523938][ T9944] [U]  [ 534.068692][ T9957] FAULT_INJECTION: forcing a failure. [ 534.068692][ T9957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.081860][ T9957] CPU: 0 UID: 0 PID: 9957 Comm: syz.1.1133 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 534.092201][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 534.102273][ T9957] Call Trace: [ 534.105570][ T9957] [ 534.108526][ T9957] dump_stack_lvl+0x241/0x360 [ 534.113233][ T9957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.118459][ T9957] ? __pfx__printk+0x10/0x10 [ 534.123081][ T9957] ? __pfx_lock_release+0x10/0x10 [ 534.128230][ T9957] should_fail_ex+0x3b0/0x4e0 [ 534.132947][ T9957] _copy_from_user+0x2f/0xc0 [ 534.137628][ T9957] iommufd_fops_ioctl+0x47b/0x5a0 [ 534.142695][ T9957] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 534.148279][ T9957] ? __fget_files+0x2a/0x410 [ 534.152928][ T9957] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 534.158500][ T9957] __se_sys_ioctl+0xf5/0x170 [ 534.163125][ T9957] do_syscall_64+0xf3/0x230 [ 534.167659][ T9957] ? clear_bhb_loop+0x35/0x90 [ 534.172367][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.178271][ T9957] RIP: 0033:0x7f7a0eb7e819 [ 534.182693][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.202312][ T9957] RSP: 002b:00007f7a0c9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.210748][ T9957] RAX: ffffffffffffffda RBX: 00007f7a0ed36160 RCX: 00007f7a0eb7e819 [ 534.218745][ T9957] RDX: 0000000020000200 RSI: 0000000000003b86 RDI: 0000000000000006 [ 534.226736][ T9957] RBP: 00007f7a0c9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 534.234734][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.242723][ T9957] R13: 0000000000000000 R14: 00007f7a0ed36160 R15: 00007ffe37aa07d8 [ 534.250731][ T9957] [ 534.935074][ T9963] FAULT_INJECTION: forcing a failure. [ 534.935074][ T9963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.948258][ T9963] CPU: 1 UID: 0 PID: 9963 Comm: syz.2.1134 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 534.958605][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 534.968672][ T9963] Call Trace: [ 534.971970][ T9963] [ 534.974911][ T9963] dump_stack_lvl+0x241/0x360 [ 534.979617][ T9963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.984833][ T9963] ? __pfx__printk+0x10/0x10 [ 534.989449][ T9963] should_fail_ex+0x3b0/0x4e0 [ 534.994150][ T9963] _copy_to_user+0x31/0xb0 [ 534.998582][ T9963] simple_read_from_buffer+0xca/0x150 [ 535.003972][ T9963] proc_fail_nth_read+0x1e9/0x250 [ 535.009009][ T9963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.014571][ T9963] ? rw_verify_area+0x55e/0x6f0 [ 535.019440][ T9963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.024998][ T9963] vfs_read+0x1fc/0xb70 [ 535.029183][ T9963] ? __pfx___mutex_lock+0x10/0x10 [ 535.034226][ T9963] ? __pfx_vfs_read+0x10/0x10 [ 535.038939][ T9963] ? fdget_pos+0x1c0/0x320 [ 535.043382][ T9963] ksys_read+0x18f/0x2b0 [ 535.047644][ T9963] ? __pfx_ksys_read+0x10/0x10 [ 535.052424][ T9963] ? do_syscall_64+0x100/0x230 [ 535.057203][ T9963] ? do_syscall_64+0xb6/0x230 [ 535.061892][ T9963] do_syscall_64+0xf3/0x230 [ 535.066410][ T9963] ? clear_bhb_loop+0x35/0x90 [ 535.071100][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.077006][ T9963] RIP: 0033:0x7fefd057d25c [ 535.081435][ T9963] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 535.101068][ T9963] RSP: 002b:00007fefd134a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.109526][ T9963] RAX: ffffffffffffffda RBX: 00007fefd0736160 RCX: 00007fefd057d25c [ 535.117520][ T9963] RDX: 000000000000000f RSI: 00007fefd134a0a0 RDI: 0000000000000007 [ 535.125504][ T9963] RBP: 00007fefd134a090 R08: 0000000000000000 R09: 0000000000000000 [ 535.133496][ T9963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.141486][ T9963] R13: 0000000000000000 R14: 00007fefd0736160 R15: 00007ffd275ed578 [ 535.149490][ T9963] [ 538.193324][ T9975] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1127'. [ 539.414384][ T9986] FAULT_INJECTION: forcing a failure. [ 539.414384][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 539.427148][ T9986] CPU: 1 UID: 0 PID: 9986 Comm: syz.2.1141 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 539.437500][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 539.447576][ T9986] Call Trace: [ 539.450862][ T9986] [ 539.453806][ T9986] dump_stack_lvl+0x241/0x360 [ 539.458511][ T9986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.463727][ T9986] ? __pfx__printk+0x10/0x10 [ 539.468343][ T9986] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 539.473907][ T9986] ? __pfx___might_resched+0x10/0x10 [ 539.479221][ T9986] should_fail_ex+0x3b0/0x4e0 [ 539.483936][ T9986] ? getname_flags+0xb7/0x540 [ 539.488638][ T9986] should_failslab+0xac/0x100 [ 539.493335][ T9986] ? getname_flags+0xb7/0x540 [ 539.498028][ T9986] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 539.503427][ T9986] getname_flags+0xb7/0x540 [ 539.507957][ T9986] __x64_sys_rename+0x6a/0x90 [ 539.512652][ T9986] do_syscall_64+0xf3/0x230 [ 539.517175][ T9986] ? clear_bhb_loop+0x35/0x90 [ 539.521878][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.527786][ T9986] RIP: 0033:0x7fefd057e819 [ 539.532220][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.551850][ T9986] RSP: 002b:00007fefd136b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 539.560295][ T9986] RAX: ffffffffffffffda RBX: 00007fefd0736080 RCX: 00007fefd057e819 [ 539.568289][ T9986] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000020000180 [ 539.576278][ T9986] RBP: 00007fefd136b090 R08: 0000000000000000 R09: 0000000000000000 [ 539.584264][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.592253][ T9986] R13: 0000000000000000 R14: 00007fefd0736080 R15: 00007ffd275ed578 [ 539.600277][ T9986] [ 540.821007][ T9994] binder: Unknown parameter 'e_time' [ 541.504545][ T29] audit: type=1326 audit(1732136027.252:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 541.527041][ T29] audit: type=1326 audit(1732136027.272:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 542.292900][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 542.304376][ T29] audit: type=1326 audit(1732136027.272:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 542.328538][ T29] audit: type=1326 audit(1732136027.272:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 542.350618][ T29] audit: type=1326 audit(1732136027.272:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 542.373717][T10016] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1148'. [ 542.383253][T10016] openvswitch: : Dropping previously announced user features [ 542.392935][T10016] binder: Unknown parameter '' [ 542.398725][ T29] audit: type=1326 audit(1732136027.322:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefd057d1b0 code=0x7ffc0000 [ 542.577650][ T29] audit: type=1326 audit(1732136028.232:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefd057d1b0 code=0x7ffc0000 [ 542.726846][ T29] audit: type=1326 audit(1732136028.272:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 542.754893][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.781820][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.806419][ T29] audit: type=1326 audit(1732136028.272:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 542.833500][ T5844] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 542.852998][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.871140][ T5844] usb 1-1: config 0 descriptor?? [ 543.431704][ T969] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 543.454395][ T29] audit: type=1326 audit(1732136028.392:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fefd057e819 code=0x7ffc0000 [ 543.911696][ T5844] wacom 0003:056A:0045.0003: unbalanced delimiter at end of report description [ 543.922049][ T5844] wacom 0003:056A:0045.0003: parse failed [ 543.930175][ T5844] wacom 0003:056A:0045.0003: probe with driver wacom failed with error -22 [ 543.950073][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 544.017504][ T969] usb 3-1: config 9 has an invalid interface number: 120 but max is 1 [ 544.027312][ T969] usb 3-1: config 9 has an invalid interface number: 215 but max is 1 [ 544.035620][ T969] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 544.046047][ T969] usb 3-1: config 9 has no interface number 0 [ 544.052621][ T969] usb 3-1: config 9 has no interface number 1 [ 544.060486][ T969] usb 3-1: config 9 interface 120 altsetting 1 endpoint 0xD has invalid maxpacket 1056, setting to 64 [ 544.072971][ T969] usb 3-1: config 9 interface 120 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 544.084277][ T969] usb 3-1: config 9 interface 120 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 544.097046][ T969] usb 3-1: config 9 interface 120 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 16 [ 544.217692][ T969] usb 3-1: config 9 interface 120 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 544.238039][ T969] usb 3-1: config 9 interface 120 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 544.249384][ T969] usb 3-1: config 9 interface 120 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 544.260491][ T969] usb 3-1: config 9 interface 120 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 544.271635][ T969] usb 3-1: config 9 interface 215 altsetting 80 has a duplicate endpoint with address 0x2, skipping [ 544.282738][ T969] usb 3-1: config 9 interface 215 altsetting 80 has a duplicate endpoint with address 0x8, skipping [ 544.294126][ T969] usb 3-1: config 9 interface 215 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 544.505587][ T969] usb 3-1: config 9 interface 120 has no altsetting 0 [ 544.512703][ T969] usb 3-1: config 9 interface 215 has no altsetting 0 [ 544.752732][ T969] usb 3-1: string descriptor 0 read error: -71 [ 544.759921][ T969] usb 3-1: New USB device found, idVendor=1608, idProduct=0006, bcdDevice=7e.c1 [ 544.782993][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.831370][ T969] usb 3-1: can't set config #9, error -71 [ 544.909052][ T969] usb 3-1: USB disconnect, device number 11 [ 545.260895][T10045] binder: Unknown parameter 'e_time' [ 545.894592][T10047] vivid-004: disconnect [ 546.227132][ T969] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 546.419545][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 546.437961][ T969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 546.463468][ T969] usb 3-1: config 0 has no interface number 0 [ 546.480135][ T969] usb 3-1: config 0 interface 2 has no altsetting 0 [ 546.505438][ T969] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 546.580247][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.621194][ T969] usb 3-1: Product: syz [ 546.666972][ T969] usb 3-1: Manufacturer: syz [ 546.671766][ T969] usb 3-1: SerialNumber: syz [ 546.684123][T10053] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1159'. [ 546.736787][ T969] usb 3-1: config 0 descriptor?? [ 548.240490][T10047] vivid-004: reconnect [ 548.285918][ T969] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.294516][ T969] usb 3-1: invalid MIDI in EP 0 [ 548.405246][ T969] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 548.488094][ T969] usb 3-1: USB disconnect, device number 12 [ 548.867125][T10066] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1162'. [ 548.879559][T10066] openvswitch: : Dropping previously announced user features [ 548.897819][T10066] binder: Unknown parameter '' [ 549.451978][T10069] 9pnet_fd: Insufficient options for proto=fd [ 549.460517][T10069] input: syz0 as /devices/virtual/input/input12 [ 549.804858][ T8737] usb 1-1: USB disconnect, device number 4 [ 550.910701][T10081] binder: Unknown parameter 'e_time' [ 551.836861][ T8737] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 551.844513][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 551.864222][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1176'. [ 552.006914][ T8737] usb 1-1: Using ep0 maxpacket: 32 [ 552.028009][ T8737] usb 1-1: config 0 has no interfaces? [ 552.045500][ T8737] usb 1-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 552.056590][ T8737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.074548][ T8737] usb 1-1: Product: syz [ 552.079170][ T8737] usb 1-1: Manufacturer: syz [ 552.083815][ T8737] usb 1-1: SerialNumber: syz [ 552.099645][ T8737] usb 1-1: config 0 descriptor?? [ 552.311799][ T5887] usb 1-1: USB disconnect, device number 5 [ 553.757540][T10122] binder: Unknown parameter 'e_time' [ 553.767843][T10121] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1180'. [ 553.798639][T10121] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1180'. [ 554.076854][ T5887] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 554.093164][T10132] FAULT_INJECTION: forcing a failure. [ 554.093164][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 554.108445][T10132] CPU: 0 UID: 0 PID: 10132 Comm: syz.4.1186 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 554.118900][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 554.128976][T10132] Call Trace: [ 554.132273][T10132] [ 554.135213][T10132] dump_stack_lvl+0x241/0x360 [ 554.139918][T10132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.145141][T10132] ? __pfx__printk+0x10/0x10 [ 554.149769][T10132] ? ref_tracker_alloc+0x332/0x490 [ 554.154911][T10132] should_fail_ex+0x3b0/0x4e0 [ 554.159617][T10132] ? skb_clone+0x20c/0x390 [ 554.164053][T10132] should_failslab+0xac/0x100 [ 554.168758][T10132] ? skb_clone+0x20c/0x390 [ 554.173193][T10132] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 554.178591][T10132] skb_clone+0x20c/0x390 [ 554.182859][T10132] __netlink_deliver_tap+0x3cc/0x7c0 [ 554.188183][T10132] ? netlink_deliver_tap+0x2e/0x1b0 [ 554.193400][T10132] netlink_deliver_tap+0x19d/0x1b0 [ 554.198530][T10132] netlink_unicast+0x7c4/0x990 [ 554.203327][T10132] ? __pfx_netlink_unicast+0x10/0x10 [ 554.208630][T10132] ? __virt_addr_valid+0x183/0x530 [ 554.213759][T10132] ? __check_object_size+0x48e/0x900 [ 554.219069][T10132] netlink_sendmsg+0x8e4/0xcb0 [ 554.223870][T10132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.229188][T10132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.234496][T10132] __sock_sendmsg+0x221/0x270 [ 554.239214][T10132] ____sys_sendmsg+0x52a/0x7e0 [ 554.244111][T10132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.249418][T10132] ? __fget_files+0x2a/0x410 [ 554.254040][T10132] ? __fget_files+0x2a/0x410 [ 554.258669][T10132] __sys_sendmsg+0x269/0x350 [ 554.263282][T10132] ? __pfx_lock_release+0x10/0x10 [ 554.268329][T10132] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.273476][T10132] ? __pfx_vfs_write+0x10/0x10 [ 554.278291][T10132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 554.284648][T10132] ? do_syscall_64+0x100/0x230 [ 554.289448][T10132] ? do_syscall_64+0xb6/0x230 [ 554.294149][T10132] do_syscall_64+0xf3/0x230 [ 554.298677][T10132] ? clear_bhb_loop+0x35/0x90 [ 554.303372][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.309285][T10132] RIP: 0033:0x7fb31a97e819 [ 554.313724][T10132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.333353][T10132] RSP: 002b:00007fb31b833038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.341796][T10132] RAX: ffffffffffffffda RBX: 00007fb31ab35fa0 RCX: 00007fb31a97e819 [ 554.349792][T10132] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 554.357778][T10132] RBP: 00007fb31b833090 R08: 0000000000000000 R09: 0000000000000000 [ 554.365761][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.373750][T10132] R13: 0000000000000000 R14: 00007fb31ab35fa0 R15: 00007ffe673754a8 [ 554.381757][T10132] [ 554.415225][T10136] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1187'. [ 554.446828][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 554.453679][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.461939][ T5887] usb 3-1: config 0 has no interface number 0 [ 554.468769][ T5887] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.479921][ T5887] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 554.489140][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.500434][ T5887] usb 3-1: config 0 descriptor?? [ 554.546975][ T5887] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 554.724652][ T5887] usb 3-1: USB disconnect, device number 13 [ 554.734593][ T5887] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 554.915120][T10143] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1191'. [ 555.108885][ T5844] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 555.327116][ T5844] usb 5-1: device descriptor read/64, error -71 [ 555.852054][ T5844] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 555.873421][T10148] tap0: tun_chr_ioctl cmd 2148553947 [ 555.874901][T10146] binder: Unknown parameter 'e_time' [ 556.023168][ T5844] usb 5-1: device descriptor read/64, error -71 [ 556.141517][ T5844] usb usb5-port1: attempt power cycle [ 556.626849][ T5844] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 556.657453][ T5844] usb 5-1: device descriptor read/8, error -71 [ 556.926939][ T5844] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 556.950055][ T5844] usb 5-1: device descriptor read/8, error -71 [ 557.264025][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.431130][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.755136][ T5844] usb usb5-port1: unable to enumerate USB device [ 557.801910][T10167] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1199'. [ 557.900488][T10172] netlink: 'syz.1.1201': attribute type 3 has an invalid length. [ 557.932444][T10172] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1201'. [ 559.151279][T10168] blktrace: Concurrent blktraces are not allowed on loop4 [ 560.722424][ T5844] IPVS: starting estimator thread 0... [ 560.840112][T10188] IPVS: using max 20 ests per chain, 48000 per kthread [ 560.981635][T10192] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1205'. [ 561.436953][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 561.436970][ T29] audit: type=1400 audit(1732136047.182:135): lsm=SMACK fn=smack_inode_setattr action=denied subject="@.-&#^" object="_" requested=w pid=10197 comm="syz.3.1208" name=6D656D66643A59FFFF dev="hugetlbfs" ino=24690 [ 561.495912][ T29] audit: type=1400 audit(1732136047.192:136): lsm=SMACK fn=smack_inode_permission action=denied subject="@.-&#^" object="_" requested=wx pid=10197 comm="syz.3.1208" name="229" dev="tmpfs" ino=1242 [ 561.566714][ T29] audit: type=1400 audit(1732136047.282:137): lsm=SMACK fn=smack_inode_permission action=denied subject="@.-&#^" object="_" requested=rw pid=10197 comm="syz.3.1208" name="kvm" dev="devtmpfs" ino=84 [ 561.721285][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 563.037608][T10222] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1213'. [ 563.321300][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.986838][T10238] ALSA: mixer_oss: invalid OSS volume 'j' [ 566.502842][ T29] audit: type=1326 audit(1732136052.232:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 566.557424][ T29] audit: type=1326 audit(1732136052.232:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 566.624744][ T29] audit: type=1326 audit(1732136052.242:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 566.799788][ T29] audit: type=1326 audit(1732136052.242:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 566.834957][T10263] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.841805][T10263] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 567.242790][ T969] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 567.253493][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 567.277330][ T29] audit: type=1326 audit(1732136052.242:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 567.307930][ T29] audit: type=1326 audit(1732136052.242:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 567.308313][T10273] 9pnet_fd: Insufficient options for proto=fd [ 567.329770][ T29] audit: type=1326 audit(1732136052.242:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 567.391690][ T29] audit: type=1326 audit(1732136052.242:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 567.401045][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.413807][ T29] audit: type=1326 audit(1732136052.242:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 567.423667][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.443865][ T29] audit: type=1326 audit(1732136052.582:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0eb7e819 code=0x7ffc0000 [ 567.472781][T10268] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1224'. [ 567.493386][T10268] openvswitch: : Dropping previously announced user features [ 567.502754][T10275] binder: Unknown parameter '' [ 567.658733][ T5844] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 567.845237][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 567.855870][ T5844] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 567.921534][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.937016][ T5844] usb 5-1: config 0 descriptor?? [ 568.035501][T10288] zonefs (nullb0) ERROR: Not a zoned block device [ 568.161042][ T5844] ath6kl: Failed to submit usb control message: -71 [ 568.176480][ T5844] ath6kl: unable to send the bmi data to the device: -71 [ 568.196170][ T5844] ath6kl: Unable to send get target info: -71 [ 568.287881][ T5844] ath6kl: Failed to init ath6kl core: -71 [ 568.489588][ T5844] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 568.570616][ T969] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 568.619502][ T5844] usb 5-1: USB disconnect, device number 11 [ 568.796404][T10293] netlink: 'syz.2.1233': attribute type 1 has an invalid length. [ 568.838153][T10293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.861789][T10293] bond1: (slave ip6gretap1): making interface the new active one [ 568.872472][T10293] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 569.316872][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.328224][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.445371][ T969] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 569.459263][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.287831][ T969] usb 4-1: config 0 descriptor?? [ 571.082702][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.122008][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.214589][ T969] magicmouse 0003:05AC:0269.0004: item fetching failed at offset 5/7 [ 571.237469][ T969] magicmouse 0003:05AC:0269.0004: magicmouse hid parse failed [ 571.245038][ T969] magicmouse 0003:05AC:0269.0004: probe with driver magicmouse failed with error -22 [ 572.084224][ T969] usb 4-1: USB disconnect, device number 14 [ 573.208479][T10339] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1242'. [ 573.226436][T10339] openvswitch: : Dropping previously announced user features [ 574.220870][T10334] binder: Unknown parameter '' [ 574.579259][T10340] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 576.015009][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 576.306916][ T969] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 576.507063][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 576.596374][ T969] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.704167][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.739955][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.907427][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 576.912691][ T969] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 576.914589][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.926788][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.734620][ T969] usb 4-1: config 0 descriptor?? [ 577.740575][T10355] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 577.750402][ T969] hub 4-1:0.0: USB hub found [ 577.766645][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.793485][ T5886] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 577.803973][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.825102][ T5886] usb 1-1: config 0 descriptor?? [ 578.394848][T10371] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1254'. [ 578.408189][T10371] openvswitch: : Dropping previously announced user features [ 578.445692][T10371] binder: Unknown parameter '' [ 579.250089][ T969] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 579.253273][ T5886] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 579.311115][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.356702][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.464154][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 579.478779][ T969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 579.509653][ T969] usb 4-1: USB disconnect, device number 15 [ 579.664600][T10388] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 579.683687][T10388] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1261'. [ 579.886712][ T5922] usb 1-1: USB disconnect, device number 6 [ 580.903016][T10394] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1262'. [ 580.987130][T10394] openvswitch: : Dropping previously announced user features [ 581.062400][T10394] binder: Unknown parameter '' [ 581.833024][ T969] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 582.937069][ T969] usb 4-1: device descriptor read/all, error -71 [ 585.091808][T10426] tty tty27: ldisc open failed (-12), clearing slot 26 [ 585.212702][T10437] binder: BINDER_SET_CONTEXT_MGR already set [ 585.219188][T10437] binder: 10436:10437 ioctl 4018620d 20000040 returned -16 [ 586.682365][T10447] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1276'. [ 586.691993][T10447] openvswitch: : Dropping previously announced user features [ 586.701901][T10447] binder: Unknown parameter '' [ 587.278924][T10458] x_tables: ip_tables: osf match: only valid for protocol 6 [ 587.389650][ T969] IPVS: starting estimator thread 0... [ 587.473033][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 587.482498][T10466] IPVS: using max 19 ests per chain, 45600 per kthread [ 587.671963][T10472] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1285'. [ 587.681441][T10472] FAULT_INJECTION: forcing a failure. [ 587.681441][T10472] name failslab, interval 1, probability 0, space 0, times 0 [ 587.694381][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.1.1285 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 587.704818][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 587.714895][T10472] Call Trace: [ 587.718191][T10472] [ 587.721133][T10472] dump_stack_lvl+0x241/0x360 [ 587.725833][T10472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.731047][T10472] ? __pfx__printk+0x10/0x10 [ 587.735656][T10472] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 587.741674][T10472] ? __pfx___might_resched+0x10/0x10 [ 587.746981][T10472] ? xfrm_policy_bysel_ctx+0x2bb/0xb30 [ 587.752470][T10472] should_fail_ex+0x3b0/0x4e0 [ 587.757168][T10472] should_failslab+0xac/0x100 [ 587.761860][T10472] ? __alloc_skb+0x1c3/0x440 [ 587.766465][T10472] kmem_cache_alloc_node_noprof+0x71/0x320 [ 587.772301][T10472] __alloc_skb+0x1c3/0x440 [ 587.776750][T10472] ? __nla_validate_parse+0x27eb/0x3090 [ 587.782318][T10472] ? __pfx___alloc_skb+0x10/0x10 [ 587.787259][T10472] xfrm_get_policy+0x623/0x10a0 [ 587.792117][T10472] ? __pfx_xfrm_get_policy+0x10/0x10 [ 587.797410][T10472] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 587.803387][T10472] ? cap_capable+0x1b4/0x250 [ 587.807975][T10472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 587.814294][T10472] ? safesetid_security_capable+0xb2/0x1d0 [ 587.820103][T10472] ? __nla_parse+0x40/0x60 [ 587.824521][T10472] xfrm_user_rcv_msg+0x75b/0xa80 [ 587.829465][T10472] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 587.834945][T10472] ? __mutex_trylock_common+0x183/0x2e0 [ 587.840487][T10472] ? __pfx___might_resched+0x10/0x10 [ 587.845769][T10472] ? __pfx___mutex_trylock_common+0x10/0x10 [ 587.851666][T10472] netlink_rcv_skb+0x1e3/0x430 [ 587.856427][T10472] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 587.861885][T10472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 587.867198][T10472] xfrm_netlink_rcv+0x79/0x90 [ 587.871874][T10472] netlink_unicast+0x7f6/0x990 [ 587.876642][T10472] ? __pfx_netlink_unicast+0x10/0x10 [ 587.881921][T10472] ? __virt_addr_valid+0x183/0x530 [ 587.887028][T10472] ? __check_object_size+0x48e/0x900 [ 587.892317][T10472] netlink_sendmsg+0x8e4/0xcb0 [ 587.897088][T10472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.902375][T10472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.907654][T10472] __sock_sendmsg+0x221/0x270 [ 587.912333][T10472] ____sys_sendmsg+0x52a/0x7e0 [ 587.917097][T10472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.922374][T10472] ? __fget_files+0x2a/0x410 [ 587.926960][T10472] ? __fget_files+0x2a/0x410 [ 587.931558][T10472] __sys_sendmsg+0x269/0x350 [ 587.936142][T10472] ? __pfx_lock_release+0x10/0x10 [ 587.941160][T10472] ? __pfx___sys_sendmsg+0x10/0x10 [ 587.946279][T10472] ? __pfx_vfs_write+0x10/0x10 [ 587.951068][T10472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 587.957391][T10472] ? do_syscall_64+0x100/0x230 [ 587.962151][T10472] ? do_syscall_64+0xb6/0x230 [ 587.966824][T10472] do_syscall_64+0xf3/0x230 [ 587.971323][T10472] ? clear_bhb_loop+0x35/0x90 [ 587.975993][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.981877][T10472] RIP: 0033:0x7f7a0eb7e819 [ 587.986317][T10472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.005933][T10472] RSP: 002b:00007f7a0f8ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.014361][T10472] RAX: ffffffffffffffda RBX: 00007f7a0ed35fa0 RCX: 00007f7a0eb7e819 [ 588.022379][T10472] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 588.030375][T10472] RBP: 00007f7a0f8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 588.038361][T10472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.046356][T10472] R13: 0000000000000000 R14: 00007f7a0ed35fa0 R15: 00007ffe37aa07d8 [ 588.054361][T10472] [ 588.124344][T10474] ======================================================= [ 588.124344][T10474] WARNING: The mand mount option has been deprecated and [ 588.124344][T10474] and is ignored by this kernel. Remove the mand [ 588.124344][T10474] option from the mount to silence this warning. [ 588.124344][T10474] ======================================================= [ 589.806974][T10490] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1289'. [ 589.816592][T10490] openvswitch: : Dropping previously announced user features [ 589.870311][T10490] binder: Unknown parameter '' [ 589.881152][T10487] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1288'. [ 589.895434][T10487] openvswitch: : Dropping previously announced user features [ 589.935226][T10487] binder: Unknown parameter '' [ 592.927950][T10509] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1292'. [ 592.937450][T10509] openvswitch: : Dropping previously announced user features [ 592.947225][T10509] binder: Unknown parameter '' [ 593.637704][T10519] xt_policy: neither incoming nor outgoing policy selected [ 593.645040][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 593.645056][ T29] audit: type=1326 audit(1732136079.332:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1295" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a0eb7e819 code=0x0 [ 594.086607][ T29] audit: type=1326 audit(1732136079.832:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10526 comm="syz.3.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea58d7e819 code=0x0 [ 594.225721][T10536] xt_policy: neither incoming nor outgoing policy selected [ 594.825845][T10538] kvm: emulating exchange as write [ 597.504148][T10568] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1308'. [ 597.513782][T10568] openvswitch: : Dropping previously announced user features [ 597.523726][T10568] binder: Unknown parameter '' [ 597.537568][ T5887] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 598.587608][T10581] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1309'. [ 598.599962][T10581] openvswitch: : Dropping previously announced user features [ 598.657436][T10581] binder: Unknown parameter '' [ 599.267378][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 599.322778][ T5887] usb 3-1: device descriptor read/all, error -61 [ 599.550093][ T5887] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 602.394923][ T29] audit: type=1326 audit(1732136088.132:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.417049][ T29] audit: type=1326 audit(1732136088.132:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.439948][ T29] audit: type=1326 audit(1732136088.132:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.461678][ T29] audit: type=1326 audit(1732136088.132:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.484065][ T29] audit: type=1326 audit(1732136088.132:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.507543][ T29] audit: type=1326 audit(1732136088.132:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.529490][ T29] audit: type=1326 audit(1732136088.132:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.551238][ T29] audit: type=1326 audit(1732136088.132:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.577280][ T29] audit: type=1326 audit(1732136088.132:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.599082][ T29] audit: type=1326 audit(1732136088.132:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fea58d7e819 code=0x7ffc0000 [ 602.731925][T10601] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1313'. [ 603.850037][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 605.044231][ T5889] usb 4-1: device descriptor read/64, error -71 [ 605.521965][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 605.979912][T10632] openvswitch: netlink: EtherType 0 is less than min 600 [ 606.416197][ T8737] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 606.475071][T10644] FAULT_INJECTION: forcing a failure. [ 606.475071][T10644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.489431][T10644] CPU: 0 UID: 0 PID: 10644 Comm: syz.1.1329 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 606.499927][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 606.510002][T10644] Call Trace: [ 606.513303][T10644] [ 606.516258][T10644] dump_stack_lvl+0x241/0x360 [ 606.520963][T10644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.520992][T10644] ? __pfx__printk+0x10/0x10 [ 606.521012][T10644] ? __pfx_lock_release+0x10/0x10 [ 606.521035][T10644] should_fail_ex+0x3b0/0x4e0 [ 606.540510][T10644] _copy_from_iter+0x21f/0x1e70 [ 606.545381][T10644] ? __virt_addr_valid+0x183/0x530 [ 606.550507][T10644] ? __pfx_lock_release+0x10/0x10 [ 606.555546][T10644] ? __alloc_skb+0x28f/0x440 [ 606.560134][T10644] ? __pfx__copy_from_iter+0x10/0x10 [ 606.565414][T10644] ? __virt_addr_valid+0x183/0x530 [ 606.570520][T10644] ? __virt_addr_valid+0x183/0x530 [ 606.575622][T10644] ? __virt_addr_valid+0x45f/0x530 [ 606.580726][T10644] ? __check_object_size+0x48e/0x900 [ 606.586007][T10644] netlink_sendmsg+0x73d/0xcb0 [ 606.590781][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.596072][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.601354][T10644] __sock_sendmsg+0x221/0x270 [ 606.606038][T10644] ____sys_sendmsg+0x52a/0x7e0 [ 606.610804][T10644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.616083][T10644] ? __fget_files+0x2a/0x410 [ 606.620675][T10644] ? __fget_files+0x2a/0x410 [ 606.625265][T10644] __sys_sendmmsg+0x36a/0x720 [ 606.629973][T10644] ? __pfx___sys_sendmmsg+0x10/0x10 [ 606.635187][T10644] ? __pfx_lock_release+0x10/0x10 [ 606.640210][T10644] ? kstrtouint_from_user+0x128/0x190 [ 606.645604][T10644] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 606.651499][T10644] ? ksys_write+0x22a/0x2b0 [ 606.656013][T10644] ? __pfx_lock_release+0x10/0x10 [ 606.661041][T10644] ? vfs_write+0x730/0xd30 [ 606.665462][T10644] ? __mutex_unlock_slowpath+0x21e/0x790 [ 606.671109][T10644] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 606.677085][T10644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.683405][T10644] ? do_syscall_64+0x100/0x230 [ 606.688175][T10644] __x64_sys_sendmmsg+0xa0/0xb0 [ 606.693045][T10644] do_syscall_64+0xf3/0x230 [ 606.697564][T10644] ? clear_bhb_loop+0x35/0x90 [ 606.702246][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.708137][T10644] RIP: 0033:0x7f7a0eb7e819 [ 606.712551][T10644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.732164][T10644] RSP: 002b:00007f7a0f8ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 606.740605][T10644] RAX: ffffffffffffffda RBX: 00007f7a0ed35fa0 RCX: 00007f7a0eb7e819 [ 606.748581][T10644] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 606.756556][T10644] RBP: 00007f7a0f8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 606.764523][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.772495][T10644] R13: 0000000000000000 R14: 00007f7a0ed35fa0 R15: 00007ffe37aa07d8 [ 606.780473][T10644] [ 606.837964][ T8737] usb 3-1: Using ep0 maxpacket: 32 [ 606.845162][ T8737] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.856873][ T8737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.448206][ T8737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 607.493731][ T8737] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 607.508802][ T8737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.632144][ T8737] usb 3-1: config 0 descriptor?? [ 607.642021][T10628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 607.657296][ T8737] hub 3-1:0.0: USB hub found [ 607.668982][T10647] ALSA: mixer_oss: invalid OSS volume 'j' [ 607.722597][T10652] FAULT_INJECTION: forcing a failure. [ 607.722597][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 607.754178][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.4.1333 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 607.764674][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 607.774842][T10652] Call Trace: [ 607.778153][T10652] [ 607.781080][T10652] dump_stack_lvl+0x241/0x360 [ 607.785787][T10652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.791007][T10652] ? __pfx__printk+0x10/0x10 [ 607.795618][T10652] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 607.801203][T10652] ? __pfx___might_resched+0x10/0x10 [ 607.806564][T10652] should_fail_ex+0x3b0/0x4e0 [ 607.811268][T10652] ? security_file_alloc+0x32/0x310 [ 607.816482][T10652] should_failslab+0xac/0x100 [ 607.821190][T10652] ? security_file_alloc+0x32/0x310 [ 607.826390][T10652] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 607.831778][T10652] security_file_alloc+0x32/0x310 [ 607.836850][T10652] init_file+0x91/0x280 [ 607.841037][T10652] alloc_empty_file+0xb8/0x1d0 [ 607.845808][T10652] path_openat+0x107/0x3590 [ 607.850341][T10652] ? stack_trace_save+0x118/0x1d0 [ 607.855394][T10652] ? __lock_acquire+0x1397/0x2100 [ 607.860455][T10652] ? __pfx_stack_trace_save+0x10/0x10 [ 607.865855][T10652] ? __lock_acquire+0x1397/0x2100 [ 607.870886][T10652] ? __pfx_path_openat+0x10/0x10 [ 607.875844][T10652] do_filp_open+0x27f/0x4e0 [ 607.880359][T10652] ? __pfx_do_filp_open+0x10/0x10 [ 607.885387][T10652] ? do_raw_spin_lock+0x14f/0x370 [ 607.890456][T10652] do_sys_openat2+0x13e/0x1d0 [ 607.895140][T10652] ? __pfx_do_sys_openat2+0x10/0x10 [ 607.900336][T10652] ? __fget_files+0x2a/0x410 [ 607.904940][T10652] ? __fget_files+0x2a/0x410 [ 607.909532][T10652] __x64_sys_open+0x225/0x270 [ 607.914218][T10652] ? __pfx___x64_sys_open+0x10/0x10 [ 607.919416][T10652] ? do_syscall_64+0x100/0x230 [ 607.924180][T10652] ? do_syscall_64+0xb6/0x230 [ 607.928855][T10652] do_syscall_64+0xf3/0x230 [ 607.933356][T10652] ? clear_bhb_loop+0x35/0x90 [ 607.938037][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.943924][T10652] RIP: 0033:0x7fb31a97e819 [ 607.948335][T10652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.967941][T10652] RSP: 002b:00007fb31b833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 607.976352][T10652] RAX: ffffffffffffffda RBX: 00007fb31ab35fa0 RCX: 00007fb31a97e819 [ 607.984318][T10652] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000000020000180 [ 607.992281][T10652] RBP: 00007fb31b833090 R08: 0000000000000000 R09: 0000000000000000 [ 608.000245][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.008211][T10652] R13: 0000000000000000 R14: 00007fb31ab35fa0 R15: 00007ffe673754a8 [ 608.016193][T10652] [ 609.387078][ T8737] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 609.423395][ T8737] usbhid 3-1:0.0: can't add hid device: -71 [ 609.440128][ T8737] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.481480][ T8737] usb 3-1: USB disconnect, device number 16 [ 610.118738][T10668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1336'. [ 611.364938][T10661] ALSA: mixer_oss: invalid OSS volume 'j' [ 611.991182][T10678] check_preemption_disabled: 17 callbacks suppressed [ 611.991204][T10678] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.1337/10678 [ 612.007577][T10678] caller is nft_inner_eval+0xda/0x18e0 [ 612.013065][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.2.1337 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 612.023489][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 612.033557][T10678] Call Trace: [ 612.036846][T10678] [ 612.039787][T10678] dump_stack_lvl+0x241/0x360 [ 612.044489][T10678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.049707][T10678] ? __pfx__printk+0x10/0x10 [ 612.054328][T10678] check_preemption_disabled+0x10e/0x120 [ 612.059986][T10678] nft_inner_eval+0xda/0x18e0 [ 612.064677][T10678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.070709][T10678] ? __pfx_nft_inner_eval+0x10/0x10 [ 612.075937][T10678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.081937][T10678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.088290][T10678] ? irqentry_exit+0x63/0x90 [ 612.092898][T10678] ? lockdep_hardirqs_on+0x99/0x150 [ 612.098127][T10678] ? __pfx_nft_inner_eval+0x10/0x10 [ 612.103359][T10678] ? nft_do_chain+0x399/0x1da0 [ 612.108157][T10678] nft_do_chain+0x4ad/0x1da0 [ 612.112772][T10678] ? __local_bh_enable_ip+0x168/0x200 [ 612.118182][T10678] ? __pfx_nft_do_chain+0x10/0x10 [ 612.123262][T10678] nft_do_chain_ipv4+0x202/0x320 [ 612.128230][T10678] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 612.133722][T10678] ? nf_nat_ipv4_out+0x303/0x4f0 [ 612.138684][T10678] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 612.144159][T10678] nf_hook_slow+0xc3/0x220 [ 612.148593][T10678] ? __pfx_ip_finish_output+0x10/0x10 [ 612.153987][T10678] nf_hook+0x2c4/0x450 [ 612.158082][T10678] ? nf_hook+0x9e/0x450 [ 612.162253][T10678] ? __pfx_nf_hook+0x10/0x10 [ 612.166860][T10678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.172858][T10678] ? __pfx_ip_finish_output+0x10/0x10 [ 612.178264][T10678] ip_output+0x185/0x230 [ 612.182520][T10678] ? __pfx_ip_finish_output+0x10/0x10 [ 612.187916][T10678] __ip_queue_xmit+0x118c/0x1b80 [ 612.192879][T10678] ? __ip_queue_xmit+0x5f/0x1b80 [ 612.197850][T10678] ? __pfx_ip_queue_xmit+0x10/0x10 [ 612.203009][T10678] __tcp_transmit_skb+0x2544/0x3b30 [ 612.208250][T10678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.214263][T10678] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 612.219834][T10678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.225839][T10678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.232220][T10678] tcp_connect+0x2c21/0x4940 [ 612.236871][T10678] ? __pfx_tcp_connect+0x10/0x10 [ 612.241830][T10678] ? sk_setup_caps+0x816/0xa50 [ 612.246622][T10678] tcp_v4_connect+0x1127/0x1ba0 [ 612.251509][T10678] ? __pfx_tcp_v4_connect+0x10/0x10 [ 612.256755][T10678] __inet_stream_connect+0x262/0xf30 [ 612.262102][T10678] ? __pfx___inet_stream_connect+0x10/0x10 [ 612.267947][T10678] ? __kasan_kmalloc+0x98/0xb0 [ 612.272737][T10678] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 612.278125][T10678] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 612.283699][T10678] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 612.288920][T10678] tcp_sendmsg_locked+0x4a23/0x50a0 [ 612.294109][T10678] ? __lock_acquire+0x1397/0x2100 [ 612.299135][T10678] ? mark_lock+0x9a/0x360 [ 612.303455][T10678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.309425][T10678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.315738][T10678] ? lockdep_hardirqs_on+0x99/0x150 [ 612.320926][T10678] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 612.326462][T10678] ? __local_bh_enable_ip+0x168/0x200 [ 612.331823][T10678] ? do_raw_spin_unlock+0x13c/0x8b0 [ 612.337013][T10678] tcp_sendmsg+0x30/0x50 [ 612.341244][T10678] __sock_sendmsg+0x1a6/0x270 [ 612.345916][T10678] __sys_sendto+0x363/0x4c0 [ 612.350406][T10678] ? __pfx___sys_sendto+0x10/0x10 [ 612.355412][T10678] ? do_futex+0x33b/0x560 [ 612.359742][T10678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.365715][T10678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 612.372030][T10678] __x64_sys_sendto+0xde/0x100 [ 612.376788][T10678] do_syscall_64+0xf3/0x230 [ 612.381274][T10678] ? clear_bhb_loop+0x35/0x90 [ 612.385936][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.391815][T10678] RIP: 0033:0x7fefd057e819 [ 612.396216][T10678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.415804][T10678] RSP: 002b:00007fefd134a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 612.424205][T10678] RAX: ffffffffffffffda RBX: 00007fefd0736160 RCX: 00007fefd057e819 [ 612.432165][T10678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 612.440122][T10678] RBP: 00007fefd05f175e R08: 0000000020e68000 R09: 0000000000000010 [ 612.448079][T10678] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 612.456034][T10678] R13: 0000000000000000 R14: 00007fefd0736160 R15: 00007ffd275ed578 [ 612.463998][T10678]