last executing test programs: 43.291513771s ago: executing program 2 (id=1630): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) write(r3, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) bpf$MAP_CREATE(0x0, 0x0, 0x0) 40.106524801s ago: executing program 2 (id=1629): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000008c0)={&(0x7f0000000840)=[{0x5, 0xc001, 0xb8, &(0x7f0000000040)="0087757ffbc34472e334169995187d0d12199bc2933244743758501a282764f15517e6242c2adfb74e51ea503d303a7c0ad8adeccd05a1476bdd54b441cbb7e5f9b7414634c0c00a2d356ad0a114afff64aa330a8b92765dd04d18a119391cd79afe3c9f056c133c5877457994ad60fd80e5f54bca72ac3a6372c5470f6d87d5a8d8fe536c17f2fb75b26b6d8454e67153a5ae00e75f52674d60cb0768e15498ebdd9f225d52c1449385147092324245168d91b6554ff313"}, {0xf, 0xea01, 0x0, 0x0}, {0xf214, 0x800, 0x0, 0x0}], 0x3}) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}, 0x1, 0x8100000018000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900"], 0x48}}, 0x0) 38.654973226s ago: executing program 2 (id=1635): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 37.571862911s ago: executing program 2 (id=1642): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 37.308491044s ago: executing program 2 (id=1643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d410000000000000002900000037000000", 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000016210000000000000a20000000000a0102000000000000000001"], 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) unshare(0x2a020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x4a) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0108000000000000000000000000080003400000003c08000540000000250900020073797a300000000008000a40000000000900010073797a310000000008000640ffffff000c000b"], 0x80}}, 0x0) 35.311383325s ago: executing program 2 (id=1648): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000700), 0x8) dup(r0) umount2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r3, 0x28, 0x3, 0x0, &(0x7f00000001c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 34.058858737s ago: executing program 1 (id=1653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) 32.28292088s ago: executing program 0 (id=1654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 32.282696604s ago: executing program 1 (id=1655): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 31.9715076s ago: executing program 1 (id=1657): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000700), 0x8) dup(r0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r1, 0x28, 0x3, 0x0, &(0x7f00000001c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 31.8217926s ago: executing program 0 (id=1658): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)=""/57, 0x39}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000000d8, 0x9200000000000000) 31.291915315s ago: executing program 0 (id=1659): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) write(r3, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) bpf$MAP_CREATE(0x0, 0x0, 0x0) 29.687376072s ago: executing program 0 (id=1660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 29.613287723s ago: executing program 0 (id=1661): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4010080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)=""/57, 0x39}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r2, 0x1, 0x106) r3 = socket(0x2c, 0x80000, 0x4a) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000000d8, 0x9200000000000000) 28.954388518s ago: executing program 1 (id=1663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) 28.668589779s ago: executing program 1 (id=1664): socket$inet6_dccp(0xa, 0x6, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f00000004c0)=[{&(0x7f00000003c0)="51930bb7", 0x4}], 0x1) (async) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x7f, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file1'}, 0xb) (async) close_range(r0, r1, 0x0) 28.668137073s ago: executing program 0 (id=1665): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rename(&(0x7f0000000280)='./file0/../file0/file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000780)={0x50, 0x0, r2, {0x7, 0x28, 0x1, 0x0, 0x1200, 0x0, 0x20, 0x22}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000200)='./file0/../file0/file0/file0\x00', 0x80000, 0x1d3) close_range(r0, 0xffffffffffffffff, 0x0) 28.554735661s ago: executing program 1 (id=1666): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rename(&(0x7f0000000280)='./file0/../file0/file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000780)={0x50, 0x0, r2, {0x7, 0x28, 0x1, 0x0, 0x1200, 0x0, 0x20, 0x22}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000200)='./file0/../file0/file0/file0\x00', 0x80000, 0x1d3) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 10.868480999s ago: executing program 3 (id=1671): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 10.62040813s ago: executing program 3 (id=1672): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100)={{0x0}, {0x0}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = epoll_create1(0x0) statx(r3, 0x0, 0x1000, 0x0, &(0x7f0000001900)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="66643dba00f8a317646e05b4e4f99210282b115b3748ced44c451411d257f06824e874662797239d263b50a9449abfc8d2f187b7f270d9a8b0906b3e7c7d5f2cf6c2c758599122c4ad2153b1341e7d973a2ea92a0e5c9f120a16c62cc8334ed1ad39a00ca608c061b383bed050f83b8bc42f68da1ba357e4d93ec348de7314498143f87932f419c647e1e75bd5849852c340819206e010261d80daa26c5a4dc125d0fbf642f1c99a53cfce5602babf8eda23811b7177d7faed1388a37fea3a0bcb755ae95eb3e48fb22f3b6418d4aa02c1", @ANYRES16=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030301f30c56c10413030736f303030302c75736572144d43718ebb3244c52d98759b60e3c7ae195f707a0a", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r0]) rename(&(0x7f0000000280)='./file0/../file0/file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0xcd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000d00)={0x38, r6, 0xd11, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80046601, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000080)=0x87f2, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1f}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, &(0x7f00000004c0)={0x7f, [[0x711a, 0x7a0, 0x764, 0x4b6, 0x6, 0x4, 0x3, 0x4], [0xfffffe01, 0x171791d1, 0x3, 0xf, 0x6, 0xfffffe01, 0x401, 0x1], [0x2, 0x9, 0x2, 0x2, 0x6, 0x1, 0xffffff7f, 0x7]], '\x00', [{0x7e8, 0xffff, 0x0, 0x1, 0x0, 0x1}, {0x1000, 0x8000, 0x1, 0x0, 0x0, 0x1}, {0x7fff, 0xaf65, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0x4, 0x0, 0x0, 0x1}, {0x2000000, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x140000, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x8001, 0x0, 0x0, 0x1}, {0x1, 0x1ff, 0x1, 0x0, 0x0, 0x1}, {0x7f, 0xf4, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x101, 0x0, 0x1}, {0x3, 0x10778304}], '\x00', 0xa}) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffff9}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x28, 0x1, 0x0, 0x1200, 0x0, 0x20, 0x22}}, 0x50) io_setup(0x9, &(0x7f0000000080)) r11 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r11, 0x0) syz_io_uring_setup(0x22ae, &(0x7f0000000c40)={0x0, 0x0, 0x800, 0x1, 0x42000000}, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0/../file0/file0/file0\x00', 0x80000, 0x1d3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.180626642s ago: executing program 3 (id=1673): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000700), 0x8) dup(r0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r1, 0x28, 0x3, 0x0, &(0x7f00000001c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 9.46064261s ago: executing program 4 (id=1675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000140009050000000000000000021f0080", @ANYRES32=r2, @ANYBLOB="080002007f"], 0x34}}, 0x0) 7.759303086s ago: executing program 3 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000100)="67660f7f955ee30d482e0f13709a0fb035d9ff66f30f21933e673e26650fe2791226660ff367a80f01d166b80500000066b9000000000f01d9b829010f00d0", 0x3f}], 0x1, 0x61, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40001, 0x0) io_setup(0x3ff, &(0x7f0000000200)=0x0) io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xfffffec4}]) dup3(r3, r1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0xffff1000, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x47c}}, 0x0) 7.624636041s ago: executing program 4 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000140009050000000000000000021f0080", @ANYRES32=r2, @ANYBLOB="080002007f"], 0x34}}, 0x0) (fail_nth: 1) 7.036354132s ago: executing program 4 (id=1680): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000308000600000018000000000000000004000480"], 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x78}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r7, 0x3ff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800"/28], 0x0) 6.786155492s ago: executing program 3 (id=1681): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 6.429235278s ago: executing program 3 (id=1682): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0x7c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000003a000000"]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f00000000c0)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="3c59ea66b8fc0dab802eed88c11a00000000000000bf666569c1699a67b2526461962ec85571b09403aea11c3b23be6b2c89041e244a6a7f5c75736167bd06047cdea316f3770ecb0d2b409a21ba2b6ca8984f3bc51a15ada54ea1e1fe3cc56982a60006e1943f11032c5d87f573ed216e612db2ea3b5ac5da23adb047882c31ad6db66fd123617703bff6a9cd56c5446dcc132ef57eb75ec9f0750ca55de73747e3529f94b6", 0xa6}], 0x1, &(0x7f0000000240)=[{0xe0, 0x110, 0x5, "5a5cb4d01d352b436703092c17a5517e0422493e015ccac97cf93ece3a98d5bbec1a52df84b3f2565f6fed30e7218a50d21f60ba2dc764ab49d4e08b16a36890169b64e2a567e8395ecad46a30308d792bdf832a52368df4d6ab5e8dc8c4282c4c5e074a52eac0d93d928c77d074b70379ee639ff8fe0100ce1c5dda7354b2439892ee41bf19d3f924bfc6d7acf9e7c4414fb52bb03e74553f884db6a3e0f5be1a7e2e2895d1380d9f51eaf693b19d2502f5971110cb62ab90643e87d77ddb943186787e79aef4c9df"}, {0xe8, 0x110, 0xe5f, "39209d66ca19a1033f6da31923a08c520b4a8a648d741f4693b2f872eb65366a2460d3c869c7aa124bfffd19cfd7f408469a56b6697c1d74c50183b16d05c014b3c6e9ecafc95de93e313ce7187ad878030dab55f5220b78898941d9a6b7feaa39cbded710d1c22630c7b337cebf82cc40552bc3acd7d44a6e87d927086faf5249b00d6e17a7a06178add5d21e760bf43394c1b1f45fcc79c0a5a3f1fae29d24ed9d4843d1d383c4dcc3f48cce539ef3befca3bc87193dc3b0a8e1c40bb55e1dcb4b9e997a5cc2f311481a33807b12f2faa1e43b308a10"}, {0x70, 0x107, 0x3, "f9a096699be5c29823e5685a01d27a66ca5ee2c99f1d06453006e21a7b2d1acb30ec9d2ba6d69edc47456c9718515838a1dda36a46f8441a33e5b1e431cbcdec2d05b6d1350d6e8258cc0e2090b4d74c229d9831eb6daa192d"}], 0x238}, 0x4050) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x30}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000540)=&(0x7f00000002c0)) syz_usb_connect$hid(0x0, 0x151, 0x0, 0x0) 4.74962845s ago: executing program 4 (id=1684): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) write(r3, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.619908405s ago: executing program 4 (id=1685): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000700), 0x8) dup(r0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r1, 0x28, 0x3, 0x0, &(0x7f00000001c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 4 (id=1686): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000200), &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): terval 1, probability 0, space 0, times 0 [ 453.561417][ T5289] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 453.587482][T10480] CPU: 0 UID: 0 PID: 10480 Comm: syz.4.1378 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 453.598353][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 453.608456][T10480] Call Trace: [ 453.611773][T10480] [ 453.614738][T10480] dump_stack_lvl+0x241/0x360 [ 453.619474][T10480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.624721][T10480] ? __pfx__printk+0x10/0x10 [ 453.629379][T10480] ? snprintf+0xda/0x120 [ 453.633676][T10480] should_fail_ex+0x3b0/0x4e0 [ 453.638413][T10480] _copy_to_user+0x2f/0xb0 [ 453.642888][T10480] simple_read_from_buffer+0xca/0x150 [ 453.648368][T10480] proc_fail_nth_read+0x1e9/0x250 [ 453.653447][T10480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.659061][T10480] ? rw_verify_area+0x55e/0x6f0 [ 453.663984][T10480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.669574][T10480] vfs_read+0x201/0xbc0 [ 453.673750][T10480] ? __pfx_lock_release+0x10/0x10 [ 453.678820][T10480] ? __pfx_vfs_read+0x10/0x10 [ 453.683548][T10480] ? __fget_files+0x3f3/0x470 [ 453.688238][T10480] ? fdget_pos+0x24e/0x320 [ 453.692683][T10480] ksys_read+0x183/0x2b0 [ 453.696954][T10480] ? __pfx_ksys_read+0x10/0x10 [ 453.701759][T10480] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 453.708358][T10480] ? lockdep_hardirqs_on+0x99/0x150 [ 453.713579][T10480] __do_fast_syscall_32+0xb4/0x110 [ 453.718692][T10480] ? exc_page_fault+0x590/0x8c0 [ 453.723554][T10480] do_fast_syscall_32+0x34/0x80 [ 453.728416][T10480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.734754][T10480] RIP: 0023:0xf7f94579 [ 453.738841][T10480] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 453.758451][T10480] RSP: 002b:00000000f56f55a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 453.766893][T10480] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56f5620 [ 453.774947][T10480] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 453.782953][T10480] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 453.790972][T10480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 453.798998][T10480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.806989][T10480] [ 453.903097][ T5289] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 453.918867][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.933308][ T5289] usb 4-1: Product: syz [ 453.941788][ T5289] usb 4-1: Manufacturer: syz [ 453.953729][ T5289] usb 4-1: SerialNumber: syz [ 453.974935][ T5289] r8152-cfgselector 4-1: Unknown version 0x0000 [ 453.991281][ T5289] r8152-cfgselector 4-1: config 0 descriptor?? [ 454.203073][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.350985][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.489589][ T5289] r8152-cfgselector 4-1: USB disconnect, device number 52 [ 455.169215][T10502] FAULT_INJECTION: forcing a failure. [ 455.169215][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.222231][T10502] CPU: 1 UID: 0 PID: 10502 Comm: syz.3.1389 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 455.233070][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 455.243166][T10502] Call Trace: [ 455.246496][T10502] [ 455.249460][T10502] dump_stack_lvl+0x241/0x360 [ 455.254185][T10502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.259419][T10502] ? __pfx__printk+0x10/0x10 [ 455.264080][T10502] ? __pfx_lock_release+0x10/0x10 [ 455.269165][T10502] should_fail_ex+0x3b0/0x4e0 [ 455.273899][T10502] _copy_from_user+0x2f/0xe0 [ 455.278633][T10502] ucma_write+0x17d/0x420 [ 455.283010][T10502] ? end_current_label_crit_section+0x151/0x180 [ 455.289300][T10502] ? __pfx_ucma_write+0x10/0x10 [ 455.294190][T10502] ? bpf_lsm_file_permission+0x9/0x10 [ 455.299605][T10502] ? security_file_permission+0x74/0x280 [ 455.305272][T10502] ? rw_verify_area+0x1c3/0x6f0 [ 455.310150][T10502] vfs_writev+0x5a9/0xba0 [ 455.314514][T10502] ? __pfx_ucma_write+0x10/0x10 [ 455.319384][T10502] ? __pfx_vfs_writev+0x10/0x10 [ 455.324310][T10502] ? fdget_pos+0x19a/0x320 [ 455.328743][T10502] do_writev+0x1b1/0x350 [ 455.333005][T10502] ? __pfx_do_writev+0x10/0x10 [ 455.337786][T10502] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 455.344396][T10502] ? lockdep_hardirqs_on+0x99/0x150 [ 455.349623][T10502] __do_fast_syscall_32+0xb4/0x110 [ 455.354752][T10502] ? exc_page_fault+0x590/0x8c0 [ 455.359630][T10502] do_fast_syscall_32+0x34/0x80 [ 455.364493][T10502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.370834][T10502] RIP: 0023:0xf7f12579 [ 455.374908][T10502] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 455.394525][T10502] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 455.402963][T10502] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 455.410967][T10502] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.418959][T10502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.426939][T10502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.434920][T10502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.442913][T10502] [ 455.531476][ T937] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 455.671757][ T937] usb 5-1: device descriptor read/64, error -71 [ 455.847672][T10511] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 455.875240][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1393'. [ 455.902134][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1393'. [ 456.110799][ T937] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 456.125100][T10514] netlink: 'syz.2.1392': attribute type 10 has an invalid length. [ 456.266030][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.274712][T10514] team0: Port device bond0 added [ 456.370762][ T937] usb 5-1: device descriptor read/64, error -71 [ 456.511745][ T937] usb usb5-port1: attempt power cycle [ 456.573664][T10505] [U]  [ 456.800757][ T5279] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 456.951248][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 456.958105][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.969552][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.010987][ T937] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 457.022994][T10522] FAULT_INJECTION: forcing a failure. [ 457.022994][T10522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.037505][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.052525][ T937] usb 5-1: device descriptor read/8, error -71 [ 457.093435][ T5279] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.120985][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.148009][ T5279] usb 1-1: config 0 descriptor?? [ 457.162351][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.1.1396 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 457.173158][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.183232][T10522] Call Trace: [ 457.188410][T10522] [ 457.191468][T10522] dump_stack_lvl+0x241/0x360 [ 457.196255][T10522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.201462][T10522] ? __pfx__printk+0x10/0x10 [ 457.206069][T10522] ? snprintf+0xda/0x120 [ 457.210325][T10522] should_fail_ex+0x3b0/0x4e0 [ 457.215114][T10522] _copy_to_user+0x2f/0xb0 [ 457.219542][T10522] simple_read_from_buffer+0xca/0x150 [ 457.224926][T10522] proc_fail_nth_read+0x1e9/0x250 [ 457.229980][T10522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.235591][T10522] ? rw_verify_area+0x55e/0x6f0 [ 457.240464][T10522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.246046][T10522] vfs_read+0x201/0xbc0 [ 457.250259][T10522] ? __pfx_lock_release+0x10/0x10 [ 457.255311][T10522] ? __pfx_vfs_read+0x10/0x10 [ 457.260002][T10522] ? __fget_files+0x3f3/0x470 [ 457.264693][T10522] ? fdget_pos+0x24e/0x320 [ 457.269119][T10522] ksys_read+0x183/0x2b0 [ 457.273363][T10522] ? __pfx_ksys_read+0x10/0x10 [ 457.278131][T10522] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 457.284734][T10522] ? lockdep_hardirqs_on+0x99/0x150 [ 457.289948][T10522] __do_fast_syscall_32+0xb4/0x110 [ 457.295114][T10522] ? exc_page_fault+0x590/0x8c0 [ 457.300069][T10522] do_fast_syscall_32+0x34/0x80 [ 457.304929][T10522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.311273][T10522] RIP: 0023:0xf7fc4579 [ 457.315343][T10522] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 457.334965][T10522] RSP: 002b:00000000f57255a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 457.343385][T10522] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5725620 [ 457.351367][T10522] RDX: 000000000000000f RSI: 00000000f744bff4 RDI: 0000000000000000 [ 457.359344][T10522] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 457.367315][T10522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.375288][T10522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.383274][T10522] [ 457.521159][ T937] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 457.551707][ T937] usb 5-1: device descriptor read/8, error -71 [ 457.661202][ T937] usb usb5-port1: unable to enumerate USB device [ 457.675355][ T5279] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 457.694225][ T5279] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 457.710747][ T5279] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 457.721428][ T5279] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 457.749255][ T5279] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 457.780718][ T5279] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 457.800842][ T5279] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 457.821627][ T5279] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 457.851615][ T5279] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 457.895606][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 457.916503][ T5279] microsoft 0003:045E:07DA.0008: no inputs found [ 457.976463][ T5279] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 458.039302][ T5279] usb 1-1: USB disconnect, device number 60 [ 458.312513][T10531] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1400'. [ 458.363519][T10531] caif0: entered allmulticast mode [ 458.400253][T10531] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1400'. [ 458.466339][T10531] gretap0: entered promiscuous mode [ 458.562103][T10536] FAULT_INJECTION: forcing a failure. [ 458.562103][T10536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.608502][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.4.1402 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 458.619434][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 458.629533][T10536] Call Trace: [ 458.632853][T10536] [ 458.635823][T10536] dump_stack_lvl+0x241/0x360 [ 458.640558][T10536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.645820][T10536] ? __pfx__printk+0x10/0x10 [ 458.650469][T10536] ? snprintf+0xda/0x120 [ 458.654756][T10536] should_fail_ex+0x3b0/0x4e0 [ 458.659488][T10536] _copy_to_user+0x2f/0xb0 [ 458.663954][T10536] simple_read_from_buffer+0xca/0x150 [ 458.669401][T10536] proc_fail_nth_read+0x1e9/0x250 [ 458.674482][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.680086][T10536] ? rw_verify_area+0x55e/0x6f0 [ 458.684992][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.690594][T10536] vfs_read+0x201/0xbc0 [ 458.694803][T10536] ? __pfx_lock_release+0x10/0x10 [ 458.699879][T10536] ? __pfx_vfs_read+0x10/0x10 [ 458.704608][T10536] ? __fget_files+0x3f3/0x470 [ 458.709334][T10536] ? fdget_pos+0x24e/0x320 [ 458.713790][T10536] ksys_read+0x183/0x2b0 [ 458.718066][T10536] ? __pfx_ksys_read+0x10/0x10 [ 458.722864][T10536] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 458.729498][T10536] ? lockdep_hardirqs_on+0x99/0x150 [ 458.734763][T10536] __do_fast_syscall_32+0xb4/0x110 [ 458.739929][T10536] ? exc_page_fault+0x590/0x8c0 [ 458.744832][T10536] do_fast_syscall_32+0x34/0x80 [ 458.749724][T10536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.756097][T10536] RIP: 0023:0xf7f94579 [ 458.760202][T10536] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 458.779860][T10536] RSP: 002b:00000000f57165a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 458.788333][T10536] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5716620 [ 458.796351][T10536] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 458.803204][ T940] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 458.804337][T10536] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 458.819907][T10536] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 458.827943][T10536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.835978][T10536] [ 458.991201][ T940] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 459.010765][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.018827][ T940] usb 4-1: Product: syz [ 459.070799][ T940] usb 4-1: Manufacturer: syz [ 459.075476][ T940] usb 4-1: SerialNumber: syz [ 459.128307][ T940] r8152-cfgselector 4-1: Unknown version 0x0000 [ 459.134704][ T940] r8152-cfgselector 4-1: config 0 descriptor?? [ 459.421761][T10549] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 459.475237][T10553] netlink: 'syz.2.1403': attribute type 10 has an invalid length. [ 459.606228][ T937] r8152-cfgselector 4-1: USB disconnect, device number 53 [ 459.886981][T10561] netlink: 'syz.4.1408': attribute type 10 has an invalid length. [ 460.089746][T10561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.104235][T10561] team0: Port device bond0 added [ 461.311438][T10570] netlink: 'syz.0.1409': attribute type 10 has an invalid length. [ 461.406645][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 462.462851][T10587] netlink: 'syz.3.1414': attribute type 10 has an invalid length. [ 462.984412][T10598] FAULT_INJECTION: forcing a failure. [ 462.984412][T10598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.070906][T10598] CPU: 1 UID: 0 PID: 10598 Comm: syz.0.1420 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 463.081747][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.091834][T10598] Call Trace: [ 463.095128][T10598] [ 463.098091][T10598] dump_stack_lvl+0x241/0x360 [ 463.102905][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.108571][T10598] ? __pfx__printk+0x10/0x10 [ 463.113199][T10598] ? snprintf+0xda/0x120 [ 463.117490][T10598] should_fail_ex+0x3b0/0x4e0 [ 463.122196][T10598] _copy_to_user+0x2f/0xb0 [ 463.126650][T10598] simple_read_from_buffer+0xca/0x150 [ 463.132048][T10598] proc_fail_nth_read+0x1e9/0x250 [ 463.137095][T10598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.142667][T10598] ? rw_verify_area+0x55e/0x6f0 [ 463.147565][T10598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.153398][T10598] vfs_read+0x201/0xbc0 [ 463.157587][T10598] ? __pfx_lock_release+0x10/0x10 [ 463.162650][T10598] ? __pfx_vfs_read+0x10/0x10 [ 463.167351][T10598] ? __fget_files+0x3f3/0x470 [ 463.172059][T10598] ? fdget_pos+0x24e/0x320 [ 463.176494][T10598] ksys_read+0x183/0x2b0 [ 463.180772][T10598] ? __pfx_ksys_read+0x10/0x10 [ 463.185655][T10598] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 463.192301][T10598] ? lockdep_hardirqs_on+0x99/0x150 [ 463.197534][T10598] __do_fast_syscall_32+0xb4/0x110 [ 463.202663][T10598] ? exc_page_fault+0x590/0x8c0 [ 463.207544][T10598] do_fast_syscall_32+0x34/0x80 [ 463.212406][T10598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.218746][T10598] RIP: 0023:0xf73dd579 [ 463.222827][T10598] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 463.242448][T10598] RSP: 002b:00000000f56a55a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 463.250899][T10598] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56a5620 [ 463.258906][T10598] RDX: 000000000000000f RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 463.266896][T10598] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 463.274887][T10598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 463.282874][T10598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.290974][T10598] [ 463.460957][ T58] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 464.181441][T10610] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 464.190685][ T58] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 464.210939][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.219081][ T58] usb 2-1: Product: syz [ 464.223553][ T58] usb 2-1: Manufacturer: syz [ 464.230963][ T58] usb 2-1: SerialNumber: syz [ 464.303147][T10612] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 464.322033][ T58] r8152-cfgselector 2-1: Unknown version 0x0000 [ 464.331163][ T58] r8152-cfgselector 2-1: config 0 descriptor?? [ 464.781470][T10595] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 464.864531][ T5279] r8152-cfgselector 2-1: USB disconnect, device number 39 [ 465.799191][T10621] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 466.476792][T10627] netlink: 'syz.0.1428': attribute type 10 has an invalid length. [ 466.713854][T10631] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 467.725716][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 467.725732][ T29] audit: type=1326 audit(1728825138.715:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 467.850862][ T29] audit: type=1326 audit(1728825138.715:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 467.991124][ T29] audit: type=1326 audit(1728825138.745:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 468.291748][ T29] audit: type=1326 audit(1728825138.745:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 468.355077][ T29] audit: type=1326 audit(1728825138.745:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.1.1433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 468.581058][T10660] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 468.624780][T10661] netlink: 'syz.3.1439': attribute type 10 has an invalid length. [ 468.662685][T10663] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 468.740779][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 468.906321][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 468.932096][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.957830][ T25] usb 2-1: Product: syz [ 468.991956][ T25] usb 2-1: Manufacturer: syz [ 469.018725][ T25] usb 2-1: SerialNumber: syz [ 469.077613][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 469.102341][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 469.680051][ T5279] r8152-cfgselector 2-1: USB disconnect, device number 40 [ 471.180856][T10676] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 471.597942][T10680] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 471.808678][ T29] audit: type=1326 audit(1728825142.775:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 471.906493][ T29] audit: type=1326 audit(1728825142.775:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 472.014745][ T29] audit: type=1326 audit(1728825142.775:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 472.090148][ T29] audit: type=1326 audit(1728825142.775:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 472.301872][T10688] netlink: 'syz.4.1447': attribute type 10 has an invalid length. [ 473.582770][T10692] FAULT_INJECTION: forcing a failure. [ 473.582770][T10692] name failslab, interval 1, probability 0, space 0, times 0 [ 473.631639][T10692] CPU: 1 UID: 0 PID: 10692 Comm: syz.1.1448 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 473.642465][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 473.652543][T10692] Call Trace: [ 473.655831][T10692] [ 473.658762][T10692] dump_stack_lvl+0x241/0x360 [ 473.663451][T10692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.668654][T10692] ? __pfx__printk+0x10/0x10 [ 473.673265][T10692] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 473.678830][T10692] ? __pfx___might_resched+0x10/0x10 [ 473.684128][T10692] should_fail_ex+0x3b0/0x4e0 [ 473.688833][T10692] ? audit_log_start+0x15e/0xa30 [ 473.693775][T10692] should_failslab+0xac/0x100 [ 473.698458][T10692] ? audit_log_start+0x15e/0xa30 [ 473.703399][T10692] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 473.708787][T10692] audit_log_start+0x15e/0xa30 [ 473.713560][T10692] ? __pfx_audit_log_start+0x10/0x10 [ 473.718852][T10692] ? migrate_enable+0x395/0x510 [ 473.723725][T10692] ? __pfx_migrate_enable+0x10/0x10 [ 473.728932][T10692] ? __pfx___cant_migrate+0x10/0x10 [ 473.734152][T10692] audit_seccomp+0x63/0x1f0 [ 473.738667][T10692] __seccomp_filter+0xb38/0x1fe0 [ 473.743610][T10692] ? ksys_write+0x229/0x2b0 [ 473.748120][T10692] ? vfs_write+0x7bf/0xc90 [ 473.752540][T10692] ? __pfx___seccomp_filter+0x10/0x10 [ 473.757913][T10692] ? __mutex_unlock_slowpath+0x21d/0x750 [ 473.763564][T10692] ? __pfx_vfs_write+0x10/0x10 [ 473.768346][T10692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 473.774345][T10692] ? __fget_files+0x3f3/0x470 [ 473.779048][T10692] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 473.785417][T10692] ? __secure_computing+0x125/0x370 [ 473.790657][T10692] syscall_trace_enter+0xa8/0x150 [ 473.795720][T10692] __do_fast_syscall_32+0x9b/0x110 [ 473.800840][T10692] ? exc_page_fault+0x590/0x8c0 [ 473.805704][T10692] do_fast_syscall_32+0x34/0x80 [ 473.810559][T10692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.816892][T10692] RIP: 0023:0xf7fc4579 [ 473.820963][T10692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 473.840590][T10692] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000158 [ 473.849037][T10692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 473.857037][T10692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.865111][T10692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.873089][T10692] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 473.881502][T10692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.889488][T10692] [ 473.915547][ T29] audit: type=1326 audit(1728825144.575:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 473.988079][ T29] audit: type=1326 audit(1728825144.575:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 474.070732][ T29] audit: type=1326 audit(1728825144.575:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 474.122556][T10692] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 474.133875][T10692] audit: out of memory in audit_log_start [ 474.194444][ T29] audit: type=1326 audit(1728825145.125:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 474.230951][T10696] capability: warning: `syz.0.1450' uses deprecated v2 capabilities in a way that may be insecure [ 474.255394][ T29] audit: type=1326 audit(1728825145.125:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 474.324065][ T29] audit: type=1326 audit(1728825145.125:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 474.382759][ T29] audit: type=1326 audit(1728825145.125:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 474.464354][ T29] audit: type=1326 audit(1728825145.125:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.1.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 474.809295][T10707] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 475.094793][T10696] syz.0.1450 (10696): drop_caches: 2 [ 475.103825][T10712] netlink: 'syz.4.1453': attribute type 10 has an invalid length. [ 475.251321][ T25] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 475.548995][ T25] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 475.579197][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.613823][ T25] usb 4-1: Product: syz [ 475.636723][ T25] usb 4-1: Manufacturer: syz [ 475.670139][ T25] usb 4-1: SerialNumber: syz [ 475.698479][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 475.707696][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 476.351711][ T5282] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 477.608136][T10730] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 478.432816][T10732] FAULT_INJECTION: forcing a failure. [ 478.432816][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 478.450825][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.0.1459 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 478.461652][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 478.471833][T10732] Call Trace: [ 478.475149][T10732] [ 478.478094][T10732] dump_stack_lvl+0x241/0x360 [ 478.482835][T10732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.488048][T10732] ? __pfx__printk+0x10/0x10 [ 478.492656][T10732] ? __kmalloc_noprof+0xb0/0x400 [ 478.497607][T10732] ? __pfx___might_resched+0x10/0x10 [ 478.502909][T10732] should_fail_ex+0x3b0/0x4e0 [ 478.507604][T10732] ? aa_getprocattr+0xa07/0x10a0 [ 478.512553][T10732] should_failslab+0xac/0x100 [ 478.517239][T10732] ? aa_getprocattr+0xa07/0x10a0 [ 478.522184][T10732] __kmalloc_noprof+0xd8/0x400 [ 478.526960][T10732] aa_getprocattr+0xa07/0x10a0 [ 478.531758][T10732] ? __pfx_aa_getprocattr+0x10/0x10 [ 478.537102][T10732] ? get_task_cred+0x26/0x330 [ 478.541878][T10732] ? get_task_cred+0x312/0x330 [ 478.546753][T10732] ? get_task_cred+0x26/0x330 [ 478.551467][T10732] apparmor_getprocattr+0x1fc/0x2e0 [ 478.556702][T10732] proc_pid_attr_read+0x169/0x320 [ 478.561749][T10732] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 478.567327][T10732] ? rw_verify_area+0x55e/0x6f0 [ 478.572194][T10732] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 478.577773][T10732] vfs_read+0x201/0xbc0 [ 478.581954][T10732] ? __pfx_lock_release+0x10/0x10 [ 478.587121][T10732] ? __pfx_vfs_read+0x10/0x10 [ 478.591822][T10732] ? __fget_files+0x3f3/0x470 [ 478.596511][T10732] ? fdget_pos+0x24e/0x320 [ 478.601019][T10732] ksys_read+0x183/0x2b0 [ 478.605268][T10732] ? __pfx_ksys_read+0x10/0x10 [ 478.610049][T10732] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 478.616654][T10732] ? lockdep_hardirqs_on+0x99/0x150 [ 478.621870][T10732] __do_fast_syscall_32+0xb4/0x110 [ 478.626986][T10732] ? exc_page_fault+0x590/0x8c0 [ 478.631852][T10732] do_fast_syscall_32+0x34/0x80 [ 478.636706][T10732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.643037][T10732] RIP: 0023:0xf73dd579 [ 478.647116][T10732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 478.666749][T10732] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 478.675175][T10732] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 478.683179][T10732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.691163][T10732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.699142][T10732] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 478.707124][T10732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.715116][T10732] [ 479.594856][T10749] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 479.610857][ T937] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 479.767908][T10751] FAULT_INJECTION: forcing a failure. [ 479.767908][T10751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.770782][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 479.821467][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz.1.1466 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 479.832312][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 479.842382][T10751] Call Trace: [ 479.845677][T10751] [ 479.848632][T10751] dump_stack_lvl+0x241/0x360 [ 479.853356][T10751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.856654][ T937] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 479.858578][T10751] ? __pfx__printk+0x10/0x10 [ 479.858623][T10751] ? __pfx_lock_release+0x10/0x10 [ 479.873287][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 479.874700][T10751] should_fail_ex+0x3b0/0x4e0 [ 479.874747][T10751] _copy_from_user+0x2f/0xe0 [ 479.900063][T10751] get_compat_msghdr+0xae/0x730 [ 479.904381][ T937] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 479.904942][T10751] ? __fget_files+0x29/0x470 [ 479.918589][T10751] ? __pfx_get_compat_msghdr+0x10/0x10 [ 479.924093][T10751] ? __fget_files+0x3f3/0x470 [ 479.924535][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.928802][T10751] __sys_sendmsg+0x25d/0x380 [ 479.928839][T10751] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.928878][T10751] ? __pfx_vfs_write+0x10/0x10 [ 479.951480][T10751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 479.958136][T10751] ? lockdep_hardirqs_on+0x99/0x150 [ 479.960728][ T937] usb 4-1: Product: syz [ 479.963390][T10751] __do_fast_syscall_32+0xb4/0x110 [ 479.963423][T10751] ? exc_page_fault+0x590/0x8c0 [ 479.972864][ T937] usb 4-1: Manufacturer: syz [ 479.977656][T10751] do_fast_syscall_32+0x34/0x80 [ 479.977689][T10751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.994121][T10751] RIP: 0023:0xf7fc4579 [ 479.998228][T10751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 480.010796][ T937] usb 4-1: SerialNumber: syz [ 480.017869][T10751] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 480.017918][T10751] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000200 [ 480.017936][T10751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.017952][T10751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.017967][T10751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 480.051935][ T937] usb 4-1: config 0 descriptor?? [ 480.054890][T10751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.054929][T10751] [ 480.221201][ T937] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 480.250807][ T937] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 481.444316][ T937] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 481.469870][ T937] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 481.490791][ T937] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 481.497865][ T937] em28xx 4-1:0.0: No AC97 audio processor [ 481.550831][ T937] usb 4-1: USB disconnect, device number 55 [ 481.571007][ T937] em28xx 4-1:0.0: Disconnecting em28xx [ 481.581062][ T937] em28xx 4-1:0.0: Freeing device [ 482.552225][ T5289] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 482.725628][ T5289] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 482.735519][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.788795][ T5289] usb 4-1: Product: syz [ 482.800713][ T5289] usb 4-1: Manufacturer: syz [ 482.807938][ T5289] usb 4-1: SerialNumber: syz [ 482.822940][ T5289] r8152-cfgselector 4-1: Unknown version 0x0000 [ 482.864486][ T5289] r8152-cfgselector 4-1: config 0 descriptor?? [ 482.972578][T10775] netlink: 'syz.4.1473': attribute type 10 has an invalid length. [ 483.198123][T10781] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 483.372470][ T25] r8152-cfgselector 4-1: USB disconnect, device number 56 [ 483.470439][T10784] netlink: 'syz.0.1474': attribute type 10 has an invalid length. [ 484.017471][T10788] netlink: 'syz.1.1475': attribute type 10 has an invalid length. [ 484.375558][T10794] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1477'. [ 485.166604][T10799] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1479'. [ 485.711036][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 485.911298][ T25] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 485.930721][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.960459][ T25] usb 5-1: config 0 has no interface number 0 [ 485.980404][ T25] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 486.028953][ T25] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.068140][ T25] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 486.078126][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.096891][ T25] usb 5-1: Product: syz [ 486.112659][ T25] usb 5-1: Manufacturer: syz [ 486.117457][ T25] usb 5-1: SerialNumber: syz [ 486.139631][ T25] usb 5-1: config 0 descriptor?? [ 486.634221][ T25] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 486.654122][ T25] usb 5-1: USB disconnect, device number 48 [ 486.708401][T10815] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 488.555298][T10832] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 488.631193][ T937] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 488.817708][ T937] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 488.855647][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.891014][ T937] usb 4-1: Product: syz [ 488.902643][ T937] usb 4-1: Manufacturer: syz [ 488.907298][ T937] usb 4-1: SerialNumber: syz [ 488.959910][ T937] r8152-cfgselector 4-1: Unknown version 0x0000 [ 488.982138][ T937] r8152-cfgselector 4-1: config 0 descriptor?? [ 489.475528][ T937] r8152-cfgselector 4-1: USB disconnect, device number 57 [ 490.209195][T10842] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 490.224293][T10844] FAULT_INJECTION: forcing a failure. [ 490.224293][T10844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.272473][T10844] CPU: 0 UID: 0 PID: 10844 Comm: syz.3.1492 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 490.283305][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 490.293377][T10844] Call Trace: [ 490.296663][T10844] [ 490.299594][T10844] dump_stack_lvl+0x241/0x360 [ 490.304284][T10844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.309510][T10844] ? __pfx__printk+0x10/0x10 [ 490.314118][T10844] ? __pfx_lock_release+0x10/0x10 [ 490.319175][T10844] ? validate_chain+0x11e/0x5920 [ 490.324568][T10844] should_fail_ex+0x3b0/0x4e0 [ 490.329269][T10844] _copy_from_iter+0x1ed/0x1d60 [ 490.334221][T10844] ? __pfx_validate_chain+0x10/0x10 [ 490.339433][T10844] ? __pfx__copy_from_iter+0x10/0x10 [ 490.344769][T10844] tun_get_user+0x25f/0x47e0 [ 490.349393][T10844] ? __pfx_lock_release+0x10/0x10 [ 490.354453][T10844] ? __lock_acquire+0x1384/0x2050 [ 490.359602][T10844] ? __pfx_tun_get_user+0x10/0x10 [ 490.364675][T10844] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 490.370143][T10844] ? tun_get+0x1e/0x2f0 [ 490.374308][T10844] ? __pfx_lock_release+0x10/0x10 [ 490.379366][T10844] ? tun_get+0x1e/0x2f0 [ 490.383531][T10844] ? tun_get+0x27d/0x2f0 [ 490.387778][T10844] tun_chr_write_iter+0x10d/0x1f0 [ 490.392812][T10844] vfs_write+0xa6d/0xc90 [ 490.397061][T10844] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 490.402614][T10844] ? __pfx_vfs_write+0x10/0x10 [ 490.407405][T10844] ? fdget_pos+0x19a/0x320 [ 490.411847][T10844] ksys_write+0x183/0x2b0 [ 490.416293][T10844] ? __pfx_ksys_write+0x10/0x10 [ 490.421149][T10844] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 490.427757][T10844] ? lockdep_hardirqs_on+0x99/0x150 [ 490.432969][T10844] __do_fast_syscall_32+0xb4/0x110 [ 490.438254][T10844] ? exc_page_fault+0x590/0x8c0 [ 490.443130][T10844] do_fast_syscall_32+0x34/0x80 [ 490.448069][T10844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.454403][T10844] RIP: 0023:0xf7f12579 [ 490.458470][T10844] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 490.478082][T10844] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 490.486521][T10844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 490.494512][T10844] RDX: 000000000000ffdd RSI: 0000000000000000 RDI: 0000000000000000 [ 490.502482][T10844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.510454][T10844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 490.518424][T10844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.526424][T10844] [ 490.529508][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.170197][T10849] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 491.391066][T10856] netlink: 'syz.4.1494': attribute type 10 has an invalid length. [ 491.569249][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'. [ 491.963414][T10865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1499'. [ 492.031546][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 492.210810][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 492.241042][ T8] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 492.261024][ T937] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 492.276744][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.301065][ T8] usb 4-1: Product: syz [ 492.311261][ T8] usb 4-1: Manufacturer: syz [ 492.323872][ T8] usb 4-1: SerialNumber: syz [ 492.343527][ T8] usb 4-1: config 0 descriptor?? [ 492.383673][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.446508][ T937] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 492.461316][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.479313][ T937] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 492.530130][ T937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.560539][ T937] usb 2-1: config 0 has no interface number 0 [ 492.579025][T10863] FAULT_INJECTION: forcing a failure. [ 492.579025][T10863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.599920][ T937] usb 2-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.630422][T10863] CPU: 0 UID: 0 PID: 10863 Comm: syz.3.1498 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 492.641246][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 492.651681][T10863] Call Trace: [ 492.654993][T10863] [ 492.657960][T10863] dump_stack_lvl+0x241/0x360 [ 492.662680][T10863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.667910][T10863] ? __pfx__printk+0x10/0x10 [ 492.672549][T10863] ? __pfx_lock_release+0x10/0x10 [ 492.677612][T10863] ? validate_chain+0x11e/0x5920 [ 492.682576][T10863] ? validate_chain+0x11e/0x5920 [ 492.687534][T10863] should_fail_ex+0x3b0/0x4e0 [ 492.692254][T10863] _copy_from_user+0x2f/0xe0 [ 492.696859][T10863] do_tcp_getsockopt+0x20f/0x3570 [ 492.701924][T10863] ? mark_lock+0x9a/0x360 [ 492.706269][T10863] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 492.711745][T10863] ? _parse_integer_limit+0x1b5/0x200 [ 492.717127][T10863] ? __pfx_validate_chain+0x10/0x10 [ 492.722336][T10863] ? mark_lock+0x9a/0x360 [ 492.726675][T10863] ? __lock_acquire+0x1384/0x2050 [ 492.731722][T10863] ? aa_label_sk_perm+0x4f3/0x6c0 [ 492.736775][T10863] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 492.742169][T10863] ? get_pid_task+0x23/0x1f0 [ 492.746809][T10863] ? __pfx___might_resched+0x10/0x10 [ 492.752126][T10863] ? __lock_acquire+0x1384/0x2050 [ 492.757180][T10863] ? aa_sk_perm+0x96d/0xab0 [ 492.761700][T10863] tcp_getsockopt+0xfb/0x1c0 [ 492.766310][T10863] ? __pfx_tcp_getsockopt+0x10/0x10 [ 492.771523][T10863] ? __fget_files+0x29/0x470 [ 492.776126][T10863] ? aa_sock_opt_perm+0x79/0x120 [ 492.781101][T10863] ? sock_common_getsockopt+0x2e/0xb0 [ 492.786507][T10863] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 492.792419][T10863] do_sock_getsockopt+0x3c4/0x7e0 [ 492.797479][T10863] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 492.803038][T10863] ? __fget_files+0x3f3/0x470 [ 492.807738][T10863] ? __fget_files+0x29/0x470 [ 492.812345][T10863] __sys_getsockopt+0x267/0x330 [ 492.817211][T10863] ? __pfx___sys_getsockopt+0x10/0x10 [ 492.822592][T10863] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 492.828943][T10863] __ia32_sys_getsockopt+0xb5/0xd0 [ 492.834071][T10863] __do_fast_syscall_32+0xb4/0x110 [ 492.839201][T10863] ? exc_page_fault+0x590/0x8c0 [ 492.844075][T10863] do_fast_syscall_32+0x34/0x80 [ 492.848961][T10863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.855302][T10863] RIP: 0023:0xf7f12579 [ 492.859406][T10863] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 492.879028][T10863] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 492.887461][T10863] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 492.895538][T10863] RDX: 0000000000000023 RSI: 0000000020000040 RDI: 0000000020000080 [ 492.903543][T10863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.911634][T10863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 492.919621][T10863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.927618][T10863] [ 493.052057][ T937] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 493.092730][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.119232][ T8] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 493.127264][ T937] usb 2-1: Product: syz [ 493.140912][ T937] usb 2-1: Manufacturer: syz [ 493.147120][ T8] usb 4-1: USB disconnect, device number 58 [ 493.160846][ T937] usb 2-1: SerialNumber: syz [ 493.180843][ T937] usb 2-1: config 0 descriptor?? [ 493.199481][ T937] usb-storage 2-1:0.2: USB Mass Storage device detected [ 493.212913][ T937] usb-storage 2-1:0.2: Quirks match for vid 1908 pid 1315: 20000 [ 493.413610][ T937] usb 2-1: USB disconnect, device number 41 [ 493.741236][T10880] netlink: 'syz.2.1501': attribute type 10 has an invalid length. [ 494.161098][ T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 494.211668][T10891] netlink: 'syz.0.1506': attribute type 10 has an invalid length. [ 494.355557][ T25] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 494.368378][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.391375][T10893] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 494.400806][ T25] usb 5-1: Product: syz [ 494.415720][ T25] usb 5-1: Manufacturer: syz [ 494.433000][ T25] usb 5-1: SerialNumber: syz [ 494.452760][ T25] r8152-cfgselector 5-1: Unknown version 0x0000 [ 494.471673][ T25] r8152-cfgselector 5-1: config 0 descriptor?? [ 494.945901][T10883] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 494.983951][ T25] r8152-cfgselector 5-1: USB disconnect, device number 49 [ 496.060982][ T937] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 496.779964][T10908] netlink: 'syz.0.1511': attribute type 10 has an invalid length. [ 496.803801][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 496.845152][ T937] usb 5-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 496.854579][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.877104][ T937] usb 5-1: Product: syz [ 496.881670][ T937] usb 5-1: Manufacturer: syz [ 496.886551][ T937] usb 5-1: SerialNumber: syz [ 497.194512][ T937] usb 5-1: config 0 descriptor?? [ 497.448267][ T937] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 497.490566][ T937] usb 5-1: USB disconnect, device number 50 [ 497.648774][T10920] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 499.231179][ T5282] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 499.279004][T10933] FAULT_INJECTION: forcing a failure. [ 499.279004][T10933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.341909][T10933] CPU: 0 UID: 0 PID: 10933 Comm: syz.4.1518 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 499.352751][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 499.362862][T10933] Call Trace: [ 499.366189][T10933] [ 499.369158][T10933] dump_stack_lvl+0x241/0x360 [ 499.373882][T10933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.379128][T10933] ? __pfx__printk+0x10/0x10 [ 499.383783][T10933] ? snprintf+0xda/0x120 [ 499.388070][T10933] should_fail_ex+0x3b0/0x4e0 [ 499.392779][T10933] _copy_to_user+0x2f/0xb0 [ 499.397216][T10933] simple_read_from_buffer+0xca/0x150 [ 499.402612][T10933] proc_fail_nth_read+0x1e9/0x250 [ 499.407682][T10933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.413359][T10933] ? rw_verify_area+0x55e/0x6f0 [ 499.418251][T10933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.423943][T10933] vfs_read+0x201/0xbc0 [ 499.428136][T10933] ? __pfx_lock_release+0x10/0x10 [ 499.433194][T10933] ? __pfx_vfs_read+0x10/0x10 [ 499.437906][T10933] ? __fget_files+0x3f3/0x470 [ 499.442617][T10933] ? fdget_pos+0x24e/0x320 [ 499.447081][T10933] ksys_read+0x183/0x2b0 [ 499.451477][T10933] ? __pfx_ksys_read+0x10/0x10 [ 499.456279][T10933] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 499.462897][T10933] ? lockdep_hardirqs_on+0x99/0x150 [ 499.468125][T10933] __do_fast_syscall_32+0xb4/0x110 [ 499.473250][T10933] ? exc_page_fault+0x590/0x8c0 [ 499.478128][T10933] do_fast_syscall_32+0x34/0x80 [ 499.482989][T10933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.489346][T10933] RIP: 0023:0xf7f94579 [ 499.493433][T10933] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 499.513047][T10933] RSP: 002b:00000000f56f55a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 499.521480][T10933] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f5620 [ 499.529460][T10933] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 499.537455][T10933] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 499.545457][T10933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 499.553443][T10933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.561450][T10933] [ 499.573614][T10938] netlink: 'syz.0.1520': attribute type 10 has an invalid length. [ 500.135851][T10942] netlink: 'syz.1.1522': attribute type 10 has an invalid length. [ 500.208510][ T5282] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 500.217815][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.234779][ T5282] usb 4-1: Product: syz [ 500.250034][ T5282] usb 4-1: Manufacturer: syz [ 500.280732][ T5282] usb 4-1: SerialNumber: syz [ 500.388127][ T5282] r8152-cfgselector 4-1: Unknown version 0x0000 [ 500.394805][ T5282] r8152-cfgselector 4-1: config 0 descriptor?? [ 500.761147][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 500.802093][T10953] netlink: 'syz.4.1524': attribute type 10 has an invalid length. [ 500.864084][ T5282] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 501.554156][T10959] netlink: 'syz.2.1525': attribute type 10 has an invalid length. [ 501.851180][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.857647][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.055726][T10964] netlink: 'syz.3.1527': attribute type 34 has an invalid length. [ 503.230072][T10979] netlink: 'syz.3.1531': attribute type 10 has an invalid length. [ 504.353556][T10991] FAULT_INJECTION: forcing a failure. [ 504.353556][T10991] name failslab, interval 1, probability 0, space 0, times 0 [ 504.410838][T10991] CPU: 0 UID: 0 PID: 10991 Comm: syz.2.1536 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 504.421685][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 504.431807][T10991] Call Trace: [ 504.435118][T10991] [ 504.438083][T10991] dump_stack_lvl+0x241/0x360 [ 504.442807][T10991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.448052][T10991] ? __pfx__printk+0x10/0x10 [ 504.452703][T10991] ? fs_reclaim_acquire+0x93/0x130 [ 504.457862][T10991] ? __pfx___might_resched+0x10/0x10 [ 504.463203][T10991] should_fail_ex+0x3b0/0x4e0 [ 504.467913][T10991] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 504.473649][T10991] should_failslab+0xac/0x100 [ 504.478344][T10991] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 504.484078][T10991] __kmalloc_noprof+0xd8/0x400 [ 504.488862][T10991] tomoyo_realpath_from_path+0xcf/0x5e0 [ 504.494432][T10991] tomoyo_path_number_perm+0x23a/0x880 [ 504.499914][T10991] ? tomoyo_path_number_perm+0x208/0x880 [ 504.505564][T10991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 504.511577][T10991] ? __pfx_lock_acquire+0x10/0x10 [ 504.516630][T10991] ? __fget_files+0x29/0x470 [ 504.521241][T10991] ? __fget_files+0x3f3/0x470 [ 504.525938][T10991] security_file_ioctl_compat+0xc6/0x2a0 [ 504.531592][T10991] __se_compat_sys_ioctl+0xd6/0xc90 [ 504.536804][T10991] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 504.542639][T10991] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.548635][T10991] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.555008][T10991] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 504.561645][T10991] ? lockdep_hardirqs_on+0x99/0x150 [ 504.566881][T10991] __do_fast_syscall_32+0xb4/0x110 [ 504.572037][T10991] ? exc_page_fault+0x590/0x8c0 [ 504.576911][T10991] do_fast_syscall_32+0x34/0x80 [ 504.581773][T10991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.588373][T10991] RIP: 0023:0xf7f46579 [ 504.592453][T10991] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 504.612070][T10991] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 504.620515][T10991] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004138ae84 [ 504.628759][T10991] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.636754][T10991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.644737][T10991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 504.652738][T10991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.660826][T10991] [ 505.031563][T10991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.398661][T11001] netlink: 'syz.3.1540': attribute type 10 has an invalid length. [ 505.450780][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 505.618149][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 505.629761][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.674234][ T25] usb 2-1: Product: syz [ 505.692028][ T25] usb 2-1: Manufacturer: syz [ 505.700089][T11003] netlink: 'syz.4.1539': attribute type 10 has an invalid length. [ 505.718809][ T25] usb 2-1: SerialNumber: syz [ 505.732771][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 505.739510][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 506.167308][T11009] FAULT_INJECTION: forcing a failure. [ 506.167308][T11009] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 506.181187][T11009] CPU: 1 UID: 0 PID: 11009 Comm: syz.0.1543 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 506.192001][T11009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 506.202122][T11009] Call Trace: [ 506.205406][T11009] [ 506.208346][T11009] dump_stack_lvl+0x241/0x360 [ 506.213059][T11009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.218295][T11009] ? __pfx__printk+0x10/0x10 [ 506.222905][T11009] ? validate_chain+0x11e/0x5920 [ 506.227867][T11009] should_fail_ex+0x3b0/0x4e0 [ 506.232580][T11009] prepare_alloc_pages+0x1da/0x5b0 [ 506.237708][T11009] __alloc_pages_noprof+0x16f/0x710 [ 506.242940][T11009] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 506.248678][T11009] ? __pfx_validate_chain+0x10/0x10 [ 506.253887][T11009] alloc_pages_mpol_noprof+0x3e8/0x680 [ 506.259362][T11009] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 506.265353][T11009] ? __pfx_validate_chain+0x10/0x10 [ 506.270559][T11009] ? alloc_pages_noprof+0xef/0x170 [ 506.275687][T11009] pte_alloc_one+0x88/0x5d0 [ 506.280220][T11009] ? __pfx_pte_alloc_one+0x10/0x10 [ 506.285370][T11009] handle_pte_fault+0x2140/0x6800 [ 506.290410][T11009] ? mark_lock+0x9a/0x360 [ 506.294761][T11009] ? __pfx_handle_pte_fault+0x10/0x10 [ 506.300185][T11009] ? __lock_acquire+0x1384/0x2050 [ 506.305295][T11009] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 506.311225][T11009] ? __pfx_lock_release+0x10/0x10 [ 506.316284][T11009] handle_mm_fault+0x1106/0x1bb0 [ 506.321248][T11009] ? mt_find+0x2a9/0x920 [ 506.325518][T11009] ? __pfx_handle_mm_fault+0x10/0x10 [ 506.330919][T11009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 506.337270][T11009] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 506.342590][T11009] exc_page_fault+0x2b9/0x8c0 [ 506.347317][T11009] asm_exc_page_fault+0x26/0x30 [ 506.352199][T11009] RIP: 0010:__get_user_4+0x11/0x20 [ 506.357333][T11009] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 506.376954][T11009] RSP: 0018:ffffc90003eefc78 EFLAGS: 00050202 [ 506.383063][T11009] RAX: 0000000020000080 RBX: 0000000000000084 RCX: ffffc90003eefb03 [ 506.391076][T11009] RDX: 0000000000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c60fb20 [ 506.399063][T11009] RBP: ffff88803aec0940 R08: ffffffff901cf2ef R09: 1ffffffff2039e5d [ 506.407051][T11009] R10: dffffc0000000000 R11: fffffbfff2039e5e R12: 0000000000000003 [ 506.415215][T11009] R13: 0000000020000080 R14: dffffc0000000000 R15: ffff88803aec0940 [ 506.423222][T11009] sctp_getsockopt+0x5d/0xbb0 [ 506.427921][T11009] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 506.434006][T11009] do_sock_getsockopt+0x3c4/0x7e0 [ 506.439070][T11009] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 506.444633][T11009] ? __fget_files+0x3f3/0x470 [ 506.449323][T11009] ? __fget_files+0x29/0x470 [ 506.453943][T11009] __sys_getsockopt+0x267/0x330 [ 506.458806][T11009] ? __pfx___sys_getsockopt+0x10/0x10 [ 506.464188][T11009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 506.470633][T11009] __ia32_sys_getsockopt+0xb5/0xd0 [ 506.475777][T11009] __do_fast_syscall_32+0xb4/0x110 [ 506.480901][T11009] ? exc_page_fault+0x590/0x8c0 [ 506.485772][T11009] do_fast_syscall_32+0x34/0x80 [ 506.490641][T11009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.496992][T11009] RIP: 0023:0xf73dd579 [ 506.501085][T11009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 506.520795][T11009] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 506.529255][T11009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 506.537237][T11009] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000020000080 [ 506.545220][T11009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.553335][T11009] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 506.561316][T11009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.569323][T11009] [ 506.735085][ T25] r8152-cfgselector 2-1: USB disconnect, device number 42 [ 507.558862][T11020] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 507.801139][ T58] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 507.963683][ T58] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 507.973273][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.991508][ T58] usb 5-1: Product: syz [ 508.003988][ T58] usb 5-1: Manufacturer: syz [ 508.009940][ T58] usb 5-1: SerialNumber: syz [ 508.076930][ T58] r8152-cfgselector 5-1: Unknown version 0x0000 [ 508.083544][ T58] r8152-cfgselector 5-1: config 0 descriptor?? [ 508.326699][T11030] netlink: 'syz.2.1557': attribute type 10 has an invalid length. [ 508.484193][T11034] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 508.602718][ T5282] r8152-cfgselector 5-1: USB disconnect, device number 51 [ 509.657415][T11044] netlink: 'syz.4.1548': attribute type 10 has an invalid length. [ 509.950749][ T58] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 510.122655][ T58] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 510.164247][ T58] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 510.202401][ T58] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.250773][ T58] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25090, setting to 1024 [ 510.302695][ T58] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 510.356414][ T58] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 510.398542][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.630129][ T58] ath6kl: Failed to submit usb control message: -71 [ 510.640968][ T58] ath6kl: unable to send the bmi data to the device: -71 [ 510.648024][ T58] ath6kl: Unable to send get target info: -71 [ 510.661457][ T58] ath6kl: Failed to init ath6kl core: -71 [ 510.667875][ T58] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 510.683805][ T58] usb 1-1: USB disconnect, device number 61 [ 511.793033][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.906104][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.841873][ T5282] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 513.015499][ T5282] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 513.045366][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.095782][ T5282] usb 1-1: Product: syz [ 513.100013][ T5282] usb 1-1: Manufacturer: syz [ 513.168432][ T5282] usb 1-1: SerialNumber: syz [ 513.204069][ T5282] r8152-cfgselector 1-1: Unknown version 0x0000 [ 513.285019][ T5282] r8152-cfgselector 1-1: config 0 descriptor?? [ 513.336063][T11083] netlink: 'syz.1.1566': attribute type 10 has an invalid length. [ 513.429344][T11082] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 513.481684][T11088] netlink: 'syz.4.1567': attribute type 10 has an invalid length. [ 513.661347][ T937] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 513.800982][T11069] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 513.831386][ T8] r8152-cfgselector 1-1: USB disconnect, device number 62 [ 513.850783][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 513.865794][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 513.910105][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.936645][ T937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 513.972498][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 514.038389][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 514.091887][ T937] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 514.126795][ T937] usb 4-1: New USB device strings: Mfr=127, Product=236, SerialNumber=38 [ 514.233076][ T937] usb 4-1: Product: syz [ 514.243277][ T937] usb 4-1: Manufacturer: syz [ 514.253371][ T937] usb 4-1: SerialNumber: syz [ 514.264892][ T937] usb 4-1: config 0 descriptor?? [ 514.281084][ T937] redrat3 4-1:0.0: Couldn't find all endpoints [ 515.636591][ T58] usb 4-1: USB disconnect, device number 60 [ 516.285446][T11105] FAULT_INJECTION: forcing a failure. [ 516.285446][T11105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.355440][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.2.1574 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 516.366275][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 516.376372][T11105] Call Trace: [ 516.379685][T11105] [ 516.382644][T11105] dump_stack_lvl+0x241/0x360 [ 516.387360][T11105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.392605][T11105] ? __pfx__printk+0x10/0x10 [ 516.397255][T11105] should_fail_ex+0x3b0/0x4e0 [ 516.401999][T11105] _copy_from_user+0x2f/0xe0 [ 516.406644][T11105] move_addr_to_kernel+0x82/0x150 [ 516.411708][T11105] __sys_bind+0x162/0x2d0 [ 516.416081][T11105] ? __pfx___sys_bind+0x10/0x10 [ 516.420993][T11105] __ia32_sys_bind+0x7a/0x90 [ 516.425800][T11105] __do_fast_syscall_32+0xb4/0x110 [ 516.430945][T11105] ? exc_page_fault+0x590/0x8c0 [ 516.435846][T11105] do_fast_syscall_32+0x34/0x80 [ 516.440741][T11105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 516.447121][T11105] RIP: 0023:0xf7f46579 [ 516.451223][T11105] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 516.470957][T11105] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 516.479438][T11105] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000200001c0 [ 516.487448][T11105] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 516.495455][T11105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.503459][T11105] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 516.511462][T11105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.519479][T11105] [ 516.790997][T11118] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 517.240816][ T5282] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 517.480705][ T5282] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 517.500705][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.539829][ T5282] usb 5-1: Product: syz [ 517.554604][ T5282] usb 5-1: Manufacturer: syz [ 517.573131][ T5282] usb 5-1: SerialNumber: syz [ 517.598453][ T5282] r8152-cfgselector 5-1: Unknown version 0x0000 [ 517.615465][ T5282] r8152-cfgselector 5-1: config 0 descriptor?? [ 517.711162][T11128] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 518.059933][ T5282] r8152-cfgselector 5-1: USB disconnect, device number 52 [ 518.690099][T11139] netlink: 'syz.0.1584': attribute type 10 has an invalid length. [ 519.237134][T11150] netlink: 'syz.4.1587': attribute type 10 has an invalid length. [ 519.283700][ T5235] Bluetooth: hci7: command 0x0406 tx timeout [ 519.317112][T11152] netlink: 'syz.1.1586': attribute type 10 has an invalid length. [ 519.531803][T11154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.601498][T11154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.820765][ T5282] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 519.978167][ T5282] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 519.999903][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.030870][ T5282] usb 4-1: Product: syz [ 520.050483][ T5282] usb 4-1: Manufacturer: syz [ 520.089429][ T5282] usb 4-1: SerialNumber: syz [ 520.115562][ T5282] r8152-cfgselector 4-1: Unknown version 0x0000 [ 520.146082][ T5282] r8152-cfgselector 4-1: config 0 descriptor?? [ 520.652289][ T5282] r8152-cfgselector 4-1: USB disconnect, device number 61 [ 521.467251][T11163] FAULT_INJECTION: forcing a failure. [ 521.467251][T11163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.516619][T11163] CPU: 0 UID: 0 PID: 11163 Comm: syz.3.1592 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 521.527431][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 521.537485][T11163] Call Trace: [ 521.540782][T11163] [ 521.543727][T11163] dump_stack_lvl+0x241/0x360 [ 521.548409][T11163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.553619][T11163] ? __pfx__printk+0x10/0x10 [ 521.558270][T11163] ? vfs_write+0x7bf/0xc90 [ 521.562693][T11163] ? __pfx_lock_release+0x10/0x10 [ 521.567732][T11163] should_fail_ex+0x3b0/0x4e0 [ 521.572421][T11163] _copy_from_user+0x2f/0xe0 [ 521.577019][T11163] __se_compat_sys_socketcall+0x111/0x1430 [ 521.582849][T11163] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 521.589099][T11163] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.595129][T11163] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 521.601731][T11163] ? lockdep_hardirqs_on+0x99/0x150 [ 521.607028][T11163] __do_fast_syscall_32+0xb4/0x110 [ 521.612152][T11163] ? exc_page_fault+0x590/0x8c0 [ 521.617011][T11163] do_fast_syscall_32+0x34/0x80 [ 521.621883][T11163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.628215][T11163] RIP: 0023:0xf7f12579 [ 521.632310][T11163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 521.651915][T11163] RSP: 002b:00000000f5695440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 521.660340][T11163] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5695454 [ 521.668311][T11163] RDX: 0000000000000000 RSI: 00000000f5695570 RDI: 00000000f739bff4 [ 521.676292][T11163] RBP: 00000000f5695570 R08: 0000000000000000 R09: 0000000000000000 [ 521.684277][T11163] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 521.692594][T11163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.700576][T11163] [ 522.192269][T11173] @: renamed from vlan0 (while UP) [ 522.460820][ T25] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 522.585081][T11183] netlink: 'syz.4.1598': attribute type 10 has an invalid length. [ 522.673640][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 522.692018][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 522.709194][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.738024][ T25] usb 4-1: Product: syz [ 522.755141][ T25] usb 4-1: Manufacturer: syz [ 522.772491][ T25] usb 4-1: SerialNumber: syz [ 522.816041][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 522.836922][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 523.363391][T11191] netlink: 'syz.0.1600': attribute type 10 has an invalid length. [ 524.312920][T11198] netlink: 'syz.1.1602': attribute type 10 has an invalid length. [ 524.327490][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.392826][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 524.499069][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.534768][T11199] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 525.172709][ T25] r8152-cfgselector 4-1: USB disconnect, device number 62 [ 525.528247][T11208] @: renamed from vlan0 (while UP) [ 525.597217][T11209] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 525.829132][T11215] netlink: 'syz.0.1608': attribute type 10 has an invalid length. [ 526.680915][ T58] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 526.870924][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 526.907566][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 526.940772][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.976173][ T58] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 527.003286][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 527.030821][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 527.059028][ T58] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 527.087134][ T58] usb 2-1: New USB device strings: Mfr=127, Product=236, SerialNumber=38 [ 527.123050][ T58] usb 2-1: Product: syz [ 527.140995][ T58] usb 2-1: Manufacturer: syz [ 527.145618][ T58] usb 2-1: SerialNumber: syz [ 527.241477][ T58] usb 2-1: config 0 descriptor?? [ 527.323743][ T58] redrat3 2-1:0.0: Couldn't find all endpoints [ 527.406013][T11229] @: renamed from vlan0 (while UP) [ 528.463426][ T9] usb 2-1: USB disconnect, device number 43 [ 528.930805][ T8] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 529.070452][ T25] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 529.084781][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 529.104366][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.139598][ T8] usb 1-1: Product: syz [ 529.155742][ T8] usb 1-1: Manufacturer: syz [ 529.160407][ T8] usb 1-1: SerialNumber: syz [ 529.260745][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 529.260843][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 529.272635][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 529.281980][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.289981][ T25] usb 5-1: Product: syz [ 529.320764][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 529.334886][ T25] usb 5-1: Manufacturer: syz [ 529.361442][ T25] usb 5-1: SerialNumber: syz [ 529.596704][T11248] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 529.614842][ T25] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 529.829047][ T25] usb 5-1: USB disconnect, device number 53 [ 529.865652][ T25] usblp0: removed [ 529.885954][ T8] r8152-cfgselector 1-1: USB disconnect, device number 63 [ 530.722975][T11260] netlink: 'syz.0.1621': attribute type 10 has an invalid length. [ 531.640807][ T8] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 531.810680][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 531.849002][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 531.875857][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.900732][ T8] usb 4-1: Product: syz [ 531.904957][ T8] usb 4-1: Manufacturer: syz [ 531.909592][ T8] usb 4-1: SerialNumber: syz [ 532.150891][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 532.161645][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 532.350786][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 532.358875][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 532.362232][T11270] FAULT_INJECTION: forcing a failure. [ 532.362232][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 532.380732][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.411061][T11270] CPU: 0 UID: 0 PID: 11270 Comm: syz.3.1625 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 532.419589][ T25] usb 2-1: Product: syz [ 532.421854][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 532.421872][T11270] Call Trace: [ 532.421883][T11270] [ 532.421895][T11270] dump_stack_lvl+0x241/0x360 [ 532.421929][T11270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.426080][ T25] usb 2-1: Manufacturer: syz [ 532.436120][T11270] ? __pfx__printk+0x10/0x10 [ 532.436165][T11270] ? __kmalloc_noprof+0xb0/0x400 [ 532.436199][T11270] ? __pfx___might_resched+0x10/0x10 [ 532.436237][T11270] should_fail_ex+0x3b0/0x4e0 [ 532.456221][ T25] usb 2-1: SerialNumber: syz [ 532.457016][T11270] ? usblp_write+0x16b/0x870 [ 532.485767][T11270] should_failslab+0xac/0x100 [ 532.490491][T11270] ? usblp_write+0x16b/0x870 [ 532.495126][T11270] __kmalloc_noprof+0xd8/0x400 [ 532.499940][T11270] usblp_write+0x16b/0x870 [ 532.504415][T11270] vfs_writev+0x5a9/0xba0 [ 532.508800][T11270] ? __pfx_usblp_write+0x10/0x10 [ 532.513781][T11270] ? __pfx_vfs_writev+0x10/0x10 [ 532.518671][T11270] ? vfs_write+0x7bf/0xc90 [ 532.523147][T11270] ? __fget_files+0x29/0x470 [ 532.527782][T11270] ? __fget_files+0x29/0x470 [ 532.532464][T11270] __ia32_compat_sys_pwritev+0x1db/0x2e0 [ 532.538145][T11270] ? __pfx___ia32_compat_sys_pwritev+0x10/0x10 [ 532.544346][T11270] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 532.550987][T11270] ? lockdep_hardirqs_on+0x99/0x150 [ 532.556241][T11270] __do_fast_syscall_32+0xb4/0x110 [ 532.561395][T11270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.567587][T11270] ? lockdep_hardirqs_on+0x99/0x150 [ 532.572841][T11270] do_fast_syscall_32+0x34/0x80 [ 532.577725][T11270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.584109][T11270] RIP: 0023:0xf7f12579 [ 532.588213][T11270] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.607857][T11270] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 000000000000014e [ 532.616318][T11270] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200008c0 [ 532.624334][T11270] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.632437][T11270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.640442][T11270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.648452][T11270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.656479][T11270] [ 532.684084][ T25] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 532.738320][ T940] usb 4-1: USB disconnect, device number 63 [ 532.762251][ T940] usblp0: removed [ 532.929473][ T5278] usb 2-1: USB disconnect, device number 44 [ 532.946455][ T5278] usblp1: removed [ 532.988508][T11277] netlink: 'syz.0.1627': attribute type 10 has an invalid length. [ 534.040726][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 534.215054][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 534.242304][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.282947][ T9] usb 4-1: Product: syz [ 534.313535][ T9] usb 4-1: Manufacturer: syz [ 534.334688][ T9] usb 4-1: SerialNumber: syz [ 534.564222][T11287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'. [ 534.572463][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 534.579892][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 534.925694][T11288] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 534.954806][T11290] FAULT_INJECTION: forcing a failure. [ 534.954806][T11290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.000459][T11290] CPU: 1 UID: 0 PID: 11290 Comm: syz.0.1634 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 535.011289][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 535.021387][T11290] Call Trace: [ 535.024704][T11290] [ 535.027666][T11290] dump_stack_lvl+0x241/0x360 [ 535.032376][T11290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.037677][T11290] ? __pfx__printk+0x10/0x10 [ 535.042308][T11290] ? __pfx_lock_release+0x10/0x10 [ 535.047352][T11290] should_fail_ex+0x3b0/0x4e0 [ 535.052038][T11290] _copy_from_user+0x2f/0xe0 [ 535.056647][T11290] get_compat_msghdr+0xae/0x730 [ 535.061512][T11290] ? __fget_files+0x29/0x470 [ 535.066118][T11290] ? __pfx_get_compat_msghdr+0x10/0x10 [ 535.071584][T11290] ? __fget_files+0x3f3/0x470 [ 535.076279][T11290] __sys_sendmsg+0x25d/0x380 [ 535.080894][T11290] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.086037][T11290] ? __pfx_vfs_write+0x10/0x10 [ 535.090849][T11290] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 535.097462][T11290] ? lockdep_hardirqs_on+0x99/0x150 [ 535.102682][T11290] __do_fast_syscall_32+0xb4/0x110 [ 535.107800][T11290] ? exc_page_fault+0x590/0x8c0 [ 535.112669][T11290] do_fast_syscall_32+0x34/0x80 [ 535.117535][T11290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.123894][T11290] RIP: 0023:0xf73dd579 [ 535.127969][T11290] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 535.147597][T11290] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 535.156069][T11290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 535.164049][T11290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.172038][T11290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.180049][T11290] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.188033][T11290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.196028][T11290] [ 535.199129][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.254897][ T5278] r8152-cfgselector 4-1: USB disconnect, device number 64 [ 535.524447][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.834449][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.918663][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 535.929060][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 535.937894][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 535.946543][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 535.954390][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 535.961840][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.246383][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.533287][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.595224][T11319] netlink: 'syz.1.1644': attribute type 10 has an invalid length. [ 536.801546][ T5278] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 536.986111][ T52] bridge_slave_1: left allmulticast mode [ 537.005969][ T52] bridge_slave_1: left promiscuous mode [ 537.029602][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.031410][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 537.064576][ T5278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 537.076053][ T52] bridge_slave_0: left allmulticast mode [ 537.077571][ T5278] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 537.111119][ T52] bridge_slave_0: left promiscuous mode [ 537.116916][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.120773][ T5278] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 537.140673][ T5278] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 537.161241][ T5278] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 537.171904][ T5278] usb 1-1: config 1 interface 0 has no altsetting 0 [ 537.184566][ T5278] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 537.201684][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.299532][ T5278] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 537.572933][ T5278] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 537.692272][ T5278] usb 1-1: USB disconnect, device number 64 [ 538.097208][ T5229] Bluetooth: hci3: command tx timeout [ 538.439531][T11336] FAULT_INJECTION: forcing a failure. [ 538.439531][T11336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.500247][T11336] CPU: 0 UID: 0 PID: 11336 Comm: syz.1.1650 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 538.511090][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.521173][T11336] Call Trace: [ 538.524455][T11336] [ 538.527385][T11336] dump_stack_lvl+0x241/0x360 [ 538.532109][T11336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.537397][T11336] ? __pfx__printk+0x10/0x10 [ 538.542077][T11336] ? __pfx_lock_release+0x10/0x10 [ 538.547243][T11336] should_fail_ex+0x3b0/0x4e0 [ 538.551981][T11336] _copy_from_user+0x2f/0xe0 [ 538.556610][T11336] get_compat_msghdr+0xae/0x730 [ 538.561486][T11336] ? __fget_files+0x29/0x470 [ 538.566106][T11336] ? __pfx_get_compat_msghdr+0x10/0x10 [ 538.571583][T11336] ? __fget_files+0x3f3/0x470 [ 538.576307][T11336] do_recvmmsg+0x514/0xad0 [ 538.580778][T11336] ? __pfx_do_recvmmsg+0x10/0x10 [ 538.585763][T11336] ? __pfx_lock_release+0x10/0x10 [ 538.590838][T11336] ? kstrtouint_from_user+0x128/0x190 [ 538.596355][T11336] ? vfs_write+0x7bf/0xc90 [ 538.600797][T11336] ? __pfx_vfs_write+0x10/0x10 [ 538.605576][T11336] ? __fget_files+0x3f3/0x470 [ 538.610263][T11336] __sys_recvmmsg+0x1a8/0x270 [ 538.614961][T11336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 538.621062][T11336] ? __pfx___sys_recvmmsg+0x10/0x10 [ 538.626305][T11336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 538.632694][T11336] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 538.638891][T11336] __do_fast_syscall_32+0xb4/0x110 [ 538.644029][T11336] ? exc_page_fault+0x590/0x8c0 [ 538.648901][T11336] do_fast_syscall_32+0x34/0x80 [ 538.653771][T11336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.660128][T11336] RIP: 0023:0xf7fc4579 [ 538.664211][T11336] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 538.683839][T11336] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 538.692290][T11336] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020002dc0 [ 538.700275][T11336] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.708256][T11336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.716248][T11336] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 538.724230][T11336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.732236][T11336] [ 538.864395][ T8] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 538.969695][ T52] team0: Port device bond0 removed [ 538.978143][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.001257][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.045255][ T52] bond0 (unregistering): Released all slaves [ 539.111058][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 539.123920][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 539.128118][T11339] netlink: 'syz.2.1648': attribute type 10 has an invalid length. [ 539.150846][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 539.167861][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 539.178548][T11304] chnl_net:caif_netlink_parms(): no params data found [ 539.225001][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 539.264221][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 539.281632][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 539.337545][ T8] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 539.353797][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 539.380764][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.388925][ T8] usb 1-1: New USB device strings: Mfr=127, Product=236, SerialNumber=38 [ 539.407690][ T9] usb 4-1: Product: syz [ 539.412439][ T8] usb 1-1: Product: syz [ 539.416649][ T8] usb 1-1: Manufacturer: syz [ 539.422246][ T9] usb 4-1: Manufacturer: syz [ 539.427686][ T9] usb 4-1: SerialNumber: syz [ 539.432876][ T8] usb 1-1: SerialNumber: syz [ 539.440286][ T8] usb 1-1: config 0 descriptor?? [ 539.451422][ T8] redrat3 1-1:0.0: Couldn't find all endpoints [ 539.470372][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 539.478578][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 540.002360][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.009505][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.012129][ T8] r8152-cfgselector 4-1: USB disconnect, device number 65 [ 540.061680][T11304] bridge_slave_0: entered allmulticast mode [ 540.079276][T11304] bridge_slave_0: entered promiscuous mode [ 540.103148][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.131810][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.139238][T11304] bridge_slave_1: entered allmulticast mode [ 540.151356][ T5229] Bluetooth: hci3: command tx timeout [ 540.166366][T11304] bridge_slave_1: entered promiscuous mode [ 540.412903][ T52] hsr_slave_0: left promiscuous mode [ 540.449331][ T52] hsr_slave_1: left promiscuous mode [ 540.461215][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.482375][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.503975][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.523066][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.596386][ T52] veth1_macvtap: left promiscuous mode [ 540.618121][ T52] veth0_macvtap: left promiscuous mode [ 540.634554][ T52] veth1_vlan: left promiscuous mode [ 540.650436][ T52] veth0_vlan: left promiscuous mode [ 540.672238][ T9] usb 1-1: USB disconnect, device number 65 [ 542.242757][ T5229] Bluetooth: hci3: command tx timeout [ 542.358233][ T52] team0 (unregistering): Port device team_slave_1 removed [ 542.528365][ T52] team0 (unregistering): Port device team_slave_0 removed [ 544.310865][T11382] Bluetooth: hci3: command tx timeout [ 544.486166][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.549669][T11375] netlink: 'syz.1.1657': attribute type 10 has an invalid length. [ 544.582762][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.903712][T11382] Bluetooth: hci1: command 0x0406 tx timeout [ 544.909885][T11382] Bluetooth: hci5: command 0x0406 tx timeout [ 545.040243][T11304] team0: Port device team_slave_0 added [ 545.059016][T11304] team0: Port device team_slave_1 added [ 545.175124][T11404] FAULT_INJECTION: forcing a failure. [ 545.175124][T11404] name failslab, interval 1, probability 0, space 0, times 0 [ 545.304938][T11404] CPU: 1 UID: 0 PID: 11404 Comm: syz.1.1666 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 545.315780][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 545.325880][T11404] Call Trace: [ 545.329196][T11404] [ 545.332160][T11404] dump_stack_lvl+0x241/0x360 [ 545.336888][T11404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.342132][T11404] ? __pfx__printk+0x10/0x10 [ 545.346780][T11404] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 545.352414][T11404] ? __pfx___might_resched+0x10/0x10 [ 545.357754][T11404] should_fail_ex+0x3b0/0x4e0 [ 545.362483][T11404] ? getname_flags+0xb7/0x540 [ 545.367183][T11404] should_failslab+0xac/0x100 [ 545.371882][T11404] ? getname_flags+0xb7/0x540 [ 545.376574][T11404] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 545.381970][T11404] getname_flags+0xb7/0x540 [ 545.386580][T11404] do_sys_openat2+0xd2/0x1d0 [ 545.391197][T11404] ? __pfx_do_sys_openat2+0x10/0x10 [ 545.396853][T11404] __ia32_compat_sys_open+0x21d/0x270 [ 545.402344][T11404] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 545.408257][T11404] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 545.414875][T11404] ? lockdep_hardirqs_on+0x99/0x150 [ 545.420100][T11404] __do_fast_syscall_32+0xb4/0x110 [ 545.425227][T11404] ? exc_page_fault+0x590/0x8c0 [ 545.430103][T11404] do_fast_syscall_32+0x34/0x80 [ 545.434969][T11404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.441330][T11404] RIP: 0023:0xf7fc4579 [ 545.445434][T11404] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 545.465051][T11404] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 545.473478][T11404] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000080000 [ 545.481459][T11404] RDX: 00000000000001d3 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.489434][T11404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.497411][T11404] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 545.505426][T11404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.513421][T11404] [ 545.552919][T10246] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 545.637875][T11337] syz.2.1648 (11337) used greatest stack depth: 16112 bytes left [ 545.673832][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz-executor Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 545.675843][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.684818][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 545.684930][T10246] Call Trace: [ 545.684943][T10246] [ 545.684954][T10246] dump_stack_lvl+0x241/0x360 [ 545.694864][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.701944][T10246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.701975][T10246] ? __pfx__printk+0x10/0x10 [ 545.702007][T10246] ? ___ratelimit+0x4be/0x690 [ 545.702044][T10246] ? __pfx____ratelimit+0x10/0x10 [ 545.758274][T10246] dump_header+0xdb/0x6a0 [ 545.762628][T10246] oom_kill_process+0x3b8/0x950 [ 545.767508][T10246] out_of_memory+0xf34/0x12f0 [ 545.772213][T10246] ? __pfx___mutex_lock+0x10/0x10 [ 545.777250][T10246] ? __pfx_out_of_memory+0x10/0x10 [ 545.782409][T10246] mem_cgroup_out_of_memory+0x264/0x3c0 [ 545.787974][T10246] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 545.794078][T10246] ? _raw_spin_unlock+0x28/0x50 [ 545.798960][T10246] ? memcg1_oom_prepare+0x286/0x300 [ 545.804178][T10246] try_charge_memcg+0xcb8/0x1170 [ 545.809152][T10246] ? __pfx_try_charge_memcg+0x10/0x10 [ 545.814574][T10246] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 545.820751][T10246] charge_memcg+0xa6/0x1e0 [ 545.825187][T10246] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 545.831285][T10246] __read_swap_cache_async+0x3df/0x8e0 [ 545.836788][T10246] ? __pfx___read_swap_cache_async+0x10/0x10 [ 545.842801][T10246] swap_cluster_readahead+0x674/0x7f0 [ 545.848201][T10246] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 545.854113][T10246] ? xas_load+0x59b/0x5c0 [ 545.858472][T10246] swapin_readahead+0x1bb/0xdf0 [ 545.863337][T10246] ? filemap_get_entry+0x123/0x3b0 [ 545.868466][T10246] ? __pfx_swapin_readahead+0x10/0x10 [ 545.873860][T10246] ? __filemap_get_folio+0x949/0xbd0 [ 545.879166][T10246] ? swap_cache_get_folio+0xa6/0x570 [ 545.884490][T10246] do_swap_page+0x584/0x7b30 [ 545.889106][T10246] ? __pfx_validate_chain+0x10/0x10 [ 545.894330][T10246] ? do_swap_page+0x15e/0x7b30 [ 545.899111][T10246] ? __pfx_do_swap_page+0x10/0x10 [ 545.904153][T10246] ? __pfx___pte_offset_map+0x10/0x10 [ 545.909639][T10246] ? __pfx_validate_chain+0x10/0x10 [ 545.914850][T10246] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 545.920781][T10246] ? pte_offset_map_nolock+0x137/0x1f0 [ 545.926270][T10246] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 545.932200][T10246] handle_pte_fault+0x61d/0x6800 [ 545.937164][T10246] ? mark_lock+0x9a/0x360 [ 545.941512][T10246] ? __pfx_handle_pte_fault+0x10/0x10 [ 545.946906][T10246] ? __lock_acquire+0x1384/0x2050 [ 545.951965][T10246] ? reacquire_held_locks+0x3eb/0x690 [ 545.957359][T10246] ? lock_vma_under_rcu+0x34b/0x790 [ 545.962592][T10246] ? __pfx_reacquire_held_locks+0x10/0x10 [ 545.968341][T10246] handle_mm_fault+0x1106/0x1bb0 [ 545.973329][T10246] ? __pfx_handle_mm_fault+0x10/0x10 [ 545.978649][T10246] ? lock_vma_under_rcu+0x602/0x790 [ 545.983890][T10246] ? lock_vma_under_rcu+0x1dd/0x790 [ 545.989139][T10246] ? exc_page_fault+0x113/0x8c0 [ 545.994033][T10246] exc_page_fault+0x459/0x8c0 [ 545.998747][T10246] asm_exc_page_fault+0x26/0x30 [ 546.003630][T10246] RIP: 0023:0xf721e30d [ 546.007708][T10246] Code: 08 8d 74 24 14 e8 13 53 03 00 8b 9c 24 80 00 00 00 8b 94 24 88 00 00 00 89 e9 89 44 24 0c 31 c0 85 ff 0f 44 f0 b8 72 00 00 00 <65> ff 15 10 00 00 00 89 c6 3d 00 f0 ff ff 77 3b 83 ec 0c ff 74 24 [ 546.027344][T10246] RSP: 002b:00000000f752fd10 EFLAGS: 00010246 [ 546.033435][T10246] RAX: 0000000000000072 RBX: 00000000ffffffff RCX: 00000000f752fe08 [ 546.041421][T10246] RDX: 0000000040000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.049417][T10246] RBP: 00000000f752fe08 R08: 0000000000000000 R09: 0000000000000000 [ 546.057401][T10246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.065382][T10246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.073465][T10246] [ 546.083247][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.133718][T10246] memory: usage 307196kB, limit 307200kB, failcnt 1680 [ 546.196452][T10246] memory+swap: usage 307792kB, limit 9007199254740988kB, failcnt 0 [ 546.242134][T10246] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 546.250250][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.266191][T10246] Memory cgroup stats for /syz2: [ 546.266460][T10246] cache 16384 [ 546.303501][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.330570][T10246] rss 0 [ 546.353495][T10246] rss_huge 0 [ 546.356738][T10246] shmem 0 [ 546.361807][T10246] mapped_file 225280 [ 546.365744][T10246] dirty 16384 [ 546.369059][T10246] writeback 0 [ 546.390758][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.410785][T10246] workingset_refault_anon 178 [ 546.422495][T10246] workingset_refault_file 0 [ 546.427050][T10246] swap 610304 [ 546.430356][T10246] swapcached 0 [ 546.490859][T10246] pgpgin 131780 [ 546.494412][T10246] pgpgout 131776 [ 546.497984][T10246] pgfault 181874 [ 546.750809][T10246] pgmajfault 169 [ 546.754467][T10246] inactive_anon 0 [ 546.758131][T10246] active_anon 0 [ 546.795143][T10246] inactive_file 0 [ 546.798843][T10246] active_file 16384 [ 546.803630][T10246] unevictable 0 [ 546.807133][T10246] hierarchical_memory_limit 314572800 [ 546.812635][T10246] hierarchical_memsw_limit 9223372036854771712 [ 546.818845][T10246] total_cache 16384 [ 546.822758][T10246] total_rss 0 [ 546.826087][T10246] total_rss_huge 0 [ 546.829829][T10246] total_shmem 0 [ 546.833430][T10246] total_mapped_file 225280 [ 546.837874][T10246] total_dirty 16384 [ 546.841835][T10246] total_writeback 0 [ 546.847291][T10246] total_workingset_refault_anon 178 [ 546.852644][T10246] total_workingset_refault_file 0 [ 546.857696][T10246] total_swap 610304 [ 546.861735][T10246] total_swapcached 0 [ 546.865673][T10246] total_pgpgin 131780 [ 546.869697][T10246] total_pgpgout 131776 [ 546.875082][T10246] total_pgfault 181874 [ 546.879284][T10246] total_pgmajfault 169 [ 546.883808][T10246] total_inactive_anon 0 [ 546.888004][T10246] total_active_anon 0 [ 546.892507][T10246] total_inactive_file 0 [ 546.896712][T10246] total_active_file 16384 [ 546.901379][T10246] total_unevictable 0 [ 546.905399][T10246] anon_cost 0 [ 546.908712][T10246] file_cost 0 [ 546.912288][T10246] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1648,pid=11328,uid=0 [ 546.927785][T10246] Memory cgroup out of memory: OOM victim 11328 (syz.2.1648) is already exiting. Skip killing the task [ 547.024298][T11304] hsr_slave_0: entered promiscuous mode [ 547.046639][T11304] hsr_slave_1: entered promiscuous mode [ 547.066544][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.076444][T11304] Cannot create hsr debugfs directory [ 547.824483][ T5425] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.985604][ T5425] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.126080][ T5425] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.371799][ T5425] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.717614][ T5425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.799044][T11304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 548.842242][ T5425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.862033][T11304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 548.883909][T11304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 548.951673][T11304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 549.063483][ T5425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.248759][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.270863][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.323668][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.333346][ T5425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.359612][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.368918][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 549.376477][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.774280][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.875741][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.962207][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.969357][ T5415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.002236][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.009441][ T5415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.171209][ T5425] bridge_slave_1: left allmulticast mode [ 550.176969][ T5425] bridge_slave_1: left promiscuous mode [ 550.188158][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.221359][ T5425] bridge_slave_0: left allmulticast mode [ 550.228512][ T5425] bridge_slave_0: left promiscuous mode [ 550.261907][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.306079][ T5425] bridge_slave_1: left allmulticast mode [ 550.324544][ T5425] bridge_slave_1: left promiscuous mode [ 550.341852][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.365051][ T5425] bridge_slave_0: left allmulticast mode [ 550.400898][ T5425] bridge_slave_0: left promiscuous mode [ 550.406653][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.434060][ T5229] Bluetooth: hci1: command tx timeout [ 551.890782][ T5425] team0: Port device bond0 removed [ 551.899145][ T5425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.927534][ T5425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.948746][ T5425] bond0 (unregistering): Released all slaves [ 552.176676][ T5425] team0: Port device bond0 removed [ 552.191120][ T5425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.213973][ T5425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.235798][ T5425] bond0 (unregistering): Released all slaves [ 552.490066][T11440] chnl_net:caif_netlink_parms(): no params data found [ 552.516080][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.982431][T11440] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.994853][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.021315][T11440] bridge_slave_0: entered allmulticast mode [ 553.029382][T11440] bridge_slave_0: entered promiscuous mode [ 553.094805][T11440] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.112310][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.119712][T11440] bridge_slave_1: entered allmulticast mode [ 553.139698][T11440] bridge_slave_1: entered promiscuous mode [ 553.367375][T11440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.480346][T11440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.508987][T11304] veth0_vlan: entered promiscuous mode [ 553.521456][ T5229] Bluetooth: hci1: command tx timeout [ 553.608228][ T5425] hsr_slave_0: left promiscuous mode [ 553.621419][ T5425] hsr_slave_1: left promiscuous mode [ 553.633408][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.649411][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.671326][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.678792][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.714360][ T5425] hsr_slave_0: left promiscuous mode [ 553.720541][ T5425] hsr_slave_1: left promiscuous mode [ 553.732049][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.739506][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.760099][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.773068][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.861244][ T5425] veth1_macvtap: left promiscuous mode [ 553.866853][ T5425] veth0_macvtap: left promiscuous mode [ 553.885380][ T5425] veth1_vlan: left promiscuous mode [ 553.899417][ T5425] veth0_vlan: left promiscuous mode [ 553.913844][ T5425] veth1_macvtap: left promiscuous mode [ 553.919414][ T5425] veth0_macvtap: left promiscuous mode [ 553.926821][ T5425] veth1_vlan: left promiscuous mode [ 553.932273][ T5425] veth0_vlan: left promiscuous mode [ 554.892918][ T5425] team0 (unregistering): Port device team_slave_1 removed [ 554.979321][ T5425] team0 (unregistering): Port device team_slave_0 removed [ 555.590863][ T5229] Bluetooth: hci1: command tx timeout [ 556.417655][ T5425] team0 (unregistering): Port device team_slave_1 removed [ 556.469178][ T5425] team0 (unregistering): Port device team_slave_0 removed [ 557.294515][T11440] team0: Port device team_slave_0 added [ 557.314992][T11440] team0: Port device team_slave_1 added [ 557.399903][T11304] veth1_vlan: entered promiscuous mode [ 557.414387][T11440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.430377][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.507087][T11440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.535011][T11440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.549036][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.578533][T11440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.682041][ T5229] Bluetooth: hci1: command tx timeout [ 557.725266][T11304] veth0_macvtap: entered promiscuous mode [ 557.736000][T11304] veth1_macvtap: entered promiscuous mode [ 557.751682][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.762239][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.772208][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.782733][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.792859][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.804405][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.815524][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.826203][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.836148][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.846737][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.857124][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.867752][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.877840][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.888366][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.908854][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.047773][T11440] hsr_slave_0: entered promiscuous mode [ 558.121144][T11440] hsr_slave_1: entered promiscuous mode [ 558.143490][T11440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.160702][T11440] Cannot create hsr debugfs directory [ 558.168519][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.179426][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.200721][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.213470][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.223438][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.234442][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.244379][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.255023][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.264967][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.275501][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.285390][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.295909][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.305824][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.317559][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.329847][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.442587][T11304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.453040][T11304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.464432][T11304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.474311][T11304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.644483][ T5414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.644489][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.644511][ T5414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.652513][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.986180][T11440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.276911][T11440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.637557][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.649146][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 559.657458][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 559.666878][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 559.674918][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 559.682416][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.743691][T11544] netlink: 'syz.4.1638': attribute type 10 has an invalid length. [ 559.903839][T11544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.943885][T11544] team0: Port device bond0 added [ 560.004638][T11440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.203191][T11440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.443480][ T5425] bridge_slave_1: left allmulticast mode [ 560.449212][ T5425] bridge_slave_1: left promiscuous mode [ 560.492594][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.537131][ T5425] bridge_slave_0: left allmulticast mode [ 560.543061][ T5425] bridge_slave_0: left promiscuous mode [ 560.548824][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.512904][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 561.522402][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 561.531721][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 561.541073][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 561.549625][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 561.557144][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 561.751413][ T5235] Bluetooth: hci5: command tx timeout [ 562.277903][ T5425] team0: Port device bond0 removed [ 562.305752][ T5425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.342278][ T5425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.374406][ T5425] bond0 (unregistering): Released all slaves [ 562.856841][T11549] chnl_net:caif_netlink_parms(): no params data found [ 563.138572][T11588] fuse: Bad value for 'fd' [ 563.210010][T11440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 563.277742][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.291123][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.338367][T11440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 563.593797][ T5235] Bluetooth: hci8: command tx timeout [ 563.671635][T11440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 563.784156][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.805548][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.822482][T11549] bridge_slave_0: entered allmulticast mode [ 563.831379][ T5235] Bluetooth: hci5: command tx timeout [ 563.849374][T11549] bridge_slave_0: entered promiscuous mode [ 563.892791][ T5425] hsr_slave_0: left promiscuous mode [ 563.932374][ T5425] hsr_slave_1: left promiscuous mode [ 564.014840][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.078177][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.114556][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.131766][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.183338][ T5425] veth1_macvtap: left promiscuous mode [ 564.198960][ T5425] veth0_macvtap: left promiscuous mode [ 564.211023][ T5425] veth1_vlan: left promiscuous mode [ 564.222884][ T5425] veth0_vlan: left promiscuous mode [ 565.190932][ T5425] team0 (unregistering): Port device team_slave_1 removed [ 565.259783][ T5425] team0 (unregistering): Port device team_slave_0 removed [ 565.680817][ T5235] Bluetooth: hci8: command tx timeout [ 565.733188][T11440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 565.743258][T11601] netlink: 'syz.3.1673': attribute type 10 has an invalid length. [ 565.760787][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.767943][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.807061][T11549] bridge_slave_1: entered allmulticast mode [ 565.827279][T11549] bridge_slave_1: entered promiscuous mode [ 565.879048][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1675'. [ 565.910898][ T5235] Bluetooth: hci5: command tx timeout [ 566.013424][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.074738][T11579] chnl_net:caif_netlink_parms(): no params data found [ 566.089215][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.113732][T11621] FAULT_INJECTION: forcing a failure. [ 566.113732][T11621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.165816][T11621] CPU: 0 UID: 0 PID: 11621 Comm: syz.4.1679 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 566.176673][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 566.186780][T11621] Call Trace: [ 566.190181][T11621] [ 566.193148][T11621] dump_stack_lvl+0x241/0x360 [ 566.197874][T11621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.203117][T11621] ? __pfx__printk+0x10/0x10 [ 566.207761][T11621] ? __pfx_lock_release+0x10/0x10 [ 566.212844][T11621] should_fail_ex+0x3b0/0x4e0 [ 566.217583][T11621] _copy_from_user+0x2f/0xe0 [ 566.222227][T11621] get_compat_msghdr+0xae/0x730 [ 566.227130][T11621] ? __fget_files+0x29/0x470 [ 566.231777][T11621] ? __pfx_get_compat_msghdr+0x10/0x10 [ 566.237296][T11621] ? __fget_files+0x3f3/0x470 [ 566.242027][T11621] __sys_sendmsg+0x25d/0x380 [ 566.246661][T11621] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.251823][T11621] ? __pfx_vfs_write+0x10/0x10 [ 566.256673][T11621] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 566.263330][T11621] ? lockdep_hardirqs_on+0x99/0x150 [ 566.268591][T11621] __do_fast_syscall_32+0xb4/0x110 [ 566.273738][T11621] ? exc_page_fault+0x590/0x8c0 [ 566.278627][T11621] do_fast_syscall_32+0x34/0x80 [ 566.283497][T11621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.289847][T11621] RIP: 0023:0xf746d579 [ 566.293928][T11621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 566.313565][T11621] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 566.322099][T11621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 566.330088][T11621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.338161][T11621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.346146][T11621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.354128][T11621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.362123][T11621] [ 566.391217][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1678'. [ 566.506001][T11549] team0: Port device team_slave_0 added [ 566.548387][T11549] team0: Port device team_slave_1 added [ 566.685386][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.721108][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.785412][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.810025][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.830991][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.876013][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.164106][T11549] hsr_slave_0: entered promiscuous mode [ 567.204124][T11549] hsr_slave_1: entered promiscuous mode [ 567.305208][T11549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.345444][T11549] Cannot create hsr debugfs directory [ 567.481482][T11579] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.488627][T11579] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.554735][T11579] bridge_slave_0: entered allmulticast mode [ 567.612225][T11579] bridge_slave_0: entered promiscuous mode [ 567.656915][T11579] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.671327][T11579] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.689441][T11579] bridge_slave_1: entered allmulticast mode [ 567.708965][T11579] bridge_slave_1: entered promiscuous mode [ 567.762823][ T5235] Bluetooth: hci8: command tx timeout [ 567.990896][ T5235] Bluetooth: hci5: command tx timeout [ 568.228717][ T5425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.260976][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 568.270271][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 568.278602][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 568.286711][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 568.294446][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 568.301801][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 568.713957][T11579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.744096][T11579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.968120][ T5425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.073508][T11579] team0: Port device team_slave_0 added [ 569.091518][T11579] team0: Port device team_slave_1 added [ 569.242888][ T5425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.648420][ T5425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.752252][T11579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.766915][T11579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.831098][ T5229] Bluetooth: hci8: command tx timeout [ 569.880668][T11579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.020894][T11579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.027957][T11579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.108331][T11579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.144657][T11440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.390859][ T5229] Bluetooth: hci7: command tx timeout [ 570.706850][T11440] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.829747][T11440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.880794][T11440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.940121][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.947341][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.112434][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.119598][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.622074][T11579] hsr_slave_0: entered promiscuous mode [ 571.651611][T11579] hsr_slave_1: entered promiscuous mode [ 571.678144][T11579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.723781][T11579] Cannot create hsr debugfs directory [ 571.757333][T11647] chnl_net:caif_netlink_parms(): no params data found [ 572.057016][T11440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.104710][ T5425] bridge_slave_1: left allmulticast mode [ 572.110414][ T5425] bridge_slave_1: left promiscuous mode [ 572.133898][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.153689][ T5425] bridge_slave_0: left allmulticast mode [ 572.159393][ T5425] bridge_slave_0: left promiscuous mode [ 572.211796][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.471088][ T5229] Bluetooth: hci7: command tx timeout [ 573.247445][ T5425] team0: Port device bond0 removed [ 573.267758][ T5425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.294036][ T5425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.314251][ T5425] bond0 (unregistering): Released all slaves [ 573.362567][T11677] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 573.530873][ T30] INFO: task syz.2.1355:10145 blocked for more than 143 seconds. [ 573.539015][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.620657][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.629390][ T30] task:syz.2.1355 state:D stack:24000 pid:10145 tgid:10144 ppid:9886 flags:0x20024006 [ 573.670842][ T30] Call Trace: [ 573.675587][ T30] [ 573.678575][ T30] __schedule+0x1895/0x4b30 [ 573.700692][ T30] ? __pfx___schedule+0x10/0x10 [ 573.705614][ T30] ? __pfx_lock_release+0x10/0x10 [ 573.720668][ T30] ? schedule+0x90/0x320 [ 573.725058][ T30] schedule+0x14b/0x320 [ 573.729267][ T30] schedule_timeout+0xb0/0x310 [ 573.740701][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 573.746141][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.770761][ T30] ? wait_for_completion+0x2fe/0x620 [ 573.776216][ T30] ? wait_for_completion+0x2fe/0x620 [ 573.790743][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.796011][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 573.810633][ T30] ? wait_for_completion+0x2fe/0x620 [ 573.815980][ T30] wait_for_completion+0x355/0x620 [ 573.830962][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 573.836683][ T30] ? io_wq_worker_wake+0x90/0xc0 [ 573.860684][ T30] ? io_wq_put_and_exit+0xd0/0x720 [ 573.865884][ T30] io_wq_put_and_exit+0x344/0x720 [ 573.880646][ T30] ? io_wq_put_and_exit+0x1b1/0x720 [ 573.885909][ T30] ? __pfx_xa_find_after+0x10/0x10 [ 573.900661][ T30] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 573.906271][ T30] ? kfree+0x1a0/0x440 [ 573.910379][ T30] ? io_uring_clean_tctx+0x10a/0x1e0 [ 573.930757][ T30] io_uring_clean_tctx+0x168/0x1e0 [ 573.935942][ T30] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 573.950689][ T30] ? percpu_counter_add_batch+0x1a2/0x1f0 [ 573.956638][ T30] io_uring_cancel_generic+0x76a/0x820 [ 573.970636][ T30] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 573.976676][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.000753][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 574.006928][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.020768][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 574.026082][ T30] do_exit+0x6a8/0x28e0 [ 574.030284][ T30] ? __pfx_do_exit+0x10/0x10 [ 574.050681][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.056212][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.080669][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.088441][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 574.100648][ T30] do_group_exit+0x207/0x2c0 [ 574.105288][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.110531][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 574.125947][ T30] get_signal+0x16a3/0x1740 [ 574.130509][ T30] ? __pfx_get_signal+0x10/0x10 [ 574.150662][ T30] ? do_futex+0x33b/0x560 [ 574.155065][ T30] arch_do_signal_or_restart+0x96/0x860 [ 574.170635][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.176862][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 574.200675][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 574.206311][ T30] __do_fast_syscall_32+0xc4/0x110 [ 574.220616][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.226816][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 574.240725][ T30] do_fast_syscall_32+0x34/0x80 [ 574.245639][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.260635][ T30] RIP: 0023:0xf73bd579 [ 574.264837][ T30] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 574.290686][ T30] RAX: 0000000000000800 RBX: 0000000000000004 RCX: 00000000000047fa [ 574.298709][ T30] RDX: 0000000000002578 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.320662][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.328692][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 574.350676][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.358716][ T30] [ 574.380738][ T30] [ 574.380738][ T30] Showing all locks held in the system: [ 574.388509][ T30] 1 lock held by pool_workqueue_/3: [ 574.401229][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 574.430680][ T30] 1 lock held by khungtaskd/30: [ 574.435598][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 574.460679][ T30] 3 locks held by kworker/u8:3/52: [ 574.465868][ T30] #0: ffff8881416e7148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 574.490667][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 574.520680][ T30] #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 574.540634][ T30] 3 locks held by kworker/1:1/58: [ 574.545717][ T30] 2 locks held by dhcpcd/4899: [ 574.550511][ T30] #0: ffff8880578506c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 574.647036][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 574.656183][ T30] 2 locks held by getty/4989: [ 574.661101][ T30] #0: ffff88814cce00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.671387][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 574.681654][ T30] 2 locks held by kworker/u8:8/5402: [ 574.686966][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 574.699497][ T30] #1: ffffc9000929fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 574.711073][ T30] 2 locks held by kworker/u8:10/5406: [ 574.716476][ T30] 2 locks held by kworker/u8:12/5409: [ 574.722175][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 574.734068][ T30] #1: ffffc9000931fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 574.745291][ T30] 3 locks held by kworker/u8:15/5415: [ 574.750758][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 574.762559][ T30] #1: ffffc9000938fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 574.773685][ T30] #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 574.782833][ T30] 3 locks held by kworker/u8:18/5423: [ 574.788234][ T30] #0: ffff88814b893948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 574.800241][ T30] #1: ffffc900093cfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 574.814055][ T30] #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 574.824186][ T30] 6 locks held by kworker/u8:19/5425: [ 574.829591][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 574.840710][ T30] #1: ffffc900093efd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 574.851423][ T30] #2: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 574.861060][ T30] #3: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 574.871076][ T30] #4: ffff8880302a0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 574.882025][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 574.893061][ T30] 3 locks held by iou-wrk-10145/10177: [ 574.898551][ T30] 4 locks held by syz-executor/11304: [ 574.904853][ T30] 1 lock held by syz-executor/11440: [ 574.910180][ T30] #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 574.920354][ T30] 7 locks held by syz-executor/11549: [ 574.925807][ T30] #0: ffff88803223c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 574.934948][ T30] #1: ffff888070d0e888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 574.944878][ T30] #2: ffff888026dd7878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 574.955168][ T30] #3: ffffffff8f570208 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 574.965656][ T30] #4: ffff8880614f60e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 574.976869][ T30] #5: ffff8880614f7250 (&devlink->lock_key#22){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 574.987060][ T30] #6: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 574.996283][ T30] 1 lock held by syz-executor/11579: [ 575.001670][ T30] #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 575.011965][ T30] 1 lock held by syz-executor/11647: [ 575.017293][ T30] #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 575.027499][ T30] [ 575.029866][ T30] ============================================= [ 575.029866][ T30] [ 575.038401][ T30] NMI backtrace for cpu 1 [ 575.042781][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 575.053307][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.063391][ T30] Call Trace: [ 575.066700][ T30] [ 575.069654][ T30] dump_stack_lvl+0x241/0x360 [ 575.074366][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.079604][ T30] ? __pfx__printk+0x10/0x10 [ 575.084254][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 575.089270][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 575.094771][ T30] ? _printk+0xd5/0x120 [ 575.098971][ T30] ? __pfx__printk+0x10/0x10 [ 575.103605][ T30] ? __wake_up_klogd+0xcc/0x110 [ 575.108493][ T30] ? __pfx__printk+0x10/0x10 [ 575.113134][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 575.118204][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.124226][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 575.130247][ T30] watchdog+0xff4/0x1040 [ 575.134531][ T30] ? watchdog+0x1ea/0x1040 [ 575.138990][ T30] ? __pfx_watchdog+0x10/0x10 [ 575.143701][ T30] kthread+0x2f0/0x390 [ 575.147804][ T30] ? __pfx_watchdog+0x10/0x10 [ 575.152518][ T30] ? __pfx_kthread+0x10/0x10 [ 575.157137][ T30] ret_from_fork+0x4b/0x80 [ 575.161591][ T30] ? __pfx_kthread+0x10/0x10 [ 575.166211][ T30] ret_from_fork_asm+0x1a/0x30 [ 575.171029][ T30] [ 575.175257][ T30] Sending NMI from CPU 1 to CPUs 0: [ 575.180521][ C0] NMI backtrace for cpu 0 [ 575.180537][ C0] CPU: 0 UID: 0 PID: 10177 Comm: iou-wrk-10145 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 575.180560][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.180578][ C0] RIP: 0010:validate_chain+0x1f3/0x5920 [ 575.180607][ C0] Code: 8b 1b 48 85 db 74 48 48 83 c3 f8 74 42 4c 8d 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 e0 87 8d 00 49 8b 07 <4c> 39 f0 0f 84 83 03 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 [ 575.180626][ C0] RSP: 0018:ffffc90002f66300 EFLAGS: 00000046 [ 575.180644][ C0] RAX: 1f5aad351d083993 RBX: ffffffff9448db80 RCX: ffffffff81710f1e [ 575.180660][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c7870 [ 575.180674][ C0] RBP: ffffc90002f66600 R08: ffffffff942c7877 R09: 1ffffffff2858f0e [ 575.180691][ C0] R10: dffffc0000000000 R11: fffffbfff2858f0f R12: dffffc0000000000 [ 575.180707][ C0] R13: ffff8880646fe528 R14: 1f5aad351d083993 R15: ffffffff9448db98 [ 575.180723][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f56a6b40 [ 575.180742][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 575.180758][ C0] CR2: 00007f5089bf3318 CR3: 0000000041184000 CR4: 00000000003526f0 [ 575.180777][ C0] DR0: 0000000000000077 DR1: 000000000000380f DR2: 0000000000000071 [ 575.180791][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.180807][ C0] Call Trace: [ 575.180815][ C0] [ 575.180825][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 575.180853][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 575.180887][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 575.180921][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 575.180951][ C0] ? nmi_handle+0x14f/0x5a0 [ 575.180981][ C0] ? nmi_handle+0x2a/0x5a0 [ 575.181005][ C0] ? validate_chain+0x1f3/0x5920 [ 575.181029][ C0] ? default_do_nmi+0x63/0x160 [ 575.181057][ C0] ? exc_nmi+0x123/0x1f0 [ 575.181083][ C0] ? end_repeat_nmi+0xf/0x53 [ 575.181107][ C0] ? validate_chain+0x11e/0x5920 [ 575.181132][ C0] ? validate_chain+0x1f3/0x5920 [ 575.181157][ C0] ? validate_chain+0x1f3/0x5920 [ 575.181180][ C0] ? validate_chain+0x1f3/0x5920 [ 575.181201][ C0] [ 575.181208][ C0] [ 575.181216][ C0] ? validate_chain+0x11e/0x5920 [ 575.181240][ C0] ? rcu_is_watching+0x15/0xb0 [ 575.181264][ C0] ? __pfx_validate_chain+0x10/0x10 [ 575.181287][ C0] ? __pfx_validate_chain+0x10/0x10 [ 575.181308][ C0] ? __pfx_validate_chain+0x10/0x10 [ 575.181333][ C0] ? mark_lock+0x9a/0x360 [ 575.181352][ C0] ? __pfx_validate_chain+0x10/0x10 [ 575.181372][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.181401][ C0] ? mark_lock+0x9a/0x360 [ 575.181421][ C0] __lock_acquire+0x1384/0x2050 [ 575.181455][ C0] lock_acquire+0x1ed/0x550 [ 575.181482][ C0] ? mlock_drain_local+0x79/0x490 [ 575.181507][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 575.181535][ C0] ? lru_add_drain+0x79/0x3e0 [ 575.181554][ C0] ? __pfx_lock_release+0x10/0x10 [ 575.181584][ C0] ? __pfx_validate_chain+0x10/0x10 [ 575.181604][ C0] ? __pfx_validate_chain+0x10/0x10 [ 575.181626][ C0] ? mlock_drain_local+0x79/0x490 [ 575.181647][ C0] mlock_drain_local+0x92/0x490 [ 575.181668][ C0] ? mlock_drain_local+0x79/0x490 [ 575.181690][ C0] shrink_lruvec+0x242/0x31b0 [ 575.181714][ C0] ? __lock_acquire+0x1384/0x2050 [ 575.181749][ C0] ? mark_lock+0x9a/0x360 [ 575.181769][ C0] ? mark_lock+0x9a/0x360 [ 575.181788][ C0] ? __lock_acquire+0x1384/0x2050 [ 575.181817][ C0] ? __pfx_shrink_lruvec+0x10/0x10 [ 575.181852][ C0] ? __pfx___might_resched+0x10/0x10 [ 575.181895][ C0] ? mem_cgroup_iter+0x3d/0x420 [ 575.181920][ C0] shrink_node+0xb09/0x3de0 [ 575.181962][ C0] ? __pfx_shrink_node+0x10/0x10 [ 575.181993][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 575.182019][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 575.182045][ C0] ? _raw_spin_unlock+0x28/0x50 [ 575.182071][ C0] do_try_to_free_pages+0x78c/0x1cf0 [ 575.182102][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 575.182124][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.182153][ C0] try_to_free_mem_cgroup_pages+0x48c/0xad0 [ 575.182178][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 575.182200][ C0] ? psi_memstall_enter+0x38f/0x530 [ 575.182228][ C0] ? cgroup_file_notify+0x111/0x190 [ 575.182248][ C0] try_charge_memcg+0x8c2/0x1170 [ 575.182280][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 575.182313][ C0] ? get_mem_cgroup_from_objcg+0x1af/0x1d0 [ 575.182330][ C0] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 575.182349][ C0] obj_cgroup_charge_pages+0x91/0x230 [ 575.182367][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.182393][ C0] ? __pfx_obj_cgroup_charge_pages+0x10/0x10 [ 575.182411][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.182438][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 575.182465][ C0] ? obj_cgroup_charge+0x305/0x5d0 [ 575.182483][ C0] obj_cgroup_charge+0x380/0x5d0 [ 575.182502][ C0] ? obj_cgroup_charge+0x11d/0x5d0 [ 575.182519][ C0] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 575.182540][ C0] __memcg_slab_post_alloc_hook+0x1b1/0x7e0 [ 575.182564][ C0] ? io_provide_buffers+0x9f4/0x1010 [ 575.182591][ C0] kmem_cache_alloc_noprof+0x1de/0x2a0 [ 575.182617][ C0] io_provide_buffers+0x9f4/0x1010 [ 575.182663][ C0] ? __lock_acquire+0x1384/0x2050 [ 575.182696][ C0] ? __pfx_io_provide_buffers+0x10/0x10 [ 575.182748][ C0] io_issue_sqe+0x36a/0x1570 [ 575.182773][ C0] ? __pfx_io_issue_sqe+0x10/0x10 [ 575.182792][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.182821][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.182849][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 575.182876][ C0] io_wq_submit_work+0x7ba/0xbd0 [ 575.182900][ C0] io_worker_handle_work+0x85a/0x11c0 [ 575.182932][ C0] io_wq_worker+0x4bc/0xed0 [ 575.182956][ C0] ? io_wq_worker+0x3e5/0xed0 [ 575.182983][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 575.183005][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 575.183025][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.183054][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.183081][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 575.183103][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 575.183122][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.183147][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 575.183175][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 575.183195][ C0] ret_from_fork+0x4b/0x80 [ 575.183221][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 575.183242][ C0] ret_from_fork_asm+0x1a/0x30 [ 575.183272][ C0] [ 575.183528][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 575.183546][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 575.183575][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.183590][ T30] Call Trace: [ 575.183601][ T30] [ 575.183611][ T30] dump_stack_lvl+0x241/0x360 [ 575.183643][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.183670][ T30] ? __pfx__printk+0x10/0x10 [ 575.183705][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.183757][ T30] ? vscnprintf+0x5d/0x90 [ 575.183788][ T30] panic+0x349/0x880 [ 575.183826][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 575.183859][ T30] ? __pfx_panic+0x10/0x10 [ 575.183893][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 575.183922][ T30] ? __irq_work_queue_local+0x137/0x410 [ 575.183958][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 575.183984][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 575.184013][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 575.184048][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 575.184082][ T30] watchdog+0x1033/0x1040 [ 575.184117][ T30] ? watchdog+0x1ea/0x1040 [ 575.184157][ T30] ? __pfx_watchdog+0x10/0x10 [ 575.184189][ T30] kthread+0x2f0/0x390 [ 575.184216][ T30] ? __pfx_watchdog+0x10/0x10 [ 575.184247][ T30] ? __pfx_kthread+0x10/0x10 [ 575.184274][ T30] ret_from_fork+0x4b/0x80 [ 575.184308][ T30] ? __pfx_kthread+0x10/0x10 [ 575.184334][ T30] ret_from_fork_asm+0x1a/0x30 [ 575.184382][ T30] [ 575.966894][ T30] Kernel Offset: disabled [ 575.971223][ T30] Rebooting in 86400 seconds..