last executing test programs: 13.624449697s ago: executing program 2 (id=1072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 11.327110728s ago: executing program 2 (id=1087): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3887}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ptrace$getenv(0x4201, r2, 0x42, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) mmap(&(0x7f0000a60000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000fcf49ce67ffa0fcaecc7ea464862528bcd929c77cdbc4ae11deda039c9d9b89937ea3ce4448afc19a2c45a197a352cd4857130a51664f17745e9c69b06f80aa96efb32bee30c54165ee0cd40a034fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x5, &(0x7f0000000280)=[{0x49ba, 0x81, 0x81, 0xffffc537}, {0x3d5f, 0x4, 0x5, 0x101}, {0x2e3, 0x8, 0x7, 0x3}, {0x7ff, 0x6, 0x2, 0x2}, {0x5, 0x1, 0x3}]}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x67) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x9}]}}}]}, 0x44}}, 0x20004090) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1400}) 9.500544646s ago: executing program 2 (id=1093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200008c0}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x583}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x13) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x24, @short}, 0x14, &(0x7f0000000400)={0x0, 0x6c}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4907e000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r8}, 0x18) socket$inet(0x2, 0x5, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 9.404211562s ago: executing program 0 (id=1094): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x40008803, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) close(0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_es_find_extent_range_exit\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 7.405697546s ago: executing program 2 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000002900000034000000000000000000000050"], 0x98}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x30}}], 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) read(r1, 0x0, 0x0) 7.353605654s ago: executing program 3 (id=1097): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fallocate(r1, 0x2, 0x6, 0xd4c) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xf, r0, 0xffffffffffffffff, &(0x7f0000000000)="f6923aa0bd4a8fcab769daa34392caef5b9b75171a43abc853c96b4815bfd5d10745f40ec173797b58ca50ccfd8d2e0dee3e3a8977e615be8b71c7c9f38f7a51d846d3a141dc012d6887d50455516922ffd3621fdeae474429e207bf2cdb8d2c3145740faa") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000380)={&(0x7f0000000300)=""/80, 0x50}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x210080}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x210080}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x20000023892) write$binfmt_misc(r6, &(0x7f0000000480)="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", 0x1000) (async) write$binfmt_misc(r6, &(0x7f0000000480)="2aca2b52c7669938c6be972e7b28f159bcc232c8ed1c2e33b6d6d3e668564ae5437f1029bc6d43c6477740fccfa3e87a00c03495466f22368198178273a82f205cacdc6491f97771f42c7e02f2f52dd77afa3829d79a35e4668331e7d2d6980a481c2c3b8332a06043990d60f25d20d9451bb03b87916380bf72dd03c6bdcf56e6e620319fe73ae771e1a9002693dbbef9bb938d59fa1edb3abb0b1659f2d4d724faebcb7b94773cda8974e57b8d8de206fec186c61afa91ca19c1af8427af12c6ea7405d6914707edad2db8d7a7eefb2c8af997184b86cec666ab9c3ebbe9ca7cb2574795f924cb219bbe57fb55aaaf4c0a6fa5643a9be6b33fddeb5690f41e30c7dce19eaddb700c50d8649c1b7e40b543bee01ff5d39c270f898d35c8bb1868d3b6c1c9312f766495cba0903b39451a946bd88a215327e0e4e667da275e21a25ea548cac943b4f30c8a2e8d069afdbf79583cf3892abc8e9ca312e4e6e4befef98c2108d6e270bd622beeedc556c37b1265136bb40eaad9c611939d25518d0b4cd92eaae80e4b9288b12ac6a6b88c0d62810f066d44ade74973e9b9a94c45e06363326db4035723331e06913268c30b06b759c7f6170fc41bac1b63ffe928bd41974c60c3e4f8664955d13d455e7bf19134dee627877bd76e38baa86607bc94aa860055673a4ccd7203cd4c91fb38667c3775b03ba7fab47f0b7e0cfe23b0d3276b209ce3f01f2442cf468a75113606aca7a07763aaa1aab7921e37ed3d9fd0775cebb692852088f1df9ccc357fe8bb4eef5e212e8234863376c1cc783ccd35040df0a5f5a650de50fb898f18e32a98ade78933edbcc0ba9be2e1ed6991c4c8eacb1fa28dc2f07a25ca1f3ad540a08030c1793d360a99479049934537ab9a438c3b2180af7b56211ac2e136869f514d3fe1209dcd1f90e3a90a25d2f5c71538e9c613087ddf39da654b65dfe780c640188d3acca39969da541af1dd2a3db0e037423a8c67565aa9d27c9f7884d92f436d7d1fdec343a46b434d1b8e0c9b446112c2d3c5210ef95c816f5e4d832401782738e0fb74437508d8885dbf216820325248b309277881842964860b9ae12aae95ae323b9674bb38e6f2546e3987d8207bb17d32be6a974fd87069c525e96a2aca0e74373c604b87348e1d57b6fffb9a1396845746f9a3d0458b7217762889d7a4aa722a41db5a90bb3c5219833713f1758e85370e5dc91193ff7efd6ba9460887cbea157529e9ff04b200e8f6eea87436f28baa6cad6e2f1330d9cf7f7dc52eae64c643d3d65b3b08819d0895a742b0f388abeae182139c6dd8982b6cf3868e9126ba9c323a6dd57e78304cc3a57ebfcc399611af1456cc064308b634eeb9c3454aadee9b113021bb651ac4ca11e57b1d9b2708ec0fd62c1c6d14c24798a9a6e321c8410acef543cf6a29089ac90465db59a695fecb67a926df1a9027e47427e9ab0fa921373c9d3144c886f4c29e6b46e20ef61f8fda058eb72f99ccb57969555998a4b93a4206879219cfcde27d15b0ca64dc71892ebd8b01dbaf53ee6678d28846c0ff41ae23dbc498713b27fbb043c546551b61009d5f02c7c72bb93ec0981505e9e1b00881a3b1366c3b0b7abd6472817d9a96b2dbdfa07f3567deaaf7649514b92da134a2a6d4fc510c4cb2ca3c9e0abbea24b5ac369111b6ebbf40f0977cbb99a7a13dae7e4fc501bc31bc715ab1c9475f23b592a09eb3068c6425af814677cd1b485be61599893f61ce3145fe67cb5c69f1334ae49c9ca0641c5f255c3e39f5277cf2803641400a895cd1936df62a462044a95b8f354a1088600a1df21626492e68a6bcc417bd45cdd8c4ab69243777007ce10e1ad1bd4c6023060ce965c0d23ac3fa1e52aa463b3510178b2c281eb9b2b396c375e6e09df4ce5ba44d91c5d820e7920646e8c1fc187321b8c085926e3881c5d78862cf325265d6905f7601ddcad699e68fb370004f03dab9721548c4537800e0f10c775c55a63544ccd9a9bedde61de66afdf835356379bd8de8ed5ab2d171792d18ec737995245774aec94c9744b471e889ab94eeffb0b57e1cb3caf670b3d0aefd4d31ab0239433d45c63e704823b945a186aaf435d95ca10cf0e47a8a776e17ee6908bc27fddfaac5aa9f33c52d3bcc82a43148a7cc52ad08281a773b196058ce6dadfe0feb62b928935d818e1a27d4bf820eb60720d6568928d65d8435ac00cccef133869b09f61612d288319e9c743495875e469e23a8116dace110f0178c676c8dd4deb7faadf56a2988a8f6662e9eee7a66f93337fef426c4a48790b9e66178e9e08c9b0a64d02fb4a5741ff71c50e8c4f5f0d11c736e6c216ca5db289dbf4d3cb6c86d2f120aba02fe967f87720adc443fd2bbe60f30b61b480ba4a9e845ac4b249bdb4b45d4a9ed9b60f44d3dc589279b7546671dbb04e5ad98e21373af50d64e2cbf49cb8406947bfff15681e56a893c26c09eb6bec260d52224025ac5d6ed889f2c3df2b5c61e86ae2c1d43134076556ff13a7eb48194c3e87163cddd3890f0889763ce69a2d0bcb5ea98b01ecf29deba814513826ff2803621bac588c60f73dbb7a21cce56441eb86b4a45890b30bf64cb9a70c2737cc4bc7b823911d5faa4bd6bfb62e2069529d4902658cc71f5eaa57224f1d73c8b6d3104859c79af77da7016264d253d542c4a4355d1a3a646c1a537042f9c473030878339c8d99d49e7fbfdba823340a6e567c32ed2e4fa824dcd549a5831c36cb5955af46e53a7d1139a770977d409d603da12ea91a942c4bf45539cd1d842e16e61387caf0df8dc8d7106a5dd1e98cebc477e71c7e3b09fda29e5325f13485a0d7cdfe363f841bf2f726a8d77607d9f47f2098eff52fb0b50025cba26df1079eff8285a352f87ba0b79c666e8480118d9785959ed7872268fa13e1680813498406f859896fe507b2c18febe8adac1e03ba3f0665b4b32bb444c3858af0db3d0ce95268239af92c757bd44765f1b61a741f1f84704de431ea1700f19048afc7ed04235e9f4c57a6f05d5082c4d8534bd198758d8451e87657efb476daf76fb9bd962f643219f94d9cc5dae2e1b416fd061ce23f86e5e61fb8f861fa5cbf0e022b6d57e4f953f72ce6004c8018fc35a4b15abfb88935dcd0ecb46d175fd9e98ad5d9393f84c0a9322505a50b86c018ce8568e5955cd98d1edcd5f8e79144a3f0573986f1c30141f66684858f83c191547f08c0452ed403d8192eb5979be2d7cc5abeb9bf2d4ac9d1fa72b4da28ecfccacd9e345661fbf57222f52e1e321ed2daeb1bc8ccd093d4fc0534feb099a8616b09732c6067d00878da1edb6b47d4c3b970360a64a2c3239bb5a718a2a0e752b397ffab36a967925e73649f7c22ae0af258fb255c5243d6e33a739d4de83a65ab933bbdbe608c4ef5929861b1baebc78b5f33b411e610b2efa41359d643c05ba195345ac3ccd2dcf543e98f81ff08ebd338ddc515d0a445906b8fa828187d28609f747fbd71c06345c74d329b9d8cb4ec77d1931980142d4a87fe16d1f9a3bf3c5f7a1e9649cf25054c8885e7f54b431bc6fdac7212e6ae2b9e8ca1911ac54f0246d37c642012b966c34bce2b1290086cbdc4a8172a59512501c09f5d04ec7037fa0bdd62d9b16715d65fbc71f7ad0b13b0d1260f574189be49436f8be01babbe9f62f2d53b0b9dd29e938824b1ce3e0232c771629ffbfc0b7ff0c7a2e15faec82890defa69d273e89bdb62bb00a1eee1a31a854e9991d333160fdafdf0b2cf9899de90c423d9763fed5e54f5560b73f9b29b85371e458401c712844a5f5709cb459e4a29d6a94c67246798e4d71efd688af7ac7e6eb5ff42711820e573a5235ff258524563b4d63fb77c714860c8450574c2c30ef9d967639327cff763f0d88684ed6f276b788a853a3c64f1c9696d6cd27ede50a0430cc1db276b779c1c384928b93d3368090657140086fe5018c77a7f9eb865b8173faf771fcbd7274844c9c76d8d315cf73a3dd96ee7ff26fe774611333b622382e39c2b7b5b3342006b807c967672d8e4605694322af0c0941c02f81654c5e68d02045714231be65322ad1b030c9036a3c4152a25885385c92bf986d25ffc3523b47e5b50b59ba80d7cac8fe770f74a9f040638341e1d1cc38dbaa452ab615808c57b64dc1eeeadb7667d7ceefbfd1716ce5e10928ddc1f23107a014ff2fced0a34f21e4d0a49cc29d29558363e45d5f11462b7008453938ea77c5b27b4b4993a9810a344ba5972d673e8412271238b48cefa0c04d98ae33b7c37ca390f45482e583e989412b8b2250b02a12d429b237d4850ab6aa95a7087ff7116fddf0dd7ad9971d6cc28af7b788966eeef4c2a262b5d06eca9ab6963ec24bc9b5a870d457a41b22bf040e1a2e62ad6c03fc9852148883014b163507e851c328e19189969770ffee335d345c61f9652d6748a84d8aff3d540154f35bbfebfd071c31a26e997c8c5d5c9729d40060115f5643539bdac498ace07d2bd38a3112d8db5e6d838c44d5d4997b00e38c8822d1da737d67cf5db641efd00c0bcebc9a934ee419be913123e4ee8457f2bcdfb391ad04a5ccf50e2c0dd81081aebbb1b75bfed84c7e7b9342a62920e85065327315afbebd88e0f7a756ef84a0054e6c03673d6699f791f4a861c804f38e1ecf6b1c61452e5ee84958ca63178e9c7bf8d95fa5d9ba15112cfb968dc502d0f93d7e1c9794342b2addd40ee58049967b08dfe39b1fe45f39d9ef02ebca11f5a4c62b9a9fa81e285d00f8bfe90e20a4b1042fd459e8079c83e0a63678028ff6cb6de44fbbb5c80927fce240f7a34236e9d8a15f19eda429c084f6ae51bfc668df0b8774dfef4672e13c5a234bdc8a98bb74c125930d668bca13864f6294b14bda4338dc3f428cfbca92ad19f7498709244cb8a43726d2e637f0a32884218e713df98e4bc417e884fbd384c53d73bdb3847b7821b7acc8f8073cf4e21831ca0185857ab6d20e4cf56fbcf6c6e80af1b58941dcb94066d43d1538aef518dd6e7c7cb643d257fc380a6376d6b28aa5c6e6bf2670801c9013fe01376a3d9a08b4513aa44e5cc389371a2658586c9fd2ff3bba71033097e2ddc7d5abe809598b1876feb98df10bae5899ec2979b050837844ad6743ce2a94fca10ee1ea8101149a42f4612e41a9839b3e7109ea5ce00eaa9875c27f542cac9242e2be1a4e02819afabe80478f53dc9007df90f3c1480756042b2ad53d1c50c49e17fd5f192759f7b8fb68e0c4212c607a144d14d165979b9a9d9d6b1a6ec8d9246cc981e1762ba5e803897a1fecdf745ce57444a57c777c4e5d3b00aa7c678681008730e05d6648bd1396dbce650b47a2bca0e9d55f43045533985e55154091d93a44909041e9ed7d3eab12b72dbecda49bcc799ec524e83d39174a91b770bbca3c865bc436e19882c672b81d84c25d090d2e44424d1cb67003f2004d340f08b3ae69ff818c8723656d2e87b2ef556bbebf7d02d78dfa9166e20121ca58a4a5e98e948a42b4441197141884a51458f3e4ea66ab4d9990b1163bcec1d31b6498ac6a6c9f7722e3dea3d5f4df16e860d7bc20b7ccffcf4b1716039d63e3af383bcae0cf93de8b59fdfacb56c475e53b78219f0fbc492848fea8bc2a3d3aad28c9e35bba848dd4f58d670781ed27d036d200204e097884b9618fc1a4e9930d910834e0dc23956443e05b59e5afe099c3da68be5aab7cbde7ff0332d5bb6fdbcb9611b543ef4b69108fdf986c759e98a13b5c6ce85e88d9c9f2", 0x1000) 7.155410914s ago: executing program 1 (id=1098): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x3, 0x7, 0x5, @generic=0x2}) 7.067376982s ago: executing program 0 (id=1099): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x4104, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5bd98cf1b3aa3a62a7ee74e494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f07f00bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be17", 0xaf}, {&(0x7f0000000180)="316f825a3d29f96a2093a917017b4cd300000000bee7", 0x16}], 0x2}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2639084f4dec0", 0x30}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}], 0x3}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6.792172307s ago: executing program 1 (id=1100): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) setresuid(0x0, 0xee00, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 6.650864899s ago: executing program 0 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) 6.515142404s ago: executing program 2 (id=1102): clock_gettime(0x95963b15852706c7, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x11, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0xa, 0x1, 0x6, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x79}}, @generic={0xfc, 0x9, 0x6, 0x7f64, 0x2}, @map_fd, @exit], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x71, &(0x7f0000000140)=""/113, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x4, 0x4}, {0x5, 0x3, 0x3, 0x9}, {0x0, 0x1, 0xa, 0x4}, {0x4, 0x5, 0x3, 0xb}, {0x0, 0x1, 0x7, 0x9}, {0x3, 0x4, 0xa, 0xc}, {0x3, 0x5, 0x10, 0x6}, {0x2, 0x3, 0xa, 0x1}, {0x1, 0x2, 0xd, 0x2}], 0x10, 0x1c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000008a000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f0000000740)='syz1\x00', 0x1ff) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x6}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0xa05, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.51157762s ago: executing program 3 (id=1103): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000083d000/0x3000)=nil, 0x3000, 0xcf72427647ba2179, 0x4000010, r2, 0x80000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$set_reqkey_keyring(0xe, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) inotify_init1(0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) shutdown(0xffffffffffffffff, 0x1) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0xffffffffffffffff) 6.494397361s ago: executing program 0 (id=1104): r0 = socket$isdn(0x22, 0x2, 0x2) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000000c0)={r6, 0x5, 0x10, 0x1fbc, 0x8, 0x31a6, 0x9}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mq_timedreceive(r5, &(0x7f0000000200)=""/71, 0x47, 0x1, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r7}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x38b}]]}, 0x30}}, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640fbe01cfcfe21d4501c744240000000000c74424021c320000c744240600000000360fba64255a2f0fc76e0466ba6100ecef66bafc0c66b8004066ef66b8296c", 0xb5}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6.063253895s ago: executing program 4 (id=1105): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, 0x0, 0x0) 5.832647122s ago: executing program 1 (id=1106): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="7c73c1e117c291cb6cef4163e906963af9a19a5183aa91163ef7aa", 0x1b}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080), 0xfffffe13) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000040000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r8}, &(0x7f0000000280), &(0x7f0000000680)}, 0x20) splice(r4, 0x0, r7, 0x0, 0x1e8640, 0xf0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) 5.246861268s ago: executing program 3 (id=1107): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x1, &(0x7f0000000100)=""/38) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b30080c13a4abe"], 0x0}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 4.393120656s ago: executing program 0 (id=1108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) keyctl$set_timeout(0xf, r1, 0xfffffffffffffbff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000500)={0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x65) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x15, 0x5c}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'rmd320\x00'}}, &(0x7f0000000240)="4a4b1928a3b20c123e4ba2e8f80c51b4e4d54d5f63", &(0x7f0000000380)=""/92) 4.389375522s ago: executing program 1 (id=1109): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timerfd_gettime(r2, 0x0) fcntl$addseals(r1, 0x409, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x45de}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.306401148s ago: executing program 4 (id=1110): creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) userfaultfd(0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 2.848395907s ago: executing program 2 (id=1111): openat(0xffffffffffffff9c, 0x0, 0x183442, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1d, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x53}]}}, @TCA_STAB={0x24}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@getstats={0x1c, 0x1e, 0x401, 0x0, 0x0, {0xa}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000c817000000000000000000b7832a83b5ecf866b62bfa10ee9007"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, 0x0, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@dev, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.847705974s ago: executing program 3 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000002900000034000000000000000000000050"], 0x98}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x30}}], 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) read(r1, 0x0, 0x0) 2.658385931s ago: executing program 4 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x8a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031c2, 0xf0) pwrite64(r0, &(0x7f0000000240)="a9", 0x1, 0x400001002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xfea7) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), r1, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 2.331428887s ago: executing program 4 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) 2.301242864s ago: executing program 3 (id=1115): mount$tmpfs(0x0, 0x0, 0x0, 0x30820, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus/file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590, @ANYRESOCT], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000040), 0x0, 0x4) set_mempolicy(0x8000, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25DELFWD(r4, 0x89eb, 0x0) 2.0814876s ago: executing program 4 (id=1116): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) setresuid(0x0, 0xee00, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1.173118059s ago: executing program 3 (id=1117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000080)={[{}]}) 1.094432563s ago: executing program 4 (id=1118): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x2c, 0xf4, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002c001ae500e90000000000e9b85d8c240014003700fe880000000000000000000000000001080018"], 0x2c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002c001ae500e90000000000e9b85d8c240014003700fe880000000000000000000000000001080018"], 0x2c}], 0x1}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x22202, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x248cb305144e5994, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x248cb305144e5994, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1.048325086s ago: executing program 1 (id=1119): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f015, 0x105}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getrlimit(0x8, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x4f3, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x1ff, 0xf, {"e1af7c8c426b3615cbf8869465c0b386"}, 0x8000000000000000, 0xfffffffffffffffe, 0x6}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_START_POLL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xc54f38e74727b1d7}]}, 0x24}}, 0x0) 1.738478ms ago: executing program 1 (id=1120): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, 0x0, 0x0) 0s ago: executing program 0 (id=1121): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4e24, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xfc, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): cess beyond end of device [ 182.236124][ T7145] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 182.248999][ T7145] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 182.258854][ T7145] syz.0.340: attempt to access beyond end of device [ 182.258854][ T7145] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 182.272314][ T7145] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 182.283049][ T7145] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 182.292605][ T7145] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 182.302202][ T7145] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 182.311005][ T7145] block nbd0: shutting down sockets [ 182.403800][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 182.412989][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 185.435768][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 185.595480][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 185.620722][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.646139][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.665866][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.685469][ T5871] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 185.695032][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.723485][ T5871] usb 5-1: config 0 descriptor?? [ 186.729648][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 186.736124][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 186.742215][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 186.748568][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.763308][ T7179] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 187.713647][ T7202] FAULT_INJECTION: forcing a failure. [ 187.713647][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 187.726772][ T7202] CPU: 1 UID: 0 PID: 7202 Comm: syz.1.351 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 187.737380][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.747461][ T7202] Call Trace: [ 187.750734][ T7202] [ 187.753658][ T7202] dump_stack_lvl+0x241/0x360 [ 187.758346][ T7202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.763554][ T7202] ? __pfx__printk+0x10/0x10 [ 187.768148][ T7202] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 187.774125][ T7202] ? __pfx___might_resched+0x10/0x10 [ 187.779426][ T7202] should_fail_ex+0x3b0/0x4e0 [ 187.784112][ T7202] should_failslab+0xac/0x100 [ 187.788793][ T7202] kmem_cache_alloc_node_noprof+0x77/0x380 [ 187.794593][ T7202] ? __alloc_skb+0x1c3/0x440 [ 187.799182][ T7202] __alloc_skb+0x1c3/0x440 [ 187.803596][ T7202] ? __pfx___alloc_skb+0x10/0x10 [ 187.808536][ T7202] ? __rcu_read_unlock+0xa1/0x110 [ 187.813578][ T7202] ? netlink_autobind+0xd6/0x2f0 [ 187.818523][ T7202] ? netlink_autobind+0x2b0/0x2f0 [ 187.823565][ T7202] netlink_sendmsg+0x638/0xcb0 [ 187.828336][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.833622][ T7202] ? ____sys_sendmsg+0x406/0x7e0 [ 187.838563][ T7202] ? __sock_sendmsg+0x20/0x270 [ 187.843333][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.848617][ T7202] __sock_sendmsg+0x221/0x270 [ 187.853324][ T7202] ____sys_sendmsg+0x52a/0x7e0 [ 187.858097][ T7202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.863379][ T7202] ? __fget_files+0x2a/0x410 [ 187.867970][ T7202] ? __fget_files+0x2a/0x410 [ 187.872564][ T7202] __sys_sendmsg+0x269/0x350 [ 187.877198][ T7202] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.882343][ T7202] do_syscall_64+0xf3/0x230 [ 187.886857][ T7202] ? clear_bhb_loop+0x35/0x90 [ 187.891588][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.897481][ T7202] RIP: 0033:0x7f19e7b7ff19 [ 187.901898][ T7202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.921504][ T7202] RSP: 002b:00007f19e8a27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.929948][ T7202] RAX: ffffffffffffffda RBX: 00007f19e7d46160 RCX: 00007f19e7b7ff19 [ 187.937932][ T7202] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 187.945943][ T7202] RBP: 00007f19e8a270a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.953914][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.961876][ T7202] R13: 0000000000000000 R14: 00007f19e7d46160 R15: 00007ffe8318d728 [ 187.969860][ T7202] [ 188.517956][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 188.526267][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.597107][ T7207] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.353' sets config #0 [ 189.274199][ T5871] usb 5-1: USB disconnect, device number 6 [ 190.945468][ T7216] delete_channel: no stack [ 191.255875][ T7211] delete_channel: no stack [ 193.465789][ T7246] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.366' sets config #0 [ 193.728207][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 194.265494][ T7251] bio_check_eod: 3 callbacks suppressed [ 194.265559][ T7251] syz.2.359: attempt to access beyond end of device [ 194.265559][ T7251] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 194.295523][ T7251] syz.2.359: attempt to access beyond end of device [ 194.295523][ T7251] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 194.313950][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 194.332519][ T7251] syz.2.359: attempt to access beyond end of device [ 194.332519][ T7251] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 194.350063][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 194.395472][ T7251] syz.2.359: attempt to access beyond end of device [ 194.395472][ T7251] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 194.414693][ T7251] syz.2.359: attempt to access beyond end of device [ 194.414693][ T7251] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 194.432457][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 194.450420][ T7251] syz.2.359: attempt to access beyond end of device [ 194.450420][ T7251] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 194.481379][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 194.680131][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.691492][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.702231][ T7251] syz.2.359: attempt to access beyond end of device [ 194.702231][ T7251] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 194.720895][ T7251] syz.2.359: attempt to access beyond end of device [ 194.720895][ T7251] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 195.299465][ T8] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 195.741187][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.751828][ T8] usb 4-1: config 0 descriptor?? [ 195.777627][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 195.818730][ T7251] syz.2.359: attempt to access beyond end of device [ 195.818730][ T7251] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 195.976741][ T8] usb 4-1: can't set config #0, error -71 [ 196.000006][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 196.007092][ T8] usb 4-1: USB disconnect, device number 4 [ 196.016002][ T7251] syz.2.359: attempt to access beyond end of device [ 196.016002][ T7251] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 196.047296][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 196.260982][ T7251] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 196.330063][ T7265] delete_channel: no stack [ 196.951916][ T7258] delete_channel: no stack [ 197.025480][ T7251] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 197.105582][ T7251] block nbd2: shutting down sockets [ 197.546033][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.545554][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 199.022029][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.032272][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 199.045566][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 199.055328][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.133175][ T7285] overlayfs: workdir and upperdir must be separate subtrees [ 200.237524][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 200.246652][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 200.254742][ T9] usb 1-1: Product: syz [ 200.259388][ T9] usb 1-1: Manufacturer: syz [ 200.264012][ T9] usb 1-1: SerialNumber: syz [ 200.286742][ T9] usb 1-1: config 0 descriptor?? [ 200.411263][ T9] usb 1-1: can't set config #0, error -71 [ 200.430961][ T9] usb 1-1: USB disconnect, device number 17 [ 200.695879][ T5871] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 200.875910][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 200.895203][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.011854][ T5871] usb 5-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 201.090743][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.168892][ T5871] usb 5-1: Product: syz [ 201.207877][ T5871] usb 5-1: Manufacturer: syz [ 201.258177][ T5871] usb 5-1: SerialNumber: syz [ 201.310761][ T5871] usb 5-1: config 0 descriptor?? [ 201.397586][ T5871] usb 5-1: bad CDC descriptors [ 201.599250][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.638848][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.679132][ T7318] input: syz1 as /devices/virtual/input/input8 [ 201.730563][ T9] usb 5-1: USB disconnect, device number 7 [ 201.819494][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 201.819510][ T29] audit: type=1326 audit(1733990598.031:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7312 comm="syz.0.385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56db77ff19 code=0x0 [ 201.947352][ T7323] FAULT_INJECTION: forcing a failure. [ 201.947352][ T7323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.996123][ T7323] CPU: 0 UID: 0 PID: 7323 Comm: syz.2.387 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 202.006743][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.016813][ T7323] Call Trace: [ 202.020100][ T7323] [ 202.023042][ T7323] dump_stack_lvl+0x241/0x360 [ 202.027751][ T7323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.032977][ T7323] ? __pfx__printk+0x10/0x10 [ 202.037589][ T7323] ? __pfx_lock_release+0x10/0x10 [ 202.042631][ T7323] should_fail_ex+0x3b0/0x4e0 [ 202.047331][ T7323] _copy_from_user+0x2f/0xc0 [ 202.051978][ T7323] __sys_bpf+0x1a4/0x810 [ 202.056233][ T7323] ? __pfx___sys_bpf+0x10/0x10 [ 202.061016][ T7323] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.067013][ T7323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.073354][ T7323] ? do_syscall_64+0x100/0x230 [ 202.078141][ T7323] __x64_sys_bpf+0x7c/0x90 [ 202.082918][ T7323] do_syscall_64+0xf3/0x230 [ 202.087441][ T7323] ? clear_bhb_loop+0x35/0x90 [ 202.092139][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.098047][ T7323] RIP: 0033:0x7f904717ff19 [ 202.102478][ T7323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.122094][ T7323] RSP: 002b:00007f9047f92058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.130522][ T7323] RAX: ffffffffffffffda RBX: 00007f9047345fa0 RCX: 00007f904717ff19 [ 202.138510][ T7323] RDX: 0000000000000050 RSI: 0000000020000200 RDI: 0000000000000000 [ 202.146494][ T7323] RBP: 00007f9047f920a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.154476][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.162449][ T7323] R13: 0000000000000000 R14: 00007f9047345fa0 R15: 00007ffc7ea6ede8 [ 202.170436][ T7323] [ 202.706868][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 204.387287][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 204.993705][ T7345] erofs (device erofs): cannot find valid erofs superblock [ 206.324186][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 206.475465][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 206.480870][ T7365] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 206.543976][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.554297][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 206.565889][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 206.576875][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 206.587253][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.024478][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 207.816808][ T25] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 207.825986][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 207.834067][ T25] usb 4-1: Product: syz [ 207.838367][ T25] usb 4-1: Manufacturer: syz [ 207.842972][ T25] usb 4-1: SerialNumber: syz [ 207.895274][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 208.839533][ T25] usb 4-1: config 0 descriptor?? [ 209.024603][ T25] usb 4-1: can't set config #0, error -71 [ 209.057178][ T25] usb 4-1: USB disconnect, device number 5 [ 210.942361][ T7401] evm: overlay not supported [ 210.956877][ T7401] FAULT_INJECTION: forcing a failure. [ 210.956877][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 210.970379][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.3.409 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 210.981007][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.991080][ T7401] Call Trace: [ 210.994373][ T7401] [ 210.997325][ T7401] dump_stack_lvl+0x241/0x360 [ 211.002041][ T7401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.007262][ T7401] ? __pfx__printk+0x10/0x10 [ 211.011877][ T7401] ? fs_reclaim_acquire+0x93/0x130 [ 211.017017][ T7401] ? __pfx___might_resched+0x10/0x10 [ 211.022327][ T7401] should_fail_ex+0x3b0/0x4e0 [ 211.027019][ T7401] should_failslab+0xac/0x100 [ 211.031729][ T7401] __kmalloc_noprof+0xdd/0x4c0 [ 211.036511][ T7401] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 211.042425][ T7401] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 211.048176][ T7401] tomoyo_realpath_from_path+0xcf/0x5e0 [ 211.053754][ T7401] tomoyo_check_open_permission+0x258/0x4f0 [ 211.059664][ T7401] ? tomoyo_check_open_permission+0x207/0x4f0 [ 211.065748][ T7401] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 211.072199][ T7401] ? mnt_get_write_access+0x68/0x2b0 [ 211.077488][ T7401] ? mnt_get_write_access+0x68/0x2b0 [ 211.082788][ T7401] ? tomoyo_file_open+0x165/0x220 [ 211.087816][ T7401] ? mnt_get_write_access+0x226/0x2b0 [ 211.093186][ T7401] security_file_open+0xac/0x250 [ 211.098122][ T7401] do_dentry_open+0x328/0x1b70 [ 211.102884][ T7401] ? backing_file_open+0x3e/0xa0 [ 211.107829][ T7401] vfs_open+0x3e/0x330 [ 211.111898][ T7401] backing_file_open+0x61/0xa0 [ 211.116659][ T7401] ovl_open_realfile+0x1ee/0x350 [ 211.121596][ T7401] ovl_open+0x1f3/0x310 [ 211.125752][ T7401] ? __pfx_ovl_open+0x10/0x10 [ 211.130429][ T7401] ? mnt_get_write_access+0x226/0x2b0 [ 211.135795][ T7401] ? __pfx_ovl_open+0x10/0x10 [ 211.140468][ T7401] do_dentry_open+0xbe1/0x1b70 [ 211.145242][ T7401] vfs_open+0x3e/0x330 [ 211.149313][ T7401] path_openat+0x2c84/0x3590 [ 211.153931][ T7401] ? __pfx_path_openat+0x10/0x10 [ 211.158905][ T7401] do_filp_open+0x27f/0x4e0 [ 211.163404][ T7401] ? __pfx_do_filp_open+0x10/0x10 [ 211.168430][ T7401] ? do_raw_spin_lock+0x14f/0x370 [ 211.173479][ T7401] do_sys_openat2+0x13e/0x1d0 [ 211.178162][ T7401] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.183354][ T7401] ? __fget_files+0x2a/0x410 [ 211.187945][ T7401] ? __fget_files+0x2a/0x410 [ 211.192557][ T7401] __x64_sys_open+0x225/0x270 [ 211.197241][ T7401] ? __pfx___x64_sys_open+0x10/0x10 [ 211.202436][ T7401] ? do_syscall_64+0x100/0x230 [ 211.207199][ T7401] ? do_syscall_64+0xb6/0x230 [ 211.211873][ T7401] do_syscall_64+0xf3/0x230 [ 211.216377][ T7401] ? clear_bhb_loop+0x35/0x90 [ 211.221056][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.226953][ T7401] RIP: 0033:0x7f0079d7ff19 [ 211.231371][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.250988][ T7401] RSP: 002b:00007f007ac1c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 211.259399][ T7401] RAX: ffffffffffffffda RBX: 00007f0079f45fa0 RCX: 00007f0079d7ff19 [ 211.267371][ T7401] RDX: 0000000000000000 RSI: 0000000400141042 RDI: 0000000020000080 [ 211.275335][ T7401] RBP: 00007f007ac1c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.283305][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.291268][ T7401] R13: 0000000000000000 R14: 00007f0079f45fa0 R15: 00007ffe0b713b08 [ 211.299268][ T7401] [ 211.474537][ T7401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.148951][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 214.064545][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 214.289201][ T7437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.419'. [ 215.119312][ T7444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.423'. [ 216.198672][ T7455] Invalid source name [ 224.374520][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 226.055289][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 226.568574][ T7500] block nbd2: shutting down sockets [ 226.654737][ T7512] FAULT_INJECTION: forcing a failure. [ 226.654737][ T7512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.668507][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.1.438 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 226.679121][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.689192][ T7512] Call Trace: [ 226.692479][ T7512] [ 226.695425][ T7512] dump_stack_lvl+0x241/0x360 [ 226.700135][ T7512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.705347][ T7512] ? __pfx__printk+0x10/0x10 [ 226.709960][ T7512] ? snprintf+0xda/0x120 [ 226.714229][ T7512] should_fail_ex+0x3b0/0x4e0 [ 226.718936][ T7512] _copy_to_user+0x31/0xb0 [ 226.723375][ T7512] simple_read_from_buffer+0xca/0x150 [ 226.728789][ T7512] proc_fail_nth_read+0x1e9/0x250 [ 226.733840][ T7512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.739411][ T7512] ? rw_verify_area+0x55e/0x6f0 [ 226.744275][ T7512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.749839][ T7512] vfs_read+0x1fc/0xb70 [ 226.754013][ T7512] ? __pfx___mutex_lock+0x10/0x10 [ 226.759057][ T7512] ? __pfx_vfs_read+0x10/0x10 [ 226.763755][ T7512] ? __fget_files+0x2a/0x410 [ 226.768366][ T7512] ? __fget_files+0x395/0x410 [ 226.773055][ T7512] ? __fget_files+0x2a/0x410 [ 226.777666][ T7512] ksys_read+0x18f/0x2b0 [ 226.781926][ T7512] ? __pfx_ksys_read+0x10/0x10 [ 226.786707][ T7512] ? do_syscall_64+0x100/0x230 [ 226.791497][ T7512] ? do_syscall_64+0xb6/0x230 [ 226.796190][ T7512] do_syscall_64+0xf3/0x230 [ 226.800709][ T7512] ? clear_bhb_loop+0x35/0x90 [ 226.805410][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.811320][ T7512] RIP: 0033:0x7f19e7b7e92c [ 226.815757][ T7512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.835379][ T7512] RSP: 002b:00007f19e8a69050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.843808][ T7512] RAX: ffffffffffffffda RBX: 00007f19e7d45fa0 RCX: 00007f19e7b7e92c [ 226.851790][ T7512] RDX: 000000000000000f RSI: 00007f19e8a690b0 RDI: 0000000000000009 [ 226.859776][ T7512] RBP: 00007f19e8a690a0 R08: 0000000000000000 R09: 0000000000000000 [ 226.867760][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.875749][ T7512] R13: 0000000000000000 R14: 00007f19e7d45fa0 R15: 00007ffe8318d728 [ 226.883755][ T7512] [ 229.749671][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 230.678177][ T9] usb 5-1: device descriptor read/all, error -71 [ 230.685882][ T7541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.444'. [ 231.665878][ T51] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 231.764040][ T7549] FAULT_INJECTION: forcing a failure. [ 231.764040][ T7549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.805721][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.4.447 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 231.816335][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.826383][ T7549] Call Trace: [ 231.829666][ T7549] [ 231.832599][ T7549] dump_stack_lvl+0x241/0x360 [ 231.837290][ T7549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.842483][ T7549] ? __pfx__printk+0x10/0x10 [ 231.847083][ T7549] ? __pfx_lock_release+0x10/0x10 [ 231.852114][ T7549] ? __virt_addr_valid+0x4e1/0x530 [ 231.857224][ T7549] should_fail_ex+0x3b0/0x4e0 [ 231.861909][ T7549] _copy_from_user+0x2f/0xc0 [ 231.866593][ T7549] memdup_user+0x64/0xc0 [ 231.870829][ T7549] strndup_user+0x68/0xc0 [ 231.875151][ T7549] __se_sys_mount+0xe2/0x3c0 [ 231.879734][ T7549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.885710][ T7549] ? __pfx___se_sys_mount+0x10/0x10 [ 231.890924][ T7549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.897250][ T7549] ? __x64_sys_mount+0x20/0xc0 [ 231.902013][ T7549] do_syscall_64+0xf3/0x230 [ 231.906519][ T7549] ? clear_bhb_loop+0x35/0x90 [ 231.911197][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.917086][ T7549] RIP: 0033:0x7fcca437ff19 [ 231.921491][ T7549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.941128][ T7549] RSP: 002b:00007fcca50a3058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.949591][ T7549] RAX: ffffffffffffffda RBX: 00007fcca4545fa0 RCX: 00007fcca437ff19 [ 231.957557][ T7549] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 00000000200002c0 [ 231.965523][ T7549] RBP: 00007fcca50a30a0 R08: 0000000000000000 R09: 0000000000000000 [ 231.973486][ T7549] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 231.981450][ T7549] R13: 0000000000000000 R14: 00007fcca4545fa0 R15: 00007ffe9e5cdbd8 [ 231.989427][ T7549] [ 232.294578][ T51] usb 1-1: device descriptor read/64, error -71 [ 232.625784][ T51] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 233.094746][ T29] audit: type=1800 audit(1733990629.491:28): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.449" name="bus" dev="overlay" ino=437 res=0 errno=0 [ 234.439759][ T7564] netlink: 'syz.2.452': attribute type 3 has an invalid length. [ 234.986955][ T7582] netlink: 112 bytes leftover after parsing attributes in process `syz.4.458'. [ 235.904450][ T7588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.459'. [ 236.389729][ T7593] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 237.867641][ T7607] bio_check_eod: 2 callbacks suppressed [ 237.867660][ T7607] syz.2.462: attempt to access beyond end of device [ 237.867660][ T7607] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 237.924045][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 237.956119][ T7607] FAT-fs (nbd2): unable to read boot sector [ 237.994783][ T7580] bridge_slave_1: left allmulticast mode [ 238.351987][ T7580] bridge_slave_1: left promiscuous mode [ 238.387217][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.456278][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 238.488911][ T29] audit: type=1326 audit(1733990634.901:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca437ff19 code=0x7ffc0000 [ 238.565188][ T29] audit: type=1326 audit(1733990634.961:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcca437ff19 code=0x7ffc0000 [ 238.612882][ T29] audit: type=1326 audit(1733990634.961:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca437ff19 code=0x7ffc0000 [ 238.619030][ T7580] bridge_slave_0: left allmulticast mode [ 238.634566][ T29] audit: type=1326 audit(1733990634.961:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca437ff19 code=0x7ffc0000 [ 238.692062][ T7580] bridge_slave_0: left promiscuous mode [ 238.706101][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.260796][ T7631] FAULT_INJECTION: forcing a failure. [ 239.260796][ T7631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.297318][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.328540][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.4.470 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 239.339159][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.349215][ T7631] Call Trace: [ 239.352485][ T7631] [ 239.355434][ T7631] dump_stack_lvl+0x241/0x360 [ 239.360116][ T7631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.365313][ T7631] ? __pfx__printk+0x10/0x10 [ 239.369899][ T7631] ? __pfx_lock_release+0x10/0x10 [ 239.374925][ T7631] should_fail_ex+0x3b0/0x4e0 [ 239.379606][ T7631] _copy_from_user+0x2f/0xc0 [ 239.384200][ T7631] copy_msghdr_from_user+0xae/0x680 [ 239.389401][ T7631] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 239.395208][ T7631] ? __fget_files+0x2a/0x410 [ 239.399803][ T7631] ? __fget_files+0x2a/0x410 [ 239.404391][ T7631] __sys_sendmmsg+0x32b/0x720 [ 239.409071][ T7631] ? __pfx___sys_sendmmsg+0x10/0x10 [ 239.414281][ T7631] ? __pfx_lock_release+0x10/0x10 [ 239.419313][ T7631] ? kstrtouint_from_user+0x128/0x190 [ 239.424728][ T7631] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 239.430631][ T7631] ? ksys_write+0x22a/0x2b0 [ 239.435137][ T7631] ? __pfx_lock_release+0x10/0x10 [ 239.440169][ T7631] ? vfs_write+0x730/0xd30 [ 239.444596][ T7631] ? __mutex_unlock_slowpath+0x21e/0x790 [ 239.450248][ T7631] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.456258][ T7631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.462581][ T7631] ? do_syscall_64+0x100/0x230 [ 239.467348][ T7631] __x64_sys_sendmmsg+0xa0/0xb0 [ 239.472201][ T7631] do_syscall_64+0xf3/0x230 [ 239.476703][ T7631] ? clear_bhb_loop+0x35/0x90 [ 239.481381][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.487297][ T7631] RIP: 0033:0x7fcca437ff19 [ 239.491715][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.511324][ T7631] RSP: 002b:00007fcca21d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.519742][ T7631] RAX: ffffffffffffffda RBX: 00007fcca4546160 RCX: 00007fcca437ff19 [ 239.527720][ T7631] RDX: 0000000000000002 RSI: 0000000020001f00 RDI: 0000000000000008 [ 239.535689][ T7631] RBP: 00007fcca21d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.543654][ T7631] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 239.551629][ T7631] R13: 0000000000000001 R14: 00007fcca4546160 R15: 00007ffe9e5cdbd8 [ 239.559690][ T7631] [ 240.073861][ T7640] netlink: 48 bytes leftover after parsing attributes in process `syz.1.471'. [ 242.154899][ T7654] netlink: 44 bytes leftover after parsing attributes in process `syz.2.476'. [ 242.908477][ T7660] delete_channel: no stack [ 243.013095][ T7665] netlink: 'syz.1.479': attribute type 3 has an invalid length. [ 243.380707][ T7668] netlink: 'syz.4.480': attribute type 3 has an invalid length. [ 243.538134][ T7676] ======================================================= [ 243.538134][ T7676] WARNING: The mand mount option has been deprecated and [ 243.538134][ T7676] and is ignored by this kernel. Remove the mand [ 243.538134][ T7676] option from the mount to silence this warning. [ 243.538134][ T7676] ======================================================= [ 243.573912][ T7656] delete_channel: no stack [ 244.419909][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 244.826730][ T29] audit: type=1800 audit(1733990641.241:33): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.487" name="/" dev="9p" ino=2 res=0 errno=0 [ 246.916675][ T7718] netlink: 'syz.3.493': attribute type 3 has an invalid length. [ 246.986229][ T7716] netlink: 44 bytes leftover after parsing attributes in process `syz.1.492'. [ 247.835519][ T7733] delete_channel: no stack [ 248.118255][ T7729] delete_channel: no stack [ 251.212115][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 251.973093][ T7722] syz.4.494 (7722): drop_caches: 2 [ 253.367243][ T7784] FAULT_INJECTION: forcing a failure. [ 253.367243][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 253.679040][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.4.507 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 253.689676][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.699759][ T7784] Call Trace: [ 253.703061][ T7784] [ 253.706015][ T7784] dump_stack_lvl+0x241/0x360 [ 253.710731][ T7784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.715957][ T7784] ? __pfx__printk+0x10/0x10 [ 253.720593][ T7784] ? __kmalloc_noprof+0xb5/0x4c0 [ 253.725558][ T7784] ? __pfx___might_resched+0x10/0x10 [ 253.730872][ T7784] ? ovl_encode_real_fh+0x26c/0x410 [ 253.736091][ T7784] should_fail_ex+0x3b0/0x4e0 [ 253.740785][ T7784] should_failslab+0xac/0x100 [ 253.745487][ T7784] __kmalloc_noprof+0xdd/0x4c0 [ 253.750254][ T7784] ? ovl_lookup_index+0xc3/0x6e0 [ 253.755196][ T7784] ovl_lookup_index+0xc3/0x6e0 [ 253.759969][ T7784] ovl_lookup+0x1d6b/0x2a60 [ 253.764495][ T7784] ? __pfx_ovl_lookup+0x10/0x10 [ 253.769347][ T7784] ? __pfx_lock_acquire+0x10/0x10 [ 253.774366][ T7784] ? d_alloc+0x142/0x190 [ 253.778614][ T7784] ? do_raw_spin_unlock+0x13c/0x8b0 [ 253.783823][ T7784] ? _raw_spin_unlock+0x28/0x50 [ 253.788679][ T7784] ? d_alloc+0x142/0x190 [ 253.792928][ T7784] lookup_one_qstr_excl+0x11f/0x260 [ 253.798132][ T7784] do_renameat2+0x670/0x13f0 [ 253.802735][ T7784] ? __virt_addr_valid+0x183/0x530 [ 253.807868][ T7784] ? __pfx_do_renameat2+0x10/0x10 [ 253.812899][ T7784] ? __virt_addr_valid+0x183/0x530 [ 253.818005][ T7784] ? __virt_addr_valid+0x45f/0x530 [ 253.823112][ T7784] ? __phys_addr_symbol+0x2f/0x70 [ 253.828136][ T7784] ? strncpy_from_user+0x152/0x270 [ 253.833247][ T7784] ? getname_flags+0x1e3/0x540 [ 253.838009][ T7784] __x64_sys_rename+0x82/0x90 [ 253.842687][ T7784] do_syscall_64+0xf3/0x230 [ 253.847196][ T7784] ? clear_bhb_loop+0x35/0x90 [ 253.851876][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.857765][ T7784] RIP: 0033:0x7fcca437ff19 [ 253.862173][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.881772][ T7784] RSP: 002b:00007fcca50a3058 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 253.890185][ T7784] RAX: ffffffffffffffda RBX: 00007fcca4545fa0 RCX: 00007fcca437ff19 [ 253.898174][ T7784] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000020000180 [ 253.906139][ T7784] RBP: 00007fcca50a30a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.914102][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.922073][ T7784] R13: 0000000000000000 R14: 00007fcca4545fa0 R15: 00007ffe9e5cdbd8 [ 253.930046][ T7784] [ 254.149059][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 254.186332][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'. [ 255.785155][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 256.009655][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075523][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.149160][ T7846] syz.0.519: attempt to access beyond end of device [ 258.149160][ T7846] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 258.243841][ T7846] FAT-fs (nbd0): unable to read boot sector [ 258.380552][ T7855] 9pnet_fd: Insufficient options for proto=fd [ 260.985669][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 262.135860][ T5901] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 262.312657][ T5901] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 262.346366][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.639837][ T5901] usb 3-1: config 0 descriptor?? [ 262.806737][ T5901] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 262.852157][ T7916] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 262.930472][ T7916] netlink: 224 bytes leftover after parsing attributes in process `syz.4.535'. [ 263.004839][ T5901] gp8psk: usb in 128 operation failed. [ 263.249152][ T7924] netlink: 44 bytes leftover after parsing attributes in process `syz.1.538'. [ 263.286815][ T5901] gp8psk: usb in 146 operation failed. [ 263.292621][ T5901] gp8psk: failed to get FW version [ 263.298545][ T5901] gp8psk: FPGA Version = 130 [ 264.315449][ T7930] netlink: 168 bytes leftover after parsing attributes in process `syz.3.536'. [ 265.623050][ T5901] gp8psk: usb in 138 operation failed. [ 265.643261][ T5901] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 265.661672][ T5901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 265.802785][ T7938] netlink: 72 bytes leftover after parsing attributes in process `syz.0.540'. [ 265.818768][ T7938] netlink: 556 bytes leftover after parsing attributes in process `syz.0.540'. [ 265.884764][ T9] usb 3-1: USB disconnect, device number 8 [ 266.078463][ T7941] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 266.108840][ T5826] Bluetooth: hci4: link tx timeout [ 266.114336][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.126157][ T54] Bluetooth: hci4: link tx timeout [ 266.131296][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.186344][ T5870] IPVS: starting estimator thread 0... [ 266.395806][ T5901] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 266.396187][ T7950] IPVS: using max 21 ests per chain, 50400 per kthread [ 266.556154][ T5901] usb 2-1: device descriptor read/64, error -71 [ 266.805660][ T5901] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 267.152951][ T5901] usb 2-1: device descriptor read/64, error -71 [ 267.211992][ T7970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.551'. [ 267.272130][ T5901] usb usb2-port1: attempt power cycle [ 267.615983][ T5901] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 267.799337][ T5901] usb 2-1: device descriptor read/8, error -71 [ 268.042820][ T7975] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.252498][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 268.375152][ T5901] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 268.955510][ T5901] usb 2-1: device descriptor read/8, error -71 [ 269.065683][ T5901] usb usb2-port1: unable to enumerate USB device [ 269.283270][ T7995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.560'. [ 269.332550][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 269.347321][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.240500][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 270.264020][ T9] usb 4-1: config 0 interface 0 altsetting 224 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.295753][ T9] usb 4-1: config 0 interface 0 altsetting 224 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.318382][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 270.325024][ T9] usb 4-1: New USB device found, idVendor=5536, idProduct=0064, bcdDevice=ff.e5 [ 270.385553][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 270.395048][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.406917][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.446206][ T5819] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.467694][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.480118][ T5819] usb 3-1: Product: syz [ 270.484459][ T5819] usb 3-1: Manufacturer: syz [ 270.492900][ T5819] usb 3-1: SerialNumber: syz [ 270.492980][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.627166][ T5819] usb 3-1: config 0 descriptor?? [ 270.731304][ T5819] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.781684][ T5819] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 270.798147][ T9] usb 4-1: config 0 descriptor?? [ 271.047806][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.596013][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.616688][ T5819] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 271.623397][ T5819] em28xx 3-1:0.0: Config register raw data: 0x56 [ 272.983413][ T5819] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 273.023697][ T5819] em28xx 3-1:0.0: No AC97 audio processor [ 274.192111][ T5901] usb 3-1: USB disconnect, device number 9 [ 274.198790][ T5901] em28xx 3-1:0.0: Disconnecting em28xx [ 274.266049][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 274.276293][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 274.287013][ T9] usb 4-1: USB disconnect, device number 6 [ 275.106896][ T5901] em28xx 3-1:0.0: Freeing device [ 275.613964][ T8041] No such timeout policy "syz0" [ 276.416238][ T8030] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 276.422800][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.940368][ T8033] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 278.517395][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 278.782434][ T8079] FAULT_INJECTION: forcing a failure. [ 278.782434][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.795660][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.3.579 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 278.806266][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.816333][ T8079] Call Trace: [ 278.819628][ T8079] [ 278.822566][ T8079] dump_stack_lvl+0x241/0x360 [ 278.827279][ T8079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.832500][ T8079] ? __pfx__printk+0x10/0x10 [ 278.837125][ T8079] ? __pfx_lock_release+0x10/0x10 [ 278.842166][ T8079] should_fail_ex+0x3b0/0x4e0 [ 278.846850][ T8079] _copy_from_iter+0x1e9/0x1c20 [ 278.851698][ T8079] ? __virt_addr_valid+0x183/0x530 [ 278.856813][ T8079] ? __pfx__copy_from_iter+0x10/0x10 [ 278.862111][ T8079] ? __virt_addr_valid+0x183/0x530 [ 278.867217][ T8079] ? __virt_addr_valid+0x183/0x530 [ 278.872330][ T8079] ? __virt_addr_valid+0x45f/0x530 [ 278.877873][ T8079] ? __phys_addr_symbol+0x2f/0x70 [ 278.882889][ T8079] ? __check_object_size+0x47a/0x730 [ 278.888178][ T8079] hci_sock_sendmsg+0x4f1/0x11c0 [ 278.893113][ T8079] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 278.899916][ T8079] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 278.905282][ T8079] ? get_pid_task+0x23/0x1f0 [ 278.909897][ T8079] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 278.915260][ T8079] __sock_sendmsg+0x221/0x270 [ 278.919938][ T8079] sock_write_iter+0x2d7/0x3f0 [ 278.924805][ T8079] ? __pfx_sock_write_iter+0x10/0x10 [ 278.930099][ T8079] ? bpf_lsm_file_permission+0x9/0x10 [ 278.935567][ T8079] ? security_file_permission+0x74/0x280 [ 278.941199][ T8079] vfs_write+0xaeb/0xd30 [ 278.945443][ T8079] ? __pfx_sock_write_iter+0x10/0x10 [ 278.950723][ T8079] ? __pfx_vfs_write+0x10/0x10 [ 278.955541][ T8079] ? __fget_files+0x2a/0x410 [ 278.960166][ T8079] ? __fget_files+0x2a/0x410 [ 278.964754][ T8079] ksys_write+0x18f/0x2b0 [ 278.969079][ T8079] ? __pfx_ksys_write+0x10/0x10 [ 278.973930][ T8079] ? do_syscall_64+0x100/0x230 [ 278.978694][ T8079] ? do_syscall_64+0xb6/0x230 [ 278.983369][ T8079] do_syscall_64+0xf3/0x230 [ 278.987869][ T8079] ? clear_bhb_loop+0x35/0x90 [ 278.992561][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.998464][ T8079] RIP: 0033:0x7f0079d7ff19 [ 279.002875][ T8079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.022475][ T8079] RSP: 002b:00007f007ac1c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.030886][ T8079] RAX: ffffffffffffffda RBX: 00007f0079f45fa0 RCX: 00007f0079d7ff19 [ 279.038855][ T8079] RDX: 000000000000000d RSI: 0000000020000000 RDI: 0000000000000004 [ 279.046818][ T8079] RBP: 00007f007ac1c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 279.054778][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.062742][ T8079] R13: 0000000000000000 R14: 00007f0079f45fa0 R15: 00007ffe0b713b08 [ 279.070717][ T8079] [ 280.385509][ T8104] mkiss: ax0: crc mode is auto. [ 280.419860][ T29] audit: type=1326 audit(1733990676.831:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8109 comm="syz.4.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcca437ff19 code=0x0 [ 280.932973][ T8116] FAULT_INJECTION: forcing a failure. [ 280.932973][ T8116] name failslab, interval 1, probability 0, space 0, times 0 [ 280.978050][ T8116] CPU: 0 UID: 0 PID: 8116 Comm: syz.1.589 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 280.988721][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.998791][ T8116] Call Trace: [ 281.002082][ T8116] [ 281.005020][ T8116] dump_stack_lvl+0x241/0x360 [ 281.009742][ T8116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.014960][ T8116] ? __pfx__printk+0x10/0x10 [ 281.019606][ T8116] ? kmem_cache_alloc_noprof+0x48/0x380 [ 281.025174][ T8116] ? __pfx___might_resched+0x10/0x10 [ 281.030486][ T8116] should_fail_ex+0x3b0/0x4e0 [ 281.035197][ T8116] should_failslab+0xac/0x100 [ 281.039912][ T8116] ? vm_area_dup+0x61/0x290 [ 281.044427][ T8116] kmem_cache_alloc_noprof+0x70/0x380 [ 281.049830][ T8116] vm_area_dup+0x61/0x290 [ 281.054196][ T8116] __split_vma+0x1cb/0xc50 [ 281.058637][ T8116] ? ima_match_policy+0x111/0x2230 [ 281.063777][ T8116] ? __pfx___split_vma+0x10/0x10 [ 281.068742][ T8116] ? __pfx_validate_chain+0x10/0x10 [ 281.073961][ T8116] ? __pfx_up_write+0x10/0x10 [ 281.078660][ T8116] ? ima_get_action+0x75/0xb0 [ 281.083365][ T8116] vms_gather_munmap_vmas+0x2e6/0x1600 [ 281.088867][ T8116] ? mtree_range_walk+0x6fd/0x8e0 [ 281.093923][ T8116] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 281.099848][ T8116] ? mas_find+0x8c0/0xbb0 [ 281.104222][ T8116] __mmap_region+0x7de/0x2cd0 [ 281.108932][ T8116] ? is_bpf_text_address+0x26/0x2a0 [ 281.114166][ T8116] ? unwind_next_frame+0x18e6/0x22d0 [ 281.119478][ T8116] ? __pfx___mmap_region+0x10/0x10 [ 281.124602][ T8116] ? 0xffffffffa0000950 [ 281.128814][ T8116] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.134997][ T8116] ? kernel_text_address+0xa7/0xe0 [ 281.140174][ T8116] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 281.146447][ T8116] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 281.153077][ T8116] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 281.158994][ T8116] ? cap_mmap_addr+0x163/0x2c0 [ 281.163780][ T8116] mmap_region+0x1d0/0x2c0 [ 281.168222][ T8116] do_mmap+0x8f0/0x1000 [ 281.172402][ T8116] ? __pfx_do_mmap+0x10/0x10 [ 281.177355][ T8116] ? __pfx_down_write_killable+0x10/0x10 [ 281.183010][ T8116] ? file_init_path+0x425/0x570 [ 281.187906][ T8116] vm_mmap_pgoff+0x1dd/0x3d0 [ 281.192527][ T8116] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 281.197671][ T8116] ? hugetlb_file_setup+0x3dc/0x5c0 [ 281.202900][ T8116] ksys_mmap_pgoff+0x53e/0x720 [ 281.207692][ T8116] do_syscall_64+0xf3/0x230 [ 281.212218][ T8116] ? clear_bhb_loop+0x35/0x90 [ 281.216921][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.222844][ T8116] RIP: 0033:0x7f19e7b7ff19 [ 281.227282][ T8116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.246903][ T8116] RSP: 002b:00007f19e8a69058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 281.255347][ T8116] RAX: ffffffffffffffda RBX: 00007f19e7d45fa0 RCX: 00007f19e7b7ff19 [ 281.263355][ T8116] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000000020800000 [ 281.271339][ T8116] RBP: 00007f19e8a690a0 R08: ffffffffffffffff R09: 0000000000000000 [ 281.279325][ T8116] R10: 000000000007e832 R11: 0000000000000246 R12: 0000000000000001 [ 281.287311][ T8116] R13: 0000000000000000 R14: 00007f19e7d45fa0 R15: 00007ffe8318d728 [ 281.295337][ T8116] [ 281.298502][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.663825][ T8135] FAULT_INJECTION: forcing a failure. [ 282.663825][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.675351][ T8138] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 282.679508][ T8136] FAULT_INJECTION: forcing a failure. [ 282.679508][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 282.698471][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.1.594 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 282.709078][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.719152][ T8135] Call Trace: [ 282.722452][ T8135] [ 282.725397][ T8135] dump_stack_lvl+0x241/0x360 [ 282.730099][ T8135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.735321][ T8135] ? __pfx__printk+0x10/0x10 [ 282.739931][ T8135] ? __pfx_lock_release+0x10/0x10 [ 282.744988][ T8135] should_fail_ex+0x3b0/0x4e0 [ 282.749692][ T8135] _copy_from_user+0x2f/0xc0 [ 282.754307][ T8135] snd_seq_oss_ioctl+0x425/0x1250 [ 282.759355][ T8135] ? __pfx___might_resched+0x10/0x10 [ 282.764663][ T8135] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 282.770137][ T8135] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.776054][ T8135] ? rcu_is_watching+0x15/0xb0 [ 282.780833][ T8135] ? trace_contention_end+0x3c/0x120 [ 282.786137][ T8135] ? __mutex_lock+0x37f/0xee0 [ 282.790829][ T8135] ? smk_tskacc+0x300/0x370 [ 282.795365][ T8135] ? odev_ioctl+0x85/0xf0 [ 282.799713][ T8135] ? __pfx___mutex_lock+0x10/0x10 [ 282.804762][ T8135] ? __fget_files+0x2a/0x410 [ 282.809368][ T8135] ? __fget_files+0x2a/0x410 [ 282.813976][ T8135] odev_ioctl+0xb5/0xf0 [ 282.818154][ T8135] ? __pfx_odev_ioctl+0x10/0x10 [ 282.823026][ T8135] __se_sys_ioctl+0xf5/0x170 [ 282.827636][ T8135] do_syscall_64+0xf3/0x230 [ 282.832160][ T8135] ? clear_bhb_loop+0x35/0x90 [ 282.836857][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.842767][ T8135] RIP: 0033:0x7f19e7b7ff19 [ 282.847193][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.866817][ T8135] RSP: 002b:00007f19e8a69058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.875263][ T8135] RAX: ffffffffffffffda RBX: 00007f19e7d45fa0 RCX: 00007f19e7b7ff19 [ 282.883270][ T8135] RDX: 0000000020000080 RSI: 0000000040085112 RDI: 0000000000000003 [ 282.891261][ T8135] RBP: 00007f19e8a690a0 R08: 0000000000000000 R09: 0000000000000000 [ 282.899246][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.907238][ T8135] R13: 0000000000000000 R14: 00007f19e7d45fa0 R15: 00007ffe8318d728 [ 282.915256][ T8135] [ 282.925165][ T8136] CPU: 1 UID: 0 PID: 8136 Comm: syz.0.596 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 282.935785][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.945870][ T8136] Call Trace: [ 282.949169][ T8136] [ 282.952119][ T8136] dump_stack_lvl+0x241/0x360 [ 282.956825][ T8136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.962049][ T8136] ? __pfx__printk+0x10/0x10 [ 282.966673][ T8136] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 282.973209][ T8136] ? __pfx___might_resched+0x10/0x10 [ 282.978525][ T8136] should_fail_ex+0x3b0/0x4e0 [ 282.983234][ T8136] should_failslab+0xac/0x100 [ 282.987942][ T8136] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 282.994288][ T8136] ? resume_store+0x17d/0x710 [ 282.999014][ T8136] kstrndup+0x41/0xb0 [ 283.003022][ T8136] resume_store+0x17d/0x710 [ 283.007554][ T8136] ? kernfs_fop_write_iter+0x1ea/0x500 [ 283.013040][ T8136] ? __pfx_resume_store+0x10/0x10 [ 283.018108][ T8136] ? sysfs_kf_write+0x182/0x2a0 [ 283.022987][ T8136] ? __pfx_sysfs_kf_write+0x10/0x10 [ 283.028212][ T8136] kernfs_fop_write_iter+0x3a0/0x500 [ 283.033527][ T8136] vfs_write+0xaeb/0xd30 [ 283.037800][ T8136] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 283.043626][ T8136] ? __pfx_vfs_write+0x10/0x10 [ 283.048425][ T8136] ? __fget_files+0x2a/0x410 [ 283.053040][ T8136] ? __fget_files+0x2a/0x410 [ 283.057678][ T8136] ksys_write+0x18f/0x2b0 [ 283.062039][ T8136] ? __pfx_ksys_write+0x10/0x10 [ 283.066914][ T8136] ? do_syscall_64+0x100/0x230 [ 283.071707][ T8136] ? do_syscall_64+0xb6/0x230 [ 283.076408][ T8136] do_syscall_64+0xf3/0x230 [ 283.080933][ T8136] ? clear_bhb_loop+0x35/0x90 [ 283.085656][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.091581][ T8136] RIP: 0033:0x7f56db77ff19 [ 283.096022][ T8136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.115644][ T8136] RSP: 002b:00007f56dc4d1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.124097][ T8136] RAX: ffffffffffffffda RBX: 00007f56db945fa0 RCX: 00007f56db77ff19 [ 283.132113][ T8136] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000003 [ 283.140106][ T8136] RBP: 00007f56dc4d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 283.148098][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.156086][ T8136] R13: 0000000000000000 R14: 00007f56db945fa0 R15: 00007ffc2f61f7f8 [ 283.164100][ T8136] [ 284.176632][ T8156] syz.4.597: attempt to access beyond end of device [ 284.176632][ T8156] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 284.189677][ T8156] FAT-fs (nbd4): unable to read boot sector [ 286.097155][ T8175] FAULT_INJECTION: forcing a failure. [ 286.097155][ T8175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.098100][ T8172] mkiss: ax0: crc mode is auto. [ 286.110871][ T8175] CPU: 1 UID: 0 PID: 8175 Comm: syz.4.607 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 286.126056][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.136134][ T8175] Call Trace: [ 286.139432][ T8175] [ 286.142380][ T8175] dump_stack_lvl+0x241/0x360 [ 286.147090][ T8175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.152317][ T8175] ? __pfx__printk+0x10/0x10 [ 286.156943][ T8175] should_fail_ex+0x3b0/0x4e0 [ 286.161654][ T8175] _copy_to_user+0x31/0xb0 [ 286.166101][ T8175] bpf_test_finish+0x59c/0x890 [ 286.170895][ T8175] ? __pfx_bpf_test_finish+0x10/0x10 [ 286.176205][ T8175] ? convert___skb_to_skb+0x41/0x620 [ 286.181512][ T8175] ? convert_skb_to___skb+0x2d3/0x510 [ 286.186914][ T8175] bpf_prog_test_run_skb+0xff0/0x1820 [ 286.192334][ T8175] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 286.198176][ T8175] ? __fget_files+0x2a/0x410 [ 286.202790][ T8175] ? fput+0x21b/0x290 [ 286.206795][ T8175] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 286.212631][ T8175] bpf_prog_test_run+0x2e4/0x360 [ 286.217599][ T8175] __sys_bpf+0x48d/0x810 [ 286.221856][ T8175] ? __pfx___sys_bpf+0x10/0x10 [ 286.226625][ T8175] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.232606][ T8175] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.238927][ T8175] ? do_syscall_64+0x100/0x230 [ 286.243694][ T8175] __x64_sys_bpf+0x7c/0x90 [ 286.248109][ T8175] do_syscall_64+0xf3/0x230 [ 286.252614][ T8175] ? clear_bhb_loop+0x35/0x90 [ 286.257292][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.263180][ T8175] RIP: 0033:0x7fcca437ff19 [ 286.267595][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.287195][ T8175] RSP: 002b:00007fcca50a3058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.295610][ T8175] RAX: ffffffffffffffda RBX: 00007fcca4545fa0 RCX: 00007fcca437ff19 [ 286.303574][ T8175] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 286.311545][ T8175] RBP: 00007fcca50a30a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.319514][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.327481][ T8175] R13: 0000000000000000 R14: 00007fcca4545fa0 R15: 00007ffe9e5cdbd8 [ 286.335455][ T8175] [ 286.492931][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.581903][ T940] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 286.746308][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 286.793758][ T8185] openvswitch: netlink: Unknown nsh attribute 0 [ 286.827878][ T8185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.921190][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.949101][ T9] usb 4-1: no configurations [ 286.958668][ T9] usb 4-1: can't read configurations, error -22 [ 287.065868][ T940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.236676][ T940] usb 3-1: Using ep0 maxpacket: 32 [ 287.247098][ T940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.264557][ T940] usb 3-1: config 0 has no interfaces? [ 287.478983][ T940] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 287.498790][ T940] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 287.508135][ T940] usb 3-1: Product: syz [ 287.512947][ T940] usb 3-1: Manufacturer: syz [ 288.261322][ T8207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.616'. [ 288.302294][ T940] usb 3-1: config 0 descriptor?? [ 288.365155][ T8210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.618'. [ 290.165869][ T5901] usb 3-1: USB disconnect, device number 10 [ 290.868058][ T8238] mkiss: ax0: crc mode is auto. [ 293.765994][ T8259] program syz.4.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.835954][ T8259] bridge0: entered allmulticast mode [ 294.548846][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 294.593306][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 294.732650][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 295.969182][ T8304] mkiss: ax0: crc mode is auto. [ 296.234256][ T8308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.643'. [ 297.825074][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 297.854594][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 297.980449][ T8322] netlink: 'syz.0.646': attribute type 6 has an invalid length. [ 298.657415][ T8335] vxfs: WRONG superblock magic 00000000 at 1 [ 298.665176][ T8335] vxfs: WRONG superblock magic 00000000 at 8 [ 298.671308][ T8335] vxfs: can't find superblock. [ 299.610966][ T8343] netlink: 44 bytes leftover after parsing attributes in process `syz.4.655'. [ 299.919459][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 301.854116][ T940] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 302.075890][ T940] usb 4-1: device descriptor read/64, error -71 [ 302.318095][ T940] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 302.631168][ T940] usb 4-1: device descriptor read/64, error -71 [ 302.840010][ T940] usb usb4-port1: attempt power cycle [ 303.506504][ T940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 303.520083][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz.0.666'. [ 303.543655][ T940] usb 4-1: device descriptor read/8, error -71 [ 303.829834][ T940] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 304.292296][ T8393] binder: Bad value for 'max' [ 304.669513][ T940] usb 4-1: device descriptor read/8, error -71 [ 304.987031][ T940] usb usb4-port1: unable to enumerate USB device [ 305.287584][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 305.876334][ T8420] delete_channel: no stack [ 306.330071][ T8414] delete_channel: no stack [ 306.466185][ T5870] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.655733][ T5870] usb 5-1: device descriptor read/64, error -71 [ 306.975494][ T5870] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 307.155586][ T5870] usb 5-1: device descriptor read/64, error -71 [ 307.276156][ T5870] usb usb5-port1: attempt power cycle [ 307.348716][ T8432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.679'. [ 307.635777][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 307.679504][ T5870] usb 5-1: device descriptor read/8, error -71 [ 308.287043][ T5870] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 309.944703][ T5870] usb 5-1: device descriptor read/8, error -71 [ 310.056249][ T5870] usb usb5-port1: unable to enumerate USB device [ 310.346369][ T940] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 310.516246][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 310.539281][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.565943][ T5870] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 310.622066][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.882276][ T940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 310.898309][ T5870] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 310.914855][ T5870] usb 5-1: config 0 has no interface number 0 [ 310.936122][ T940] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 310.946688][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.960541][ T5870] usb 5-1: New USB device found, idVendor=050d, idProduct=0128, bcdDevice=bc.ae [ 310.970009][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.981339][ T940] usb 2-1: config 0 descriptor?? [ 310.993642][ T5870] usb 5-1: Product: syz [ 311.002111][ T5870] usb 5-1: Manufacturer: syz [ 311.145925][ T5871] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 311.163968][ T5870] usb 5-1: SerialNumber: syz [ 311.184927][ T5870] usb 5-1: config 0 descriptor?? [ 311.226684][ T5870] ax88179_178a 5-1:0.65: probe with driver ax88179_178a failed with error -22 [ 311.975476][ T8469] delete_channel: no stack [ 312.038060][ T940] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 312.045068][ T940] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 312.052583][ T940] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 312.059636][ T940] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 312.067273][ T940] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 312.078057][ T940] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 312.105210][ T940] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 312.113749][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 312.125725][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.138317][ T8464] delete_channel: no stack [ 312.144853][ T940] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 312.156883][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 312.177164][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 312.194227][ T5871] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 312.466370][ T51] usb 5-1: USB disconnect, device number 14 [ 312.706670][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 312.731205][ T940] usb 2-1: USB disconnect, device number 18 [ 312.737469][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 312.755701][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.767305][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 312.780973][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 312.817326][ T5871] usb 1-1: config 0 descriptor?? [ 312.835224][ T8461] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 312.846482][ T5871] hub 1-1:0.0: USB hub found [ 313.055733][ T5871] hub 1-1:0.0: 2 ports detected [ 313.601286][ T8496] FAULT_INJECTION: forcing a failure. [ 313.601286][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 313.616353][ T8496] CPU: 1 UID: 0 PID: 8496 Comm: syz.3.697 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 313.626968][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.637040][ T8496] Call Trace: [ 313.640366][ T8496] [ 313.643312][ T8496] dump_stack_lvl+0x241/0x360 [ 313.648025][ T8496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.653239][ T8496] ? __pfx__printk+0x10/0x10 [ 313.657846][ T8496] ? __kmalloc_cache_noprof+0x48/0x390 [ 313.663315][ T8496] ? __pfx___might_resched+0x10/0x10 [ 313.668609][ T8496] ? lockdep_init_map_type+0xa1/0x910 [ 313.674006][ T8496] should_fail_ex+0x3b0/0x4e0 [ 313.678717][ T8496] should_failslab+0xac/0x100 [ 313.683420][ T8496] __kmalloc_cache_noprof+0x70/0x390 [ 313.688735][ T8496] ? tcf_block_get_ext+0x656/0x1670 [ 313.693970][ T8496] tcf_block_get_ext+0x656/0x1670 [ 313.699024][ T8496] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 313.704486][ T8496] ? __asan_memset+0x23/0x50 [ 313.709085][ T8496] ? tc_modify_qdisc+0xa26/0x1e40 [ 313.714114][ T8496] ? netlink_rcv_skb+0x1e3/0x430 [ 313.719055][ T8496] ? netlink_unicast+0x7f6/0x990 [ 313.724014][ T8496] tcf_block_get+0xf8/0x150 [ 313.728543][ T8496] ? __pfx_tcf_block_get+0x10/0x10 [ 313.733673][ T8496] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 313.739927][ T8496] ? __pfx_drr_init_qdisc+0x10/0x10 [ 313.745140][ T8496] drr_init_qdisc+0x2c/0xd0 [ 313.749652][ T8496] ? __pfx_drr_init_qdisc+0x10/0x10 [ 313.754858][ T8496] qdisc_create+0x9d4/0x11a0 [ 313.759456][ T8496] ? __pfx_qdisc_create+0x10/0x10 [ 313.764526][ T8496] tc_modify_qdisc+0xa26/0x1e40 [ 313.769385][ T8496] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 313.774684][ T8496] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 313.779980][ T8496] rtnetlink_rcv_msg+0x73f/0xcf0 [ 313.784952][ T8496] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 313.790084][ T8496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.795569][ T8496] ? ref_tracker_free+0x643/0x7e0 [ 313.800621][ T8496] netlink_rcv_skb+0x1e3/0x430 [ 313.805404][ T8496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.810873][ T8496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.816172][ T8496] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.821393][ T8496] netlink_unicast+0x7f6/0x990 [ 313.826202][ T8496] ? __pfx_netlink_unicast+0x10/0x10 [ 313.831516][ T8496] ? __virt_addr_valid+0x45f/0x530 [ 313.836656][ T8496] ? __phys_addr_symbol+0x2f/0x70 [ 313.841680][ T8496] ? __check_object_size+0x47a/0x730 [ 313.846976][ T8496] netlink_sendmsg+0x8e4/0xcb0 [ 313.851759][ T8496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.857069][ T8496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.862349][ T8496] __sock_sendmsg+0x221/0x270 [ 313.867044][ T8496] ____sys_sendmsg+0x52a/0x7e0 [ 313.871804][ T8496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.877099][ T8496] ? __fget_files+0x2a/0x410 [ 313.881711][ T8496] ? __fget_files+0x2a/0x410 [ 313.886332][ T8496] __sys_sendmmsg+0x36a/0x720 [ 313.891031][ T8496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 313.896229][ T8496] ? __pfx_lock_release+0x10/0x10 [ 313.901266][ T8496] ? kstrtouint_from_user+0x128/0x190 [ 313.906676][ T8496] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 313.912600][ T8496] ? ksys_write+0x22a/0x2b0 [ 313.917110][ T8496] ? __pfx_lock_release+0x10/0x10 [ 313.922161][ T8496] ? vfs_write+0x730/0xd30 [ 313.926602][ T8496] ? __mutex_unlock_slowpath+0x21e/0x790 [ 313.932283][ T8496] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.938289][ T8496] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.944646][ T8496] ? do_syscall_64+0x100/0x230 [ 313.949433][ T8496] __x64_sys_sendmmsg+0xa0/0xb0 [ 313.954298][ T8496] do_syscall_64+0xf3/0x230 [ 313.958833][ T8496] ? clear_bhb_loop+0x35/0x90 [ 313.963560][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.969478][ T8496] RIP: 0033:0x7f0079d7ff19 [ 313.973896][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.993607][ T8496] RSP: 002b:00007f007ac1c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.002032][ T8496] RAX: ffffffffffffffda RBX: 00007f0079f45fa0 RCX: 00007f0079d7ff19 [ 314.010015][ T8496] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 314.017992][ T8496] RBP: 00007f007ac1c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.025979][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.033968][ T8496] R13: 0000000000000000 R14: 00007f0079f45fa0 R15: 00007ffe0b713b08 [ 314.041959][ T8496] [ 314.593853][ T5871] hub 1-1:0.0: set hub depth failed [ 314.981076][ T8513] delete_channel: no stack [ 315.215481][ T5871] usb 1-1: USB disconnect, device number 20 [ 315.243897][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 315.253253][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 315.427266][ T8507] delete_channel: no stack [ 315.989510][ T54] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 316.516986][ T8530] input: syz0 as /devices/virtual/input/input10 [ 316.641562][ T8533] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 316.649767][ T8533] netlink: 224 bytes leftover after parsing attributes in process `syz.3.707'. [ 316.678299][ T8533] netlink: 'syz.3.707': attribute type 7 has an invalid length. [ 316.686349][ T8533] netlink: 244 bytes leftover after parsing attributes in process `syz.3.707'. [ 316.804933][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 316.875962][ T8535] Bluetooth: MGMT ver 1.23 [ 316.922287][ T8537] netlink: 'syz.0.709': attribute type 4 has an invalid length. [ 316.998659][ T5871] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 317.216021][ T940] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 317.238605][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 317.247726][ T5871] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 317.259828][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.275832][ T5871] usb 4-1: Product: syz [ 317.286262][ T5871] usb 4-1: Manufacturer: syz [ 317.305613][ T5871] usb 4-1: SerialNumber: syz [ 317.321731][ T5871] usb 4-1: config 0 descriptor?? [ 317.337020][ T5871] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 317.379261][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.384141][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 317.399862][ T940] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 317.411563][ T940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.421857][ T940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.432112][ T940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.448152][ T940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.485574][ T940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.518696][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.547450][ T51] usb 4-1: USB disconnect, device number 13 [ 317.739654][ T940] usb 3-1: usb_control_msg returned -32 [ 317.745706][ T940] usbtmc 3-1:16.0: can't read capabilities [ 318.316586][ T5871] usb 3-1: USB disconnect, device number 11 [ 319.661717][ T8571] delete_channel: no stack [ 320.033207][ T8577] mkiss: ax0: crc mode is auto. [ 320.227399][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 320.236397][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 320.246790][ T54] Bluetooth: hci1: hardware error 0x00 [ 320.526344][ T8566] delete_channel: no stack [ 322.045815][ T5901] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 322.367462][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 322.439587][ T5901] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 322.458058][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.476292][ T5901] usb 3-1: Product: syz [ 322.480546][ T5901] usb 3-1: SerialNumber: syz [ 322.788461][ T5901] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 322.839822][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 322.978576][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.015979][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.028516][ T51] usb 3-1: USB disconnect, device number 12 [ 325.931923][ T8646] delete_channel: no stack [ 326.027613][ T8647] delete_channel: no stack [ 326.351768][ T8650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.736'. [ 326.902580][ T8642] delete_channel: no stack [ 327.449097][ T8640] delete_channel: no stack [ 330.206090][ T8690] gfs2: gfs2 mount does not exist [ 330.350515][ T8695] FAULT_INJECTION: forcing a failure. [ 330.350515][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.366578][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.0.754 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 330.377193][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.387243][ T8695] Call Trace: [ 330.390515][ T8695] [ 330.393441][ T8695] dump_stack_lvl+0x241/0x360 [ 330.398130][ T8695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.403326][ T8695] ? __pfx__printk+0x10/0x10 [ 330.407925][ T8695] ? __pfx_lock_release+0x10/0x10 [ 330.412951][ T8695] should_fail_ex+0x3b0/0x4e0 [ 330.417650][ T8695] _copy_from_user+0x2f/0xc0 [ 330.422237][ T8695] snd_pcm_oss_write+0xa33/0x11f0 [ 330.427256][ T8695] ? __lock_acquire+0x1397/0x2100 [ 330.432291][ T8695] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 330.437754][ T8695] ? bpf_lsm_file_permission+0x9/0x10 [ 330.443127][ T8695] ? security_file_permission+0x74/0x280 [ 330.448768][ T8695] ? rw_verify_area+0x1c3/0x6f0 [ 330.453614][ T8695] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 330.459074][ T8695] vfs_write+0x2a3/0xd30 [ 330.463321][ T8695] ? __pfx_vfs_write+0x10/0x10 [ 330.468083][ T8695] ? __fget_files+0x2a/0x410 [ 330.472670][ T8695] ? __fget_files+0x395/0x410 [ 330.477349][ T8695] ? __fget_files+0x2a/0x410 [ 330.481937][ T8695] ksys_write+0x18f/0x2b0 [ 330.486265][ T8695] ? __pfx_ksys_write+0x10/0x10 [ 330.491112][ T8695] ? do_syscall_64+0x100/0x230 [ 330.495875][ T8695] ? do_syscall_64+0xb6/0x230 [ 330.500548][ T8695] do_syscall_64+0xf3/0x230 [ 330.505048][ T8695] ? clear_bhb_loop+0x35/0x90 [ 330.509724][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.515614][ T8695] RIP: 0033:0x7f56db77ff19 [ 330.520023][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.539624][ T8695] RSP: 002b:00007f56dc4d1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 330.548037][ T8695] RAX: ffffffffffffffda RBX: 00007f56db945fa0 RCX: 00007f56db77ff19 [ 330.556009][ T8695] RDX: 0000000000004000 RSI: 00000000200012c0 RDI: 0000000000000004 [ 330.563972][ T8695] RBP: 00007f56dc4d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 330.571960][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.579932][ T8695] R13: 0000000000000000 R14: 00007f56db945fa0 R15: 00007ffc2f61f7f8 [ 330.587907][ T8695] [ 331.415178][ T8706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.756'. [ 331.425297][ T8706] netlink: 1 bytes leftover after parsing attributes in process `syz.1.756'. [ 333.525457][ T8727] delete_channel: no stack [ 333.726768][ T8734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.727840][ T8722] delete_channel: no stack [ 333.777315][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.838346][ T8734] batadv_slave_1: entered promiscuous mode [ 334.032928][ T8741] 0000: renamed from bridge_slave_0 (while UP) [ 334.062503][ T8741] bridge0: port 1(0000) entered disabled state [ 334.165861][ T5871] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 334.317560][ T5871] usb 3-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 334.409541][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 334.737440][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 334.845110][ T5871] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 334.874650][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.893073][ T5871] usb 3-1: config 0 descriptor?? [ 334.916286][ T5871] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 334.925079][ T5871] em28xx 3-1:0.0: Video interface 0 found: isoc [ 335.287549][ T5871] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 335.417330][ T8751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.768'. [ 336.149009][ T5871] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 336.185718][ T5871] em28xx 3-1:0.0: board has no eeprom [ 336.305837][ T5871] em28xx 3-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 336.332089][ T5871] em28xx 3-1:0.0: Currently, V4L2 is not supported on this model [ 336.678528][ T5870] em28xx 3-1:0.0: Binding DVB extension [ 336.686198][ T5870] em28xx 3-1:0.0: no endpoint for DVB mode and transfer type 0 [ 336.694248][ T5870] em28xx 3-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 336.703975][ T5870] em28xx 3-1:0.0: Registering input extension [ 336.725694][ T5871] usb 3-1: USB disconnect, device number 13 [ 337.067565][ T5871] em28xx 3-1:0.0: Disconnecting em28xx [ 337.073229][ T5871] em28xx 3-1:0.0: Closing input extension [ 337.351881][ T5871] em28xx 3-1:0.0: Freeing device [ 338.581274][ T8798] FAULT_INJECTION: forcing a failure. [ 338.581274][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 338.594537][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.4.784 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 338.605156][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.615233][ T8798] Call Trace: [ 338.618534][ T8798] [ 338.621481][ T8798] dump_stack_lvl+0x241/0x360 [ 338.626189][ T8798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.631415][ T8798] ? __pfx__printk+0x10/0x10 [ 338.636034][ T8798] ? __lock_acquire+0x1397/0x2100 [ 338.641087][ T8798] should_fail_ex+0x3b0/0x4e0 [ 338.646067][ T8798] should_failslab+0xac/0x100 [ 338.650780][ T8798] ? fdb_create+0x1fa/0x1560 [ 338.655393][ T8798] kmem_cache_alloc_noprof+0x70/0x380 [ 338.660800][ T8798] fdb_create+0x1fa/0x1560 [ 338.665241][ T8798] ? br_fdb_find+0x83/0x210 [ 338.669763][ T8798] ? __pfx_lock_release+0x10/0x10 [ 338.674810][ T8798] ? __pfx_fdb_create+0x10/0x10 [ 338.679680][ T8798] ? do_raw_spin_lock+0x14f/0x370 [ 338.684734][ T8798] ? br_fdb_find+0x83/0x210 [ 338.689253][ T8798] ? br_fdb_find+0x83/0x210 [ 338.693782][ T8798] fdb_add_local+0x12e/0x250 [ 338.698401][ T8798] br_fdb_add_local+0x3a/0x60 [ 338.703105][ T8798] __vlan_add+0x6a0/0x26d0 [ 338.707564][ T8798] ? br_vlan_add+0x22a/0x970 [ 338.712179][ T8798] ? __pfx___vlan_add+0x10/0x10 [ 338.717065][ T8798] br_vlan_add+0x44c/0x970 [ 338.721516][ T8798] __br_vlan_set_default_pvid+0x395/0xfb0 [ 338.727276][ T8798] ? __pfx___br_vlan_set_default_pvid+0x10/0x10 [ 338.733544][ T8798] ? __pfx___mutex_trylock_common+0x10/0x10 [ 338.739474][ T8798] br_changelink+0x458/0x1840 [ 338.744175][ T8798] ? __mutex_lock+0x37f/0xee0 [ 338.748880][ T8798] ? __pfx_br_changelink+0x10/0x10 [ 338.754020][ T8798] ? __pfx_lock_acquire+0x10/0x10 [ 338.759064][ T8798] ? rtnl_link_ops_get+0x22/0x250 [ 338.764112][ T8798] ? rtnl_newlink+0xbb0/0x20e0 [ 338.768898][ T8798] ? __pfx___mutex_lock+0x10/0x10 [ 338.773949][ T8798] ? cap_capable+0x1b4/0x250 [ 338.778556][ T8798] ? safesetid_security_capable+0xb2/0x1d0 [ 338.784387][ T8798] ? ns_capable+0x8a/0xf0 [ 338.788742][ T8798] ? rtnl_link_get_net_capable+0x168/0x340 [ 338.794573][ T8798] rtnl_newlink+0x1adf/0x20e0 [ 338.799277][ T8798] ? __pfx_rtnl_newlink+0x10/0x10 [ 338.804306][ T8798] ? __netlink_deliver_tap+0x56b/0x7f0 [ 338.809768][ T8798] ? __pfx_validate_chain+0x10/0x10 [ 338.814967][ T8798] ? __sock_sendmsg+0x221/0x270 [ 338.819814][ T8798] ? ____sys_sendmsg+0x52a/0x7e0 [ 338.824744][ T8798] ? __sys_sendmsg+0x269/0x350 [ 338.829498][ T8798] ? do_syscall_64+0xf3/0x230 [ 338.834169][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.840251][ T8798] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.846234][ T8798] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.852565][ T8798] ? mark_lock+0x9a/0x360 [ 338.856898][ T8798] ? __lock_acquire+0x1397/0x2100 [ 338.861943][ T8798] ? __pfx_lock_release+0x10/0x10 [ 338.866959][ T8798] ? cap_capable+0x1b4/0x250 [ 338.871554][ T8798] ? __pfx_rtnl_newlink+0x10/0x10 [ 338.876574][ T8798] rtnetlink_rcv_msg+0x791/0xcf0 [ 338.881506][ T8798] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 338.886614][ T8798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.892073][ T8798] ? ref_tracker_free+0x643/0x7e0 [ 338.897101][ T8798] netlink_rcv_skb+0x1e3/0x430 [ 338.901862][ T8798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.907321][ T8798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.912614][ T8798] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.917808][ T8798] netlink_unicast+0x7f6/0x990 [ 338.922577][ T8798] ? __pfx_netlink_unicast+0x10/0x10 [ 338.927858][ T8798] ? __virt_addr_valid+0x45f/0x530 [ 338.932976][ T8798] ? __phys_addr_symbol+0x2f/0x70 [ 338.937994][ T8798] ? __check_object_size+0x47a/0x730 [ 338.943283][ T8798] netlink_sendmsg+0x8e4/0xcb0 [ 338.948052][ T8798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.953341][ T8798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.958617][ T8798] __sock_sendmsg+0x221/0x270 [ 338.963297][ T8798] ____sys_sendmsg+0x52a/0x7e0 [ 338.968064][ T8798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.973345][ T8798] ? __fget_files+0x2a/0x410 [ 338.977934][ T8798] ? __fget_files+0x2a/0x410 [ 338.982524][ T8798] __sys_sendmsg+0x269/0x350 [ 338.987111][ T8798] ? __pfx_lock_release+0x10/0x10 [ 338.992137][ T8798] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.997254][ T8798] ? __pfx_vfs_write+0x10/0x10 [ 339.002034][ T8798] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.008357][ T8798] ? do_syscall_64+0x100/0x230 [ 339.013121][ T8798] ? do_syscall_64+0xb6/0x230 [ 339.017804][ T8798] do_syscall_64+0xf3/0x230 [ 339.022305][ T8798] ? clear_bhb_loop+0x35/0x90 [ 339.026987][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.032882][ T8798] RIP: 0033:0x7fcca437ff19 [ 339.037291][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.056894][ T8798] RSP: 002b:00007fcca50a3058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.065305][ T8798] RAX: ffffffffffffffda RBX: 00007fcca4545fa0 RCX: 00007fcca437ff19 [ 339.073269][ T8798] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 339.081234][ T8798] RBP: 00007fcca50a30a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.089197][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.097160][ T8798] R13: 0000000000000000 R14: 00007fcca4545fa0 R15: 00007ffe9e5cdbd8 [ 339.105138][ T8798] [ 339.142801][ T8798] bridge0: failed insert local address into bridge forwarding table [ 339.904643][ T8808] netlink: 48 bytes leftover after parsing attributes in process `syz.0.787'. [ 339.913962][ T8808] netlink: 1 bytes leftover after parsing attributes in process `syz.0.787'. [ 340.066748][ T5871] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 340.227578][ T5871] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 340.243460][ T5871] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 340.285871][ T5871] usb 4-1: config 0 has no interface number 0 [ 340.292002][ T5871] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0x8 has an invalid bInterval 182, changing to 7 [ 340.430410][ T5871] usb 4-1: New USB device found, idVendor=04f1, idProduct=3008, bcdDevice=72.e2 [ 340.480561][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.544488][ T5871] usb 4-1: config 0 descriptor?? [ 342.267155][ T5871] asix 4-1:0.199 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 342.281392][ T5871] asix 4-1:0.199: probe with driver asix failed with error -71 [ 342.897868][ T5871] usb 4-1: USB disconnect, device number 14 [ 343.066167][ T8835] syz.0.796 (8835) used greatest stack depth: 17936 bytes left [ 343.154803][ T8845] syz.2.797: attempt to access beyond end of device [ 343.154803][ T8845] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 343.210803][ T8845] FAT-fs (nbd2): unable to read boot sector [ 343.277941][ T8847] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 343.287366][ T8847] FAULT_INJECTION: forcing a failure. [ 343.287366][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 343.320222][ T8847] CPU: 1 UID: 0 PID: 8847 Comm: syz.0.798 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 343.330872][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.340952][ T8847] Call Trace: [ 343.344261][ T8847] [ 343.347209][ T8847] dump_stack_lvl+0x241/0x360 [ 343.351922][ T8847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.357136][ T8847] ? __pfx__printk+0x10/0x10 [ 343.361744][ T8847] ? ref_tracker_alloc+0x332/0x490 [ 343.366869][ T8847] should_fail_ex+0x3b0/0x4e0 [ 343.371569][ T8847] should_failslab+0xac/0x100 [ 343.376268][ T8847] ? skb_clone+0x20c/0x390 [ 343.380698][ T8847] kmem_cache_alloc_noprof+0x70/0x380 [ 343.386095][ T8847] skb_clone+0x20c/0x390 [ 343.390358][ T8847] __netlink_deliver_tap+0x3cc/0x7f0 [ 343.395663][ T8847] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.400870][ T8847] netlink_deliver_tap+0x19d/0x1b0 [ 343.405992][ T8847] netlink_sendskb+0x68/0x140 [ 343.410690][ T8847] netlink_unicast+0x39d/0x990 [ 343.415479][ T8847] ? __pfx_netlink_unicast+0x10/0x10 [ 343.420789][ T8847] netlink_rcv_skb+0x262/0x430 [ 343.425568][ T8847] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.431042][ T8847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.436360][ T8847] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.441570][ T8847] netlink_unicast+0x7f6/0x990 [ 343.446362][ T8847] ? __pfx_netlink_unicast+0x10/0x10 [ 343.451674][ T8847] ? __virt_addr_valid+0x45f/0x530 [ 343.456801][ T8847] ? __phys_addr_symbol+0x2f/0x70 [ 343.461836][ T8847] ? __check_object_size+0x47a/0x730 [ 343.467139][ T8847] netlink_sendmsg+0x8e4/0xcb0 [ 343.471926][ T8847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.477236][ T8847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.482532][ T8847] __sock_sendmsg+0x221/0x270 [ 343.487226][ T8847] ____sys_sendmsg+0x52a/0x7e0 [ 343.492009][ T8847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.497306][ T8847] ? __fget_files+0x2a/0x410 [ 343.501913][ T8847] ? __fget_files+0x2a/0x410 [ 343.506524][ T8847] __sys_sendmsg+0x269/0x350 [ 343.511125][ T8847] ? __pfx_lock_release+0x10/0x10 [ 343.516184][ T8847] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.521334][ T8847] ? __pfx_vfs_write+0x10/0x10 [ 343.526154][ T8847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.532513][ T8847] ? do_syscall_64+0x100/0x230 [ 343.537301][ T8847] ? do_syscall_64+0xb6/0x230 [ 343.542006][ T8847] do_syscall_64+0xf3/0x230 [ 343.546540][ T8847] ? clear_bhb_loop+0x35/0x90 [ 343.551247][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.557161][ T8847] RIP: 0033:0x7f56db77ff19 [ 343.561586][ T8847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.581211][ T8847] RSP: 002b:00007f56dc4d1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.589643][ T8847] RAX: ffffffffffffffda RBX: 00007f56db945fa0 RCX: 00007f56db77ff19 [ 343.597623][ T8847] RDX: 0000000004000044 RSI: 0000000020000440 RDI: 0000000000000003 [ 343.605588][ T8847] RBP: 00007f56dc4d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.613551][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.621514][ T8847] R13: 0000000000000000 R14: 00007f56db945fa0 R15: 00007ffc2f61f7f8 [ 343.629510][ T8847] [ 343.632672][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.041692][ T8859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.800'. [ 344.560218][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 344.746381][ T8872] hsr_slave_0: left promiscuous mode [ 344.752489][ T8872] hsr_slave_1: left promiscuous mode [ 345.134287][ T8882] netlink: 'syz.4.809': attribute type 3 has an invalid length. [ 345.353230][ T8886] netlink: 'syz.4.811': attribute type 11 has an invalid length. [ 345.390108][ T8886] netlink: 224 bytes leftover after parsing attributes in process `syz.4.811'. [ 345.623200][ T8896] delete_channel: no stack [ 345.795953][ T5870] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 345.838325][ T8879] delete_channel: no stack [ 345.967555][ T5870] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.997656][ T5870] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 346.023341][ T5870] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.052885][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.115076][ T8894] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 346.115508][ T5819] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 346.133416][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.254142][ T8901] syz.3.814: attempt to access beyond end of device [ 346.254142][ T8901] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 346.287263][ T5819] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 346.291697][ T8901] FAT-fs (nbd3): unable to read boot sector [ 346.312165][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.362761][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.371477][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.398383][ T5819] usb 1-1: config 0 descriptor?? [ 347.094683][ T5819] ath6kl: Failed to submit usb control message: -71 [ 347.122115][ T5819] ath6kl: unable to send the bmi data to the device: -71 [ 347.142325][ T5819] ath6kl: Unable to send get target info: -71 [ 347.177804][ T5819] ath6kl: Failed to init ath6kl core: -71 [ 347.204577][ T5819] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 347.259708][ T5819] usb 1-1: USB disconnect, device number 21 [ 347.910140][ T5871] usb 2-1: USB disconnect, device number 19 [ 347.982046][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 348.054385][ T8917] netlink: 'syz.3.820': attribute type 3 has an invalid length. [ 348.094557][ T8922] netlink: 'syz.2.822': attribute type 3 has an invalid length. [ 348.156720][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 348.169656][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.193137][ T5870] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 348.241552][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.303008][ T5870] usb 5-1: config 0 descriptor?? [ 348.314334][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 348.352869][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 349.540942][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'. [ 349.635682][ T5819] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 349.906497][ T940] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 350.093520][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.105235][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.115236][ T5819] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 350.124426][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.132834][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 350.134432][ T5819] usb 3-1: config 0 descriptor?? [ 350.150848][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.161474][ T940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 350.174491][ T940] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 350.183989][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.206885][ T940] usb 4-1: config 0 descriptor?? [ 350.415681][ T51] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 350.567874][ T51] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.584855][ T51] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.601191][ T5819] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 350.612256][ T51] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.621982][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.637829][ T8948] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 350.653819][ T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.675505][ T5819] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 350.693567][ T940] corsair-psu 0003:1B1C:1C07.0006: item fetching failed at offset 4/7 [ 350.709753][ T5819] hid-steam 0003:28DE:1142.0007: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 350.709796][ T940] corsair-psu 0003:1B1C:1C07.0006: probe with driver corsair-psu failed with error -22 [ 350.876592][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.885241][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.176262][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.187181][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.222108][ T54] Bluetooth: hci4: link tx timeout [ 351.228048][ T54] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 352.047631][ T5901] usb 2-1: USB disconnect, device number 20 [ 352.317072][ T940] usb 4-1: USB disconnect, device number 15 [ 352.336245][ T8940] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 352.347458][ T5819] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 352.429923][ T5180] bcm5974 5-1:0.0: could not read from device [ 352.490981][ T5870] bcm5974 5-1:0.0: could not read from device [ 352.597417][ T5180] bcm5974 5-1:0.0: could not read from device [ 352.619710][ T5870] input: failed to attach handler mousedev to device input12, error: -5 [ 352.640915][ T5180] bcm5974 5-1:0.0: could not read from device [ 352.648690][ T5870] usb 5-1: USB disconnect, device number 15 [ 352.655864][ T8965] overlayfs: failed to resolve './file0': -2 [ 353.538445][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 353.625591][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 354.928023][ T9001] FAULT_INJECTION: forcing a failure. [ 354.928023][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 354.943089][ T9001] CPU: 0 UID: 0 PID: 9001 Comm: syz.3.839 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 354.953715][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.963787][ T9001] Call Trace: [ 354.967089][ T9001] [ 354.970038][ T9001] dump_stack_lvl+0x241/0x360 [ 354.974742][ T9001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.979967][ T9001] ? __pfx__printk+0x10/0x10 [ 354.984603][ T9001] should_fail_ex+0x3b0/0x4e0 [ 354.989313][ T9001] should_failslab+0xac/0x100 [ 354.994030][ T9001] kmem_cache_alloc_node_noprof+0x77/0x380 [ 354.999864][ T9001] ? __alloc_skb+0x1c3/0x440 [ 355.004482][ T9001] ? rcu_is_watching+0x15/0xb0 [ 355.009273][ T9001] __alloc_skb+0x1c3/0x440 [ 355.013710][ T9001] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.019772][ T9001] ? __pfx___alloc_skb+0x10/0x10 [ 355.024727][ T9001] ? hci_sock_sendmsg+0x617/0x11c0 [ 355.029860][ T9001] ? __pfx___mutex_lock+0x10/0x10 [ 355.034927][ T9001] hci_mgmt_cmd+0x1c1/0x11d0 [ 355.039542][ T9001] hci_sock_sendmsg+0x7b8/0x11c0 [ 355.044484][ T9001] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 355.051254][ T9001] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 355.056627][ T9001] ? get_pid_task+0x23/0x1f0 [ 355.061217][ T9001] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 355.066584][ T9001] __sock_sendmsg+0x221/0x270 [ 355.071268][ T9001] sock_write_iter+0x2d7/0x3f0 [ 355.076030][ T9001] ? __pfx_sock_write_iter+0x10/0x10 [ 355.081320][ T9001] ? bpf_lsm_file_permission+0x9/0x10 [ 355.086691][ T9001] ? security_file_permission+0x74/0x280 [ 355.092320][ T9001] vfs_write+0xaeb/0xd30 [ 355.096564][ T9001] ? __pfx_sock_write_iter+0x10/0x10 [ 355.101845][ T9001] ? __pfx_vfs_write+0x10/0x10 [ 355.106616][ T9001] ? __fget_files+0x2a/0x410 [ 355.111199][ T9001] ? __fget_files+0x2a/0x410 [ 355.115790][ T9001] ksys_write+0x18f/0x2b0 [ 355.120118][ T9001] ? __pfx_ksys_write+0x10/0x10 [ 355.124964][ T9001] ? do_syscall_64+0x100/0x230 [ 355.129732][ T9001] ? do_syscall_64+0xb6/0x230 [ 355.134409][ T9001] do_syscall_64+0xf3/0x230 [ 355.138923][ T9001] ? clear_bhb_loop+0x35/0x90 [ 355.143602][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.149493][ T9001] RIP: 0033:0x7f0079d7ff19 [ 355.153914][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.173512][ T9001] RSP: 002b:00007f007abfb058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.181919][ T9001] RAX: ffffffffffffffda RBX: 00007f0079f46080 RCX: 00007f0079d7ff19 [ 355.189894][ T9001] RDX: 0000000000000008 RSI: 00000000200005c0 RDI: 0000000000000007 [ 355.197864][ T9001] RBP: 00007f007abfb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 355.205827][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.213787][ T9001] R13: 0000000000000000 R14: 00007f0079f46080 R15: 00007ffe0b713b08 [ 355.221767][ T9001] [ 355.247249][ T9001] Bluetooth: MGMT ver 1.23 [ 355.663874][ T51] usb 3-1: USB disconnect, device number 14 [ 355.703819][ T51] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 357.032492][ T9029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.718787][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 360.318238][ T9062] netlink: 'syz.2.852': attribute type 4 has an invalid length. [ 361.683340][ T9077] netlink: 44 bytes leftover after parsing attributes in process `syz.3.857'. [ 364.431680][ T9105] macvtap1: entered promiscuous mode [ 364.444789][ T9105] macvtap1: entered allmulticast mode [ 364.451298][ T9105] vlan0: entered allmulticast mode [ 364.456864][ T9105] veth0_vlan: entered allmulticast mode [ 364.462539][ T9105] vlan0: entered promiscuous mode [ 364.472409][ T9105] team0: Device macvtap1 failed to register rx_handler [ 364.482381][ T9105] vlan0: left allmulticast mode [ 364.487369][ T9105] veth0_vlan: left allmulticast mode [ 364.492779][ T9105] vlan0: left promiscuous mode [ 364.588553][ T29] audit: type=1800 audit(1733990760.991:35): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.860" name="bus" dev="overlay" ino=966 res=0 errno=0 [ 364.897031][ T9108] overlayfs: overlapping lowerdir path [ 366.249179][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'. [ 366.861674][ T9132] ip6erspan0: entered allmulticast mode [ 367.075561][ T51] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 367.100469][ T9128] gfs2: not a GFS2 filesystem [ 367.277025][ T51] usb 3-1: config 252 has an invalid interface number: 250 but max is 0 [ 367.285617][ T51] usb 3-1: config 252 has no interface number 0 [ 367.291912][ T51] usb 3-1: config 252 interface 250 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 367.320584][ T51] usb 3-1: config 252 interface 250 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 367.377375][ T51] usb 3-1: New USB device found, idVendor=f706, idProduct=1048, bcdDevice=ff.fc [ 367.456084][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.464171][ T51] usb 3-1: Product: syz [ 367.528220][ T51] usb 3-1: Manufacturer: syz [ 367.546040][ T51] usb 3-1: SerialNumber: syz [ 367.925758][ T29] audit: type=1800 audit(1733990764.321:36): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.874" name="bus" dev="overlay" ino=1045 res=0 errno=0 [ 368.159155][ T9151] x_tables: unsorted underflow at hook 1 [ 369.435332][ T940] usb 3-1: USB disconnect, device number 15 [ 375.253927][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 375.466427][ T9241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.903'. [ 377.662229][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 378.859333][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.645582][ T5901] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 380.910355][ T9318] vlan2: entered promiscuous mode [ 380.930892][ T9318] bridge0: entered promiscuous mode [ 380.974125][ T9318] bridge0: port 3(vlan2) entered blocking state [ 381.017238][ T5901] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.020943][ T9318] bridge0: port 3(vlan2) entered disabled state [ 381.040734][ T5901] usb 5-1: config 0 has no interface number 0 [ 381.043756][ T9318] vlan2: entered allmulticast mode [ 381.055114][ T5901] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.055567][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.925'. [ 381.076982][ T5901] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.081211][ T9318] bridge0: entered allmulticast mode [ 381.087323][ T5901] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 381.101644][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.102586][ T9318] vlan2: left allmulticast mode [ 381.114672][ T5901] usb 5-1: config 0 descriptor?? [ 381.122190][ T9318] bridge0: left allmulticast mode [ 381.135149][ T9318] bridge0: left promiscuous mode [ 381.547761][ T5901] hid (null): global environment stack underflow [ 381.557824][ T5901] uclogic 0003:5543:0522.0008: global environment stack underflow [ 381.566176][ T5901] uclogic 0003:5543:0522.0008: item 0 1 1 11 parsing failed [ 381.574006][ T5901] uclogic 0003:5543:0522.0008: parse failed [ 381.580341][ T5901] uclogic 0003:5543:0522.0008: probe with driver uclogic failed with error -22 [ 382.516528][ T940] usb 5-1: USB disconnect, device number 16 [ 382.577541][ T9333] overlayfs: failed to resolve './file0': -2 [ 382.691462][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 387.865751][ T940] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 395.337660][ T9446] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 395.556345][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 395.916194][ T9446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.042145][ T9450] vlan2: entered promiscuous mode [ 396.286110][ T9450] bond2: entered promiscuous mode [ 396.291403][ T9450] vlan2: entered allmulticast mode [ 396.321453][ T9450] bond2: entered allmulticast mode [ 400.026383][ T9489] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 400.034065][ T9489] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.967'. [ 401.059215][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 401.236309][ T9478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.365449][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 401.703317][ T5870] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 401.712270][ T5870] usb 4-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 401.722906][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 401.731911][ T5870] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.745156][ T5870] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 401.754261][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.962069][ T9512] bridge0: port 3(erspan0) entered blocking state [ 402.969196][ T9512] bridge0: port 3(erspan0) entered disabled state [ 402.976992][ T9512] erspan0: entered allmulticast mode [ 402.985972][ T9512] erspan0: entered promiscuous mode [ 402.995426][ T9512] bridge0: port 3(erspan0) entered blocking state [ 403.001960][ T9512] bridge0: port 3(erspan0) entered forwarding state [ 404.401179][ T5870] usb 4-1: string descriptor 0 read error: -71 [ 404.410349][ T5870] hub 4-1:1.0: bad descriptor, ignoring hub [ 404.416334][ T5870] hub 4-1:1.0: probe with driver hub failed with error -5 [ 404.423718][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 404.429079][ T5870] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 404.456889][ T5870] usb 4-1: USB disconnect, device number 16 [ 404.753331][ T940] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 405.677742][ T940] usb 5-1: device not accepting address 18, error -71 [ 406.035900][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 407.521714][ T9567] FAULT_INJECTION: forcing a failure. [ 407.521714][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 407.565494][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.4.991 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 407.576136][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.586217][ T9567] Call Trace: [ 407.589512][ T9567] [ 407.592462][ T9567] dump_stack_lvl+0x241/0x360 [ 407.597166][ T9567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.602381][ T9567] ? __pfx__printk+0x10/0x10 [ 407.606991][ T9567] ? __kmalloc_cache_noprof+0x48/0x390 [ 407.612465][ T9567] ? __pfx___might_resched+0x10/0x10 [ 407.617783][ T9567] should_fail_ex+0x3b0/0x4e0 [ 407.622484][ T9567] should_failslab+0xac/0x100 [ 407.627183][ T9567] __kmalloc_cache_noprof+0x70/0x390 [ 407.632479][ T9567] ? rxrpc_alloc_data_txbuf+0x84/0xe10 [ 407.637963][ T9567] rxrpc_alloc_data_txbuf+0x84/0xe10 [ 407.643278][ T9567] ? __pfx_none_alloc_txbuf+0x10/0x10 [ 407.648697][ T9567] rxrpc_send_data+0xb08/0x27b0 [ 407.653576][ T9567] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 407.659934][ T9567] ? try_to_wake_up+0x9c3/0x1470 [ 407.664901][ T9567] ? __pfx_rxrpc_send_data+0x10/0x10 [ 407.670203][ T9567] ? do_raw_spin_unlock+0x13c/0x8b0 [ 407.675425][ T9567] ? __pfx_default_wake_function+0x10/0x10 [ 407.681253][ T9567] ? rcu_is_watching+0x15/0xb0 [ 407.686046][ T9567] rxrpc_do_sendmsg+0x1569/0x1910 [ 407.691104][ T9567] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 407.696504][ T9567] ? rxrpc_sendmsg+0x127/0x920 [ 407.701313][ T9567] ? rxrpc_sendmsg+0x5d8/0x920 [ 407.706110][ T9567] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 407.711246][ T9567] __sock_sendmsg+0x221/0x270 [ 407.715965][ T9567] ____sys_sendmsg+0x52a/0x7e0 [ 407.720773][ T9567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.726083][ T9567] ? __fget_files+0x2a/0x410 [ 407.730696][ T9567] ? __fget_files+0x2a/0x410 [ 407.735307][ T9567] __sys_sendmmsg+0x36a/0x720 [ 407.740016][ T9567] ? __pfx___sys_sendmmsg+0x10/0x10 [ 407.745258][ T9567] ? __pfx_lock_release+0x10/0x10 [ 407.750301][ T9567] ? kstrtouint_from_user+0x128/0x190 [ 407.755724][ T9567] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 407.761645][ T9567] ? ksys_write+0x22a/0x2b0 [ 407.766174][ T9567] ? __pfx_lock_release+0x10/0x10 [ 407.771225][ T9567] ? vfs_write+0x730/0xd30 [ 407.775675][ T9567] ? __mutex_unlock_slowpath+0x21e/0x790 [ 407.781351][ T9567] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 407.787351][ T9567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.793686][ T9567] ? do_syscall_64+0x100/0x230 [ 407.798465][ T9567] __x64_sys_sendmmsg+0xa0/0xb0 [ 407.803352][ T9567] do_syscall_64+0xf3/0x230 [ 407.807887][ T9567] ? clear_bhb_loop+0x35/0x90 [ 407.812587][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.818501][ T9567] RIP: 0033:0x7fcca437ff19 [ 407.822932][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.842554][ T9567] RSP: 002b:00007fcca50a3058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 407.850987][ T9567] RAX: ffffffffffffffda RBX: 00007fcca4545fa0 RCX: 00007fcca437ff19 [ 407.858983][ T9567] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000003 [ 407.866977][ T9567] RBP: 00007fcca50a30a0 R08: 0000000000000000 R09: 0000000000000000 [ 407.874961][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.882947][ T9567] R13: 0000000000000000 R14: 00007fcca4545fa0 R15: 00007ffe9e5cdbd8 [ 407.890919][ T9567] [ 407.894091][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.622031][ T9580] 9pnet_fd: Insufficient options for proto=fd [ 408.860912][ T9557] tty tty22: ldisc open failed (-12), clearing slot 21 [ 409.204918][ T9586] FAULT_INJECTION: forcing a failure. [ 409.204918][ T9586] name failslab, interval 1, probability 0, space 0, times 0 [ 409.261024][ T9586] CPU: 0 UID: 0 PID: 9586 Comm: syz.2.998 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 409.271661][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 409.281742][ T9586] Call Trace: [ 409.285036][ T9586] [ 409.287983][ T9586] dump_stack_lvl+0x241/0x360 [ 409.292689][ T9586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.297934][ T9586] ? __pfx__printk+0x10/0x10 [ 409.302554][ T9586] ? fs_reclaim_acquire+0x93/0x130 [ 409.307692][ T9586] ? __pfx___might_resched+0x10/0x10 [ 409.312987][ T9586] should_fail_ex+0x3b0/0x4e0 [ 409.317671][ T9586] should_failslab+0xac/0x100 [ 409.322347][ T9586] __kmalloc_noprof+0xdd/0x4c0 [ 409.327105][ T9586] ? tomoyo_encode+0x26f/0x540 [ 409.331868][ T9586] tomoyo_encode+0x26f/0x540 [ 409.336459][ T9586] tomoyo_realpath_from_path+0x59e/0x5e0 [ 409.342092][ T9586] tomoyo_mount_permission+0x3bf/0xb80 [ 409.347593][ T9586] ? stack_depot_save_flags+0x37/0x940 [ 409.353046][ T9586] ? tomoyo_mount_permission+0x298/0xb80 [ 409.358675][ T9586] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 409.364679][ T9586] ? hook_sb_mount+0x10b/0x420 [ 409.369439][ T9586] ? security_sb_mount+0x22/0x2f0 [ 409.374461][ T9586] security_sb_mount+0xe0/0x2f0 [ 409.379310][ T9586] path_mount+0xb9/0xfa0 [ 409.383555][ T9586] ? kmem_cache_free+0x195/0x410 [ 409.388494][ T9586] ? user_path_at+0x44/0x60 [ 409.392997][ T9586] __se_sys_mount+0x2d6/0x3c0 [ 409.397675][ T9586] ? __pfx___se_sys_mount+0x10/0x10 [ 409.402870][ T9586] ? do_syscall_64+0x100/0x230 [ 409.407635][ T9586] ? __x64_sys_mount+0x20/0xc0 [ 409.412403][ T9586] do_syscall_64+0xf3/0x230 [ 409.416915][ T9586] ? clear_bhb_loop+0x35/0x90 [ 409.421600][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.427490][ T9586] RIP: 0033:0x7f904717ff19 [ 409.431900][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.451497][ T9586] RSP: 002b:00007f9047f92058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.459906][ T9586] RAX: ffffffffffffffda RBX: 00007f9047345fa0 RCX: 00007f904717ff19 [ 409.467888][ T9586] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 409.475867][ T9586] RBP: 00007f9047f920a0 R08: 0000000020000100 R09: 0000000000000000 [ 409.483838][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.491819][ T9586] R13: 0000000000000000 R14: 00007f9047345fa0 R15: 00007ffc7ea6ede8 [ 409.499806][ T9586] [ 409.502860][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.512704][ T9586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 409.523475][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.565784][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.795597][ T5901] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 410.686558][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 410.702920][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.714842][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.716363][ T9613] FAULT_INJECTION: forcing a failure. [ 410.716363][ T9613] name failslab, interval 1, probability 0, space 0, times 0 [ 410.728966][ T5901] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 410.747049][ T9613] CPU: 0 UID: 0 PID: 9613 Comm: syz.2.1006 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 410.755752][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.757727][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.757743][ T9613] Call Trace: [ 410.757752][ T9613] [ 410.757761][ T9613] dump_stack_lvl+0x241/0x360 [ 410.757793][ T9613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.774984][ T5901] usb 5-1: Product: syz [ 410.776050][ T9613] ? __pfx__printk+0x10/0x10 [ 410.776082][ T9613] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 410.776103][ T9613] ? __pfx___might_resched+0x10/0x10 [ 410.776128][ T9613] ? __asan_memset+0x23/0x50 [ 410.776153][ T9613] should_fail_ex+0x3b0/0x4e0 [ 410.783156][ T5901] usb 5-1: Manufacturer: syz [ 410.787065][ T9613] should_failslab+0xac/0x100 [ 410.787100][ T9613] __kmalloc_node_noprof+0xe1/0x4d0 [ 410.787120][ T9613] ? __kvmalloc_node_noprof+0x72/0x190 [ 410.787146][ T9613] __kvmalloc_node_noprof+0x72/0x190 [ 410.787170][ T9613] io_ring_ctx_alloc+0x800/0x1990 [ 410.787196][ T9613] io_uring_create+0x40/0xc00 [ 410.787220][ T9613] __se_sys_io_uring_setup+0x2ba/0x330 [ 410.787251][ T9613] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 410.787286][ T9613] ? do_syscall_64+0x100/0x230 [ 410.792585][ T5872] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 410.796614][ T9613] ? do_syscall_64+0xb6/0x230 [ 410.796647][ T9613] do_syscall_64+0xf3/0x230 [ 410.796670][ T9613] ? clear_bhb_loop+0x35/0x90 [ 410.796699][ T9613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.796722][ T9613] RIP: 0033:0x7f904717ff19 [ 410.796739][ T9613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.796755][ T9613] RSP: 002b:00007f9047f91fe8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 410.796777][ T9613] RAX: ffffffffffffffda RBX: 00007f9047345fa0 RCX: 00007f904717ff19 [ 410.796792][ T9613] RDX: 00000000200004c0 RSI: 0000000020000400 RDI: 0000000000002c0c [ 410.811826][ T5901] usb 5-1: SerialNumber: syz [ 410.811983][ T9613] RBP: 0000000020000400 R08: 0000000000000000 R09: 00000000200004c0 [ 410.812001][ T9613] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 410.812014][ T9613] R13: 0000000020000480 R14: 0000000000002c0c R15: 00000000200004c0 [ 410.812041][ T9613] [ 410.955583][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 410.960471][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.132332][ T5901] usbhid 5-1:1.0: can't add hid device: -22 [ 411.170029][ T5901] usbhid 5-1:1.0: probe with driver usbhid failed with error -22 [ 411.216157][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.286327][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.355799][ T5901] usb 5-1: USB disconnect, device number 20 [ 411.417832][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 411.502240][ T5872] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 411.512424][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.524400][ T5872] usb 1-1: config 0 descriptor?? [ 411.742303][ T29] audit: type=1800 audit(1733990808.151:37): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1008" name="bus" dev="overlay" ino=980 res=0 errno=0 [ 412.188016][ T5872] microsoft 0003:045E:07DA.0009: item fetching failed at offset 30/34 [ 412.209359][ T5872] microsoft 0003:045E:07DA.0009: parse failed [ 412.217621][ T5872] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 413.150739][ T5872] usb 1-1: USB disconnect, device number 22 [ 414.476990][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 414.488037][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 414.499961][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1017'. [ 414.510863][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1017'. [ 416.593532][ T9689] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1024'. [ 416.603134][ T9689] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1024'. [ 416.785298][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 417.086417][ T8] usb 1-1: device descriptor read/64, error -71 [ 417.379254][ T9692] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1026'. [ 417.560258][ T29] audit: type=1800 audit(1733990813.971:38): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1028" name="bus" dev="overlay" ino=1161 res=0 errno=0 [ 418.037598][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 418.406052][ T8] usb 1-1: device descriptor read/64, error -71 [ 418.526251][ T8] usb usb1-port1: attempt power cycle [ 419.791784][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 420.066181][ T8] usb 1-1: device not accepting address 25, error -71 [ 421.449788][ T9748] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1041'. [ 422.015521][ T5819] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 422.901721][ T5819] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 422.911456][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.924472][ T5819] usb 5-1: config 0 descriptor?? [ 422.928621][ T9776] FAULT_INJECTION: forcing a failure. [ 422.928621][ T9776] name failslab, interval 1, probability 0, space 0, times 0 [ 422.934862][ T5819] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 422.943861][ T9776] CPU: 0 UID: 0 PID: 9776 Comm: syz.0.1051 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 422.962270][ T9776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.972335][ T9776] Call Trace: [ 422.975636][ T9776] [ 422.978575][ T9776] dump_stack_lvl+0x241/0x360 [ 422.983267][ T9776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.988496][ T9776] ? __pfx__printk+0x10/0x10 [ 422.993110][ T9776] ? __kmalloc_cache_noprof+0x48/0x390 [ 422.998589][ T9776] ? __pfx___might_resched+0x10/0x10 [ 423.003904][ T9776] should_fail_ex+0x3b0/0x4e0 [ 423.008604][ T9776] should_failslab+0xac/0x100 [ 423.013292][ T9776] __kmalloc_cache_noprof+0x70/0x390 [ 423.018574][ T9776] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 423.024906][ T9776] vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 423.031057][ T9776] drm_atomic_get_crtc_state+0x17f/0x400 [ 423.036702][ T9776] drm_atomic_get_plane_state+0x443/0x500 [ 423.042438][ T9776] drm_client_modeset_commit_atomic+0x19b/0x7d0 [ 423.048719][ T9776] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 423.055480][ T9776] ? __mutex_lock+0x37f/0xee0 [ 423.060178][ T9776] ? __pfx___mutex_lock+0x10/0x10 [ 423.065198][ T9776] ? drm_client_dev_restore+0xae/0x270 [ 423.070672][ T9776] drm_client_modeset_commit_locked+0xe0/0x520 [ 423.076841][ T9776] drm_client_modeset_commit+0x4a/0x70 [ 423.082294][ T9776] drm_fb_helper_lastclose+0xbb/0x180 [ 423.087669][ T9776] drm_fbdev_client_restore+0x34/0x40 [ 423.093038][ T9776] drm_client_dev_restore+0x132/0x270 [ 423.098426][ T9776] drm_release+0x335/0x410 [ 423.102843][ T9776] ? __pfx_drm_release+0x10/0x10 [ 423.107778][ T9776] __fput+0x23c/0xa50 [ 423.111767][ T9776] task_work_run+0x24f/0x310 [ 423.116354][ T9776] ? filp_close+0x28/0x40 [ 423.120681][ T9776] ? __pfx_task_work_run+0x10/0x10 [ 423.125793][ T9776] ? syscall_exit_to_user_mode+0xa3/0x340 [ 423.131514][ T9776] syscall_exit_to_user_mode+0x13f/0x340 [ 423.137161][ T9776] do_syscall_64+0x100/0x230 [ 423.141764][ T9776] ? clear_bhb_loop+0x35/0x90 [ 423.146445][ T9776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.152337][ T9776] RIP: 0033:0x7f56db77ff19 [ 423.156783][ T9776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.176382][ T9776] RSP: 002b:00007f56dc4d1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 423.184797][ T9776] RAX: 0000000000000004 RBX: 00007f56db945fa0 RCX: 00007f56db77ff19 [ 423.192766][ T9776] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 423.200732][ T9776] RBP: 00007f56dc4d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 423.208695][ T9776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.216684][ T9776] R13: 0000000000000000 R14: 00007f56db945fa0 R15: 00007ffc2f61f7f8 [ 423.224674][ T9776] [ 423.531751][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.709264][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.745690][ T9781] veth1_to_team: entered promiscuous mode [ 423.785320][ T9780] veth1_to_team: left promiscuous mode [ 423.801971][ T5819] usb 5-1: USB disconnect, device number 21 [ 425.519236][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 426.021840][ T9827] openvswitch: netlink: IP tunnel dst address not specified [ 428.096347][ T9870] vlan2: entered promiscuous mode [ 428.101418][ T9870] vlan2: entered allmulticast mode [ 429.394875][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 430.438687][ T9907] loop9: detected capacity change from 0 to 7 [ 430.472459][ T5872] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 430.490710][ T9907] Dev loop9: unable to read RDB block 7 [ 430.497145][ T9907] loop9: unable to read partition table [ 430.503041][ T9907] loop9: partition table beyond EOD, truncated [ 430.510033][ T9907] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.629997][ T5872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.666948][ T9912] netlink: 'syz.2.1093': attribute type 3 has an invalid length. [ 430.696314][ T5872] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.706514][ T5872] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.715705][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.416503][ T9912] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1093'. [ 431.420053][ T9895] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 431.444146][ T5872] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.900570][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.909267][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.014524][ T8] usb 4-1: USB disconnect, device number 17 [ 434.974266][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 435.085549][ T5819] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 435.261715][ T5819] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.292331][ T5819] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.432543][ T5819] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.557721][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.635986][ T9962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 435.701153][ T5819] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.753931][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.401143][ T9962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.409816][ T9962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.482424][ T8] usb 4-1: USB disconnect, device number 18 [ 439.162752][ T9983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1111'. [ 439.406054][ T5871] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 439.625293][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 439.673490][ T5871] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 439.789102][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.985470][ T5871] usb 5-1: Product: syz [ 439.995776][ T5871] usb 5-1: Manufacturer: syz [ 440.010591][ T5871] usb 5-1: SerialNumber: syz [ 440.020181][ T5871] usb 5-1: config 0 descriptor?? [ 440.028817][ T5871] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 440.045545][ T5819] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 440.132779][T10013] ------------[ cut here ]------------ [ 440.138544][T10013] WARNING: CPU: 1 PID: 10013 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 440.148083][T10013] Modules linked in: [ 440.152015][T10013] CPU: 1 UID: 0 PID: 10013 Comm: syz.0.1121 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 440.162827][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 440.172974][T10013] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 440.178751][T10013] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 fa fc 1a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 aa f8 1a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 d8 fc 1a f8 85 ed 0f 8e 49 [ 440.198449][T10013] RSP: 0018:ffffc9000fe2f078 EFLAGS: 00010283 [ 440.204542][T10013] RAX: ffffffff89846546 RBX: 00000000fffbffea RCX: 0000000000080000 [ 440.212576][T10013] RDX: ffffc9000c319000 RSI: 0000000000003f18 RDI: 0000000000003f19 [ 440.220682][T10013] RBP: dffffc0000000000 R08: ffffffff89846536 R09: 1ffff11005729444 [ 440.228756][T10013] R10: dffffc0000000000 R11: ffffed1005729445 R12: dffffc0000000000 [ 440.236840][T10013] R13: ffff88802b94a140 R14: 00000000ffffffea R15: 0000000000000000 [ 440.244860][T10013] FS: 00007f56dc4d16c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 440.253874][T10013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.260539][T10013] CR2: 000000110c2e40aa CR3: 0000000027670000 CR4: 00000000003526f0 [ 440.268610][T10013] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.276663][T10013] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.283209][T10002] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 440.284702][T10013] Call Trace: [ 440.284718][T10013] [ 440.284729][T10013] ? __warn+0x165/0x4d0 [ 440.284754][T10013] ? sk_skb_reason_drop+0x87/0x380 [ 440.295060][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.295814][T10013] ? report_bug+0x2b3/0x500 [ 440.318973][T10013] ? sk_skb_reason_drop+0x87/0x380 [ 440.324156][T10013] ? handle_bug+0x60/0x90 [ 440.328587][T10013] ? exc_invalid_op+0x1a/0x50 [ 440.333321][T10013] ? asm_exc_invalid_op+0x1a/0x20 [ 440.338460][T10013] ? sk_skb_reason_drop+0x76/0x380 [ 440.343641][T10013] ? sk_skb_reason_drop+0x86/0x380 [ 440.348836][T10013] ? sk_skb_reason_drop+0x87/0x380 [ 440.353996][T10013] ? sk_skb_reason_drop+0x86/0x380 [ 440.359191][T10013] ? ip_rcv_finish_core+0x129f/0x1b50 [ 440.364615][T10013] ip_rcv_finish_core+0xfde/0x1b50 [ 440.369815][T10013] ip_sublist_rcv+0x3b1/0xab0 [ 440.374554][T10013] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 440.379848][T10013] ? skb_orphan+0xae/0xd0 [ 440.384231][T10013] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.389443][T10013] ip_list_rcv+0x42b/0x480 [ 440.393949][T10013] ? __pfx_ip_list_rcv+0x10/0x10 [ 440.398984][T10013] ? __pfx_ip_list_rcv+0x10/0x10 [ 440.403973][T10013] __netif_receive_skb_list_core+0x94e/0x980 [ 440.410059][T10013] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 440.416741][T10013] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 440.423301][T10013] ? read_tsc+0x9/0x20 [ 440.427480][T10013] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.433855][T10013] netif_receive_skb_list_internal+0xa51/0xe30 [ 440.440132][T10013] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.446549][T10013] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 440.453320][T10013] ? __pfx_eth_type_trans+0x10/0x10 [ 440.458630][T10013] ? __phys_addr+0xba/0x170 [ 440.463186][T10013] ? build_skb_around+0x111/0x260 [ 440.468296][T10013] ? __xdp_build_skb_from_frame+0x313/0x650 [ 440.474244][T10013] netif_receive_skb_list+0x55/0x4b0 [ 440.479627][T10013] bpf_test_run_xdp_live+0x1b9f/0x21f0 [ 440.485148][T10013] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 440.491149][T10013] ? bpf_test_run_xdp_live+0x5d6/0x21f0 [ 440.496776][T10013] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 440.502627][T10013] ? synchronize_rcu+0x11b/0x360 [ 440.507654][T10013] ? __pfx_synchronize_rcu+0x10/0x10 [ 440.513019][T10013] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 440.519380][T10013] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 440.525338][T10013] ? _copy_from_user+0x99/0xc0 [ 440.530223][T10013] ? bpf_test_init+0x15a/0x180 [ 440.535045][T10013] ? xdp_convert_md_to_buff+0x5b/0x330 [ 440.540598][T10013] bpf_prog_test_run_xdp+0x805/0x11e0 [ 440.546100][T10013] ? __pfx_lock_release+0x10/0x10 [ 440.551181][T10013] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 440.557071][T10013] ? __fget_files+0x2a/0x410 [ 440.561714][T10013] ? __fget_files+0x2a/0x410 [ 440.566385][T10013] ? fput+0x21b/0x290 [ 440.570425][T10013] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 440.576329][T10013] bpf_prog_test_run+0x2e4/0x360 [ 440.581341][T10013] __sys_bpf+0x48d/0x810 [ 440.585677][T10013] ? __pfx___sys_bpf+0x10/0x10 [ 440.590477][T10013] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.596617][T10013] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 440.602996][T10013] ? do_syscall_64+0x100/0x230 [ 440.607900][T10013] __x64_sys_bpf+0x7c/0x90 [ 440.612413][T10013] do_syscall_64+0xf3/0x230 [ 440.617009][T10013] ? clear_bhb_loop+0x35/0x90 [ 440.621748][T10013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.627741][T10013] RIP: 0033:0x7f56db77ff19 [ 440.632208][T10013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.651901][T10013] RSP: 002b:00007f56dc4d1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.660407][T10013] RAX: ffffffffffffffda RBX: 00007f56db945fa0 RCX: 00007f56db77ff19 [ 440.668483][T10013] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 440.676538][T10013] RBP: 00007f56db7f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 440.684558][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.692635][T10013] R13: 0000000000000000 R14: 00007f56db945fa0 R15: 00007ffc2f61f7f8 [ 440.700705][T10013] [ 440.703781][T10013] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 440.711075][T10013] CPU: 1 UID: 0 PID: 10013 Comm: syz.0.1121 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 440.721851][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 440.731921][T10013] Call Trace: [ 440.735214][T10013] [ 440.738158][T10013] dump_stack_lvl+0x241/0x360 [ 440.742873][T10013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.748104][T10013] ? __pfx__printk+0x10/0x10 [ 440.752727][T10013] ? vscnprintf+0x5d/0x90 [ 440.757076][T10013] panic+0x349/0x880 [ 440.760979][T10013] ? __warn+0x174/0x4d0 [ 440.765181][T10013] ? __pfx_panic+0x10/0x10 [ 440.769619][T10013] __warn+0x344/0x4d0 [ 440.773606][T10013] ? sk_skb_reason_drop+0x87/0x380 [ 440.778715][T10013] report_bug+0x2b3/0x500 [ 440.783041][T10013] ? sk_skb_reason_drop+0x87/0x380 [ 440.788149][T10013] handle_bug+0x60/0x90 [ 440.792303][T10013] exc_invalid_op+0x1a/0x50 [ 440.796805][T10013] asm_exc_invalid_op+0x1a/0x20 [ 440.801652][T10013] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 440.807369][T10013] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 fa fc 1a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 aa f8 1a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 d8 fc 1a f8 85 ed 0f 8e 49 [ 440.826968][T10013] RSP: 0018:ffffc9000fe2f078 EFLAGS: 00010283 [ 440.833033][T10013] RAX: ffffffff89846546 RBX: 00000000fffbffea RCX: 0000000000080000 [ 440.840999][T10013] RDX: ffffc9000c319000 RSI: 0000000000003f18 RDI: 0000000000003f19 [ 440.848961][T10013] RBP: dffffc0000000000 R08: ffffffff89846536 R09: 1ffff11005729444 [ 440.856937][T10013] R10: dffffc0000000000 R11: ffffed1005729445 R12: dffffc0000000000 [ 440.864923][T10013] R13: ffff88802b94a140 R14: 00000000ffffffea R15: 0000000000000000 [ 440.872920][T10013] ? sk_skb_reason_drop+0x76/0x380 [ 440.878028][T10013] ? sk_skb_reason_drop+0x86/0x380 [ 440.883142][T10013] ? sk_skb_reason_drop+0x86/0x380 [ 440.888252][T10013] ? ip_rcv_finish_core+0x129f/0x1b50 [ 440.893642][T10013] ip_rcv_finish_core+0xfde/0x1b50 [ 440.898769][T10013] ip_sublist_rcv+0x3b1/0xab0 [ 440.903456][T10013] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 440.908656][T10013] ? skb_orphan+0xae/0xd0 [ 440.912989][T10013] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.918109][T10013] ip_list_rcv+0x42b/0x480 [ 440.922529][T10013] ? __pfx_ip_list_rcv+0x10/0x10 [ 440.927467][T10013] ? __pfx_ip_list_rcv+0x10/0x10 [ 440.932403][T10013] __netif_receive_skb_list_core+0x94e/0x980 [ 440.938401][T10013] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 440.944992][T10013] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 440.951500][T10013] ? read_tsc+0x9/0x20 [ 440.955582][T10013] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.961938][T10013] netif_receive_skb_list_internal+0xa51/0xe30 [ 440.968093][T10013] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.974418][T10013] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 440.981112][T10013] ? __pfx_eth_type_trans+0x10/0x10 [ 440.986323][T10013] ? __phys_addr+0xba/0x170 [ 440.990820][T10013] ? build_skb_around+0x111/0x260 [ 440.995839][T10013] ? __xdp_build_skb_from_frame+0x313/0x650 [ 441.001735][T10013] netif_receive_skb_list+0x55/0x4b0 [ 441.007072][T10013] bpf_test_run_xdp_live+0x1b9f/0x21f0 [ 441.012529][T10013] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 441.018436][T10013] ? bpf_test_run_xdp_live+0x5d6/0x21f0 [ 441.023985][T10013] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 441.029781][T10013] ? synchronize_rcu+0x11b/0x360 [ 441.034719][T10013] ? __pfx_synchronize_rcu+0x10/0x10 [ 441.040018][T10013] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 441.046274][T10013] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 441.052172][T10013] ? _copy_from_user+0x99/0xc0 [ 441.056937][T10013] ? bpf_test_init+0x15a/0x180 [ 441.061701][T10013] ? xdp_convert_md_to_buff+0x5b/0x330 [ 441.067153][T10013] bpf_prog_test_run_xdp+0x805/0x11e0 [ 441.072522][T10013] ? __pfx_lock_release+0x10/0x10 [ 441.077546][T10013] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 441.083345][T10013] ? __fget_files+0x2a/0x410 [ 441.087931][T10013] ? __fget_files+0x2a/0x410 [ 441.092516][T10013] ? fput+0x21b/0x290 [ 441.096494][T10013] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 441.102300][T10013] bpf_prog_test_run+0x2e4/0x360 [ 441.107239][T10013] __sys_bpf+0x48d/0x810 [ 441.111477][T10013] ? __pfx___sys_bpf+0x10/0x10 [ 441.116244][T10013] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.122217][T10013] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.128564][T10013] ? do_syscall_64+0x100/0x230 [ 441.133330][T10013] __x64_sys_bpf+0x7c/0x90 [ 441.137748][T10013] do_syscall_64+0xf3/0x230 [ 441.142250][T10013] ? clear_bhb_loop+0x35/0x90 [ 441.146943][T10013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.152842][T10013] RIP: 0033:0x7f56db77ff19 [ 441.157260][T10013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.176869][T10013] RSP: 002b:00007f56dc4d1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.185291][T10013] RAX: ffffffffffffffda RBX: 00007f56db945fa0 RCX: 00007f56db77ff19 [ 441.193274][T10013] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 441.201238][T10013] RBP: 00007f56db7f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 441.209204][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.217169][T10013] R13: 0000000000000000 R14: 00007f56db945fa0 R15: 00007ffc2f61f7f8 [ 441.225165][T10013] [ 441.228325][T10013] Kernel Offset: disabled [ 441.232639][T10013] Rebooting in 86400 seconds..