last executing test programs: 8.162953806s ago: executing program 2 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0108000000000000000000000000080003400000003c08000540000000250900020073797a300000000008000a40000000000900010073797a310000000008000640ffffff000c000b"], 0x80}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000fce) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, 0x0, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x404, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, {0x6, @random="3c892cc215c5"}, 0x64, {0x2, 0x4e24, @private=0xa010100}, 'syz_tun\x00'}) read$FUSE(r4, 0x0, 0x0) 8.092012848s ago: executing program 2 (id=779): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000070096d400000000001d8d51410000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000000000000000000ff0000de18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003", @ANYRES32=0x0], 0x7c}}, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) sendmsg$nl_route_sched_retired(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)=@newtaction={0x248, 0x30, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{0x234, 0x1, [@m_ipt={0x204, 0x1f, 0x0, 0x0, {{0x8}, {0x184, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xce, 0x6, {0xc0a4, 'raw\x00', 0x5, 0xfc, "a3ee55a833a6270d56941d445328c79057ef5c3433c66647cd412122a4dd6b7a9365d0b03eb1ec3c2fab81fa14e043ec5334cb29bc0f50960845ba993f47e6039385043f0bfdc9256b59122a6cb3f6d59f9ffd7b6b77f6f23dbeb8c188c543f6bcb2452b84ffde4a329a9e2402a3b0152640174b7174ea801fefdac82f33cc725c81925baf26e1805cd196970b38889b57d4c6e3e3d2c2a75cf10cbbb8d1df13359351e8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_TARG={0x74, 0x6, {0x1, 'filter\x00', 0x7, 0x4, "bb646d0b651a2c1e160850fd72dc3baa4285b58d82f94ee044e7b42d9277b7fe5ef322887c6b141ccc3344fb69aa72c739d17d42b12a3769dd234bc106357b0051f1db1611389ad7187f"}}]}, {0x5b, 0x6, "ded657ad2e0fb8f4c23940aa608c6499d9d258e83960d8b8b2d382e2dd0162b20824a5b93952d5a9baa3fe15cb3e47e457b3af5fbe0baa714f7fc706929a3f040a1a4b27af9e44efa3db5ef6b4b2e31db86a314b16df0d"}, {0xc}, {0xc}}}, @m_ipt={0x2c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x248}}, 0x20000000) recvmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1}, 0x5}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x3b, 0xff, 0xa, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x10, 0xe892, 0xe241}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x1, 0x7, 0xfffff323, 0x80, {{0x17, 0x4, 0x3, 0x27, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@end, @rr={0x7, 0x1b, 0x82, [@dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @local, @private=0xa010101]}, @timestamp={0x44, 0x2c, 0x95, 0x0, 0x5, [0xfffffff9, 0x2, 0x1, 0x5, 0x10001, 0x2, 0x2, 0x5, 0xd3, 0x5]}]}}}}}) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x81]}}]}}]}, 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000840)=ANY=[@ANYBLOB="0800a2d9", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf251700000058000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468310000000000000000000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="340cda00", @ANYRES8=r6, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYBLOB="e6e0ffc96dfa4bdf64dde1b5abe3fae77ee865cbaa06637e0ea9c27871d969ffb1a1b7f67bbe5ef7e52dcb3136e6e4a10e2a553bf4d99bf4d2c640c830a5f668ab", @ANYBLOB="9100acde0000d200", @ANYRES16, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB='\b\x00W_', @ANYRES32=r9, @ANYBLOB="34000180140002006772657461703000000000000000000008000100", @ANYRESDEC=r3, @ANYBLOB="1400020077673200"/20], 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.033224574s ago: executing program 0 (id=782): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x6, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000004, 0x4132, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000002380)='>\xc6\xab\xb5>\xc6Z\v\xb5Zw\xde\xce\xc6/\x7fende') r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314752}}) openat$audio1(0xffffffffffffff9c, 0x0, 0x8102, 0x0) 7.02572822s ago: executing program 4 (id=783): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0) r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fdatasync(r2) socket(0x200000000000011, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x200000000003, 0x87) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x822b01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x41) 6.920571971s ago: executing program 0 (id=785): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000000540)=""/102400, 0x19000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7bb, 0xc400) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={'batadv0\x00', 0x7, 0x4}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) socket(0x10, 0x2, 0x0) 6.918333456s ago: executing program 2 (id=786): openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=r3, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040084) 6.217789102s ago: executing program 0 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)='affs\x00', 0x0, &(0x7f0000000a80)=',\xdf') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000002cc0), &(0x7f0000002d80)=0x10) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000002d40)=0x10e) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, r8, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r10) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = gettid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, r10, r11, 0x109, 0xf3}, 0x0, 0x0, 0x7, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x0, 0x8, r9, r12}) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x8001) r14 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940)={0x0}, &(0x7f0000000980)=0xc) getresgid(&(0x7f0000002b00), &(0x7f0000002b40), &(0x7f0000002b80)=0x0) sendmmsg$unix(r1, &(0x7f0000002c80)=[{{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)="601b0fe6f6479b065c19c0ff058d0f6c2d8369d13d777a55a510d279697621e1f61afd23f7f000a05e1e998a2f11d1cb31b3ea679a12dd8615911f5bf93dbf6909a32b41eb79dad584fbecb7957e11cc1d492efd9bf39fd792fa4f7c5f122c679423862f610cb4a0ece0cc5a4c201e38baa76ac32d8b261bf36c8fbd86bb6620e85f60d61cb8dd978412b326d10ce81b489326a969b9b1e872744af73bf55cc3720606374faddf155f2cfb2ffb7d184f5b1b19ddaf115cfe2ff0ca2223dd7a0186e1e81f9f640e", 0xc7}, {&(0x7f0000000240)="4e3c8285f7aac7a3d46e903ef25a57fef6193629c13b710222400033eb26915ec5faca60ec51fff5af296c98c8e74c4962a6cc07e33b2df67a3b95bc29356dae6c7815bb94e3f67a1f2a5dd63829682e82c069a86150b96e61a114dddde43de5cbe374433b6a241c0ab33b27790d0e05e762d81bd2b887672bd4743e4ac36032f1bcec", 0x83}, {&(0x7f00000001c0)="cce081c0656242", 0x7}, {&(0x7f0000000380)="409b60afb1c846bd0d20701ffa409e4bbc5063bc7e725c99823139b1c0df1af949817edcdf7e2937dd2adb19df63907b54e267ba7868d3d14393ad7607dc047e3025b0f3127b31114c67cd19612f3541b65d510fac01f05373ebb1210b7ae8e8e7b925fe28ba5ba8062e75f1715995394d39e461d9ad9b8c", 0x78}, {&(0x7f0000000400)="c61a27d8a8e0b2d7281d8c2d109318d52b0b4155a07d4fcdc9f9ea450bf125153776156b49f38f2062eadc8899b16e574e0b3ff7c938557d53c8e6270a7f6b1d28edaa47122020bb2a9f0f7281f39500f79d8944d0106c546346f07e2fed26c6f5cec40ec171d4364c5bdf816b51bd4b069ca8407aca8ecd134af8547f7976b7996d72bcb062bf5abbc64722dbc6780801689f7545774629701bdf4cb08e4a97ea75a05170c426c6849e758c59bc7a213a511ffdb48479934fa81131139e773db8a0f4f5afd74d1f272482", 0xcb}, {&(0x7f0000000300)="2f0d874c8bd8f136c6a3c1c02fc5600ee75b6d", 0x13}, {&(0x7f0000000500)="84bd166f7d7741257782d4f766c2f75bb54334d94337e261c56c33b99b0d65c624f7d3f54a81c10dfc", 0x29}, {&(0x7f0000000540)="a85d9f3a8bcfb2bfbf44652054bafdd187137db6a097b9452a8c6bf04c4241d3f54cd6416678ee0d38b145f8a1766180b44c3a2fc2eb5b33f8554fc8102a1ecf2c22782e964ea2a5b3d566b347ef84d4f351f5883bea4795169fb7f2a16fed59b21b6022d3bc3c34239e5ad53194bd5614eee8f1a2209796b14f78efcfbb0f33e0cfda202928787bee9fbcc24206244e402bd1cdf806e1ee8bc0d44dad52", 0x9e}, {&(0x7f0000000600)="cfb3861d54396902efc391970df8a29a476024e4175c9465082f785de812b6877c0027e66bc34c072ef0628ebf799250e4d104198d9775558a07edd2807e0655ad8f3fe6d521d3eef0d3daa8a8bc85b845ddf1a436c110b9c1611a3ff0484d98ff9de01a065f8d6eb2559351900f3ca585621e6ab0", 0x75}], 0x9, &(0x7f0000002bc0)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r11}}}, @rights={{0x28, 0x1, 0x1, [r0, r13, r1, r1, r1, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee01, r16}}}], 0xa0, 0x20000880}}], 0x1, 0x20004041) 6.165689349s ago: executing program 4 (id=789): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) (fail_nth: 3) 5.63035366s ago: executing program 1 (id=790): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) fanotify_init(0x200, 0x0) dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.4916254s ago: executing program 0 (id=791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) bind$inet6(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x147}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.463389189s ago: executing program 4 (id=792): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000009000071123b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x120) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x84) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10) fcntl$setstatus(r4, 0x4, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 5.131544269s ago: executing program 1 (id=794): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006d00010000000000000000000000000043df"], 0x20}}, 0x40) r1 = io_uring_setup(0x1fd1, &(0x7f0000000540)={0x0, 0xa8eb, 0x10, 0x2, 0x4000000}) io_uring_enter(r1, 0x2ddd, 0x32b4, 0x1c, &(0x7f00000005c0)={[0x2]}, 0x8) ioperm(0x7, 0x5, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.378961423s ago: executing program 3 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0x80000000005, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) dup(r2) llistxattr(0x0, 0x0, 0x0) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) 3.994917782s ago: executing program 4 (id=796): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006e6515d028c348650b82a088b251761dd399ee9a1610d61c96f1523f5e436f4ffc27a740a2e873c948e103caa568cb33010c8a7f0fdb07c90dbb3cfbe5a6e793ec1e49bb98da8c3209c5716fdb35f0fb534859920a714e31e5db51213bbe483766db84e2a13111b2b84db4edfddd7f32b2a1ed6f7e2d3b2c7af946e80d082f6ed241d29d14ce81e35a3ce68821"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) (async, rerun: 64) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000080), 0x4) (async, rerun: 64) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) (async) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) (async) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) (async, rerun: 32) read$FUSE(r5, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r8, r5, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async, rerun: 64) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) (rerun: 64) sendfile(r9, r10, 0x0, 0x100001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 3.994066073s ago: executing program 1 (id=797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x301, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000040)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0019"], 0x34}}, 0xc000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0xd4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xd4}}, 0x0) 3.049341855s ago: executing program 3 (id=798): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000000540)=""/102400, 0x19000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7bb, 0xc400) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={'batadv0\x00', 0x7, 0x4}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) socket(0x10, 0x2, 0x0) 3.015627007s ago: executing program 1 (id=799): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.810877379s ago: executing program 1 (id=800): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xc0, 0xb, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xaf}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8a}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a40)=0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r8 = syz_open_pts(0xffffffffffffffff, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="7d03020000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f0000002dc0)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2200c0}, 0xc, &(0x7f0000002bc0)=[{&(0x7f00000004c0)={0x55c, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x4, 0x22}, @generic="ed98a912a3ad4937b2ada43bdaba40fb107602caff87f9b613be8236ccec071d8301", @generic="89b84c22fe2340a2355db2c085916a376194ee8f1e282843f2290743266491a94fd2a5a127605bb73a229deaf1d31632488bc5cfaf98dcfa1ee99432bdb3e044cfd89b900261fd466008cf46f761d865efb9d2308c3e99b9ca0b596033f9a2eced55202f01fa8a19715d0e2be0c265dcef9f49506205c8deaca9241deb8a7710278f09fd074a0c0344cc7ac0c869ae431ae9f0326799190167c0c8f8973391020a27", @nested={0x2de, 0x136, 0x0, 0x1, [@generic="711c955ca2ec8eb4c8d45d3055b021515a987744491abbcacbdc38bdd54b385592c0382f1f9315e9c7be931b7bae8d4281f42993bad9e469877368338d1840be870f7e0670d3dc1bff18835d2b2bbf866136e97629dbc7641b8c086e61e3e1dfc63e8fe235df0e028ada71eac487e4e222f1f28132a8220ba5a42070b298cccbfad39455e3e955a351c4e2a5448ec0141810f415c207128935043ab8c5", @typed={0x8, 0x64, 0x0, 0x0, @str='(*^\x00'}, @generic="82dce90266fbee4bd78020425325103846e4dcc1825124e556f004728a62013259a68dee8a616a79272a3f2d0c2feb92d3f38e3c82d68310a7179b7aae2fe90e911f83cf8c3e4ee936b8256aeb4a27a00b0c647d65b3cda2f4f426d06f63e60d8a7dd51f7328566910f494b990b3235349ce535b22b0372d247c5e5eee747af77b8b25de70576c5f36d1420cdab8bea8f9b8fa53396962dc186e7ddcfe9e75f1a528399adcd19a7cdc802c5d65665557", @generic="d831a41688fb02973a9e53d03391e4891001eb05a9013d252c67a00c88fbb4f3c70d085bab7078430a47038724305d92c0f31c4758c09c11c608d444", @typed={0x8, 0x104, 0x0, 0x0, @fd=r2}, @typed={0x6, 0xfe, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x907}, @typed={0xff, 0x6c, 0x0, 0x0, @binary="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"}, @generic="bdb463acbe3b3439522893918b484b841332b248e7784fc11f92aee8692a473cf8635c3fabbfb3a40f", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @nested={0xb0, 0x44, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @fd=r0}, @typed={0xa4, 0x127, 0x0, 0x0, @binary="fbc1fd0cba147e7a65a0b37cb1d72c26f1c1b687aae4b70149c09d4d8c132101675cf47305733d65f8b8a78f99f99146f604e06b2e8823cbd36cee75601baae4a900e8791a293bd429e3441f2ee8fbf810af196c024071a5ea7d2f0ac15591b6026088af5cf5e9ef0b85cc5ee2bdc1869bb74fe754eaee463bc4699542af509a299747622365c226eb8498c0c553420619b0feee8e276a0dec089c8960a37e00"}]}, @generic="ff86507457c80694f4d663ee9b65d0862af9515470024d7df9f8acb288cc1bd6221d649f45098a65247158227f870065df6565a3a41f379dff36c5bd4bdbf215140b9d10eb60e906436b9f4d9858cdff313be59b47fa70f296d1fa9424a05f8c03041f424e97ddfb7158ce7b6550ecfe2dfbdf59e0976417c7e5c4ce43d1fbb3033d07c034599734e64188e32645a614e5f0cf89d6584413703c650ae52021fb29fa89437d06c4ca1b3f4ec9ab804a6822c5900d05f086f672f013dadbea2536d28ddc79f51af8b650958c89dbe01619c5ff52c8d249b572722c4757fc6a10665dc9628fef2b2c064452822a7d972ae0e6d3"]}, 0x55c}, {&(0x7f0000000b40)={0x190, 0x11, 0x100, 0x70bd25, 0x25dfdbfe, "", [@nested={0x180, 0xb6, 0x0, 0x1, [@generic="0278e09477fdd9119e9248e2bf1b0940bfce0dd76fbba0b5b84c2d87312323e294e9fb78fbda4783796318c7f16f6619aa1bd3c86f49cf269422586cfe30d8e1a4511363ed2d82bf4932122880e3fe4ee79b8466605fee0e4b810bc61c6b9ed93bdd5ddf5a7131fea27389bf4b263aedf68649997cf485008564586a98a6b5", @typed={0x8, 0xd3, 0x0, 0x0, @ipv4=@empty}, @generic="d9884bf21f0ec5a7e71d0286c727f9624826e5ea1c9f7768392be148adfa9bf791dc34e6d42019ef9af68254aac39bffc740d9cfc154994c591840b953de5bd07bc83d7c55d22a7e39d4d52deebe6dac6551c10e250502f8604a146b68b0a8a5181b536db306380e426bcc27a26ca78ff13c2812a0752a2501e7125b24353f46d825bac6e276d7264e733a35daab0524de302c4366cd9dc3fda7cf684b1c16588d30cf9c8685d89f58470d4406d69af41c970caaa2233dc612d5bb88f8bb5b9996a968ce4b65b85e30d03d432abedb08af19240ab8e806a569797370f264e99bf29f3e1b43c282fe90699ca1aa4e7c97012c030b92"]}]}, 0x190}, {&(0x7f0000000d00)={0x23c, 0x2a, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@generic="1973df96a35fb3352413e6fbf858ff9e42a92d72c8dec98d8f3723dbe04e48322a699532a7c2456d55bebf91de6fa49e2cb1f5b9e940f19dc46776de16a785fe9ef06d3d87192dafbae4d4b51307e8e740865b7b8a83903d5126fa8f7f2d293a221cbd2ff682700856ed12f33dfc6fb65a85876c8d3bb1e98c18904505c7527b7a7f885dd582bc091012167632efc7b9f5130eb0c38cc27db4cb123f368c691f61ca8fa1dfe711a96c23f20a639e3cb6aa097355a63a1998224862c362916fce638625eada", @typed={0x14, 0x101, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="0d7e878839933f9dca8209ccb4699cbde3b0ac48d6d40130798fe8915f35cd289012a2d45cde927d7c1dc58881ef70eabd157dd498b4579e40228a46253afb014138ee1282f2406c2957a211cb69799803ccc014d9d1a0cf654ecd9683d32ed95c0b8ed6bf1dd613c4ecd5bd38db98aec2c93c8fe3763c86fec48785661867a0d03f129ad6834b1d", @generic="2fee81f6731c5fc4232546147f1a23ac8fcce0592fbdc249d81842ac3f9715af70ae64e33c0904ee65e1ebbbc43e9b28a8693ef50a3bd47d173618186f9339db245dc3b656dba715ea67d24b4d78f8354604373731d12339bb0d991c2f65864e11cf3fb29b7f60d45f04be3ae9b005aa043e322a0eb81576b24eff7feba24d2a8a10bd0e7c153d4d230ebe6bdef612904ed38b0390d97bbc56eafa11c7434f4a708a1b9067be397b701fc197f0ad4c5b08b340cb7899d63a878c81bbfd08b995fa38892496f4e0770a56"]}, 0x23c}, {&(0x7f0000001200)={0x240, 0x34, 0x400, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x34, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x68}, @nested={0x221, 0x8, 0x0, 0x1, [@generic="ef0b164f5d6ba2e0e6c3c73e481b9bb5dff9d9fa2d43b6b7b47b95c5d6348a5e2de5c91c1898564f116f8f379afe4fdc6d7840e8d1846793e8f97000dcec6b75b13ce248408ac27b41b9ed67c011a52b36ab0c20d5f3fdf945358dde203075debd62961812fd55e0e4efc2e0ce236e39f5c32649413ec4e67a2498afd739299466b49afb69a68624ab5ddf6f52b035e8c48a0e3f09de2c5148fc87ade9b42b9b9abc", @typed={0x8, 0x143, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x110, 0x0, 0x0, @pid}, @generic="e4dee8a967c7cd7afe5cc55f7ae54a49616bce73619c79adefb7d9e1c039ceb3bdf95e78cc4ab3f808754903a3c7517d0d67161899388dd37b7bd65262fa0ad2a5e9834e2ee3b20140846c7cb8b77722635ef0a38aad1f1f6e711998546ca6b6778e230b06262a5654218710c4f21ba8d8b9ed9c80b99758d4e9b03fe564084676caaceef64c720af2ccd594497d63fe2bef503997305c8e5ef6504bb8", @generic="5ca220a6e49a3e8c3f39ac216a3bf450d66df3b41f6f4c3364d4641fa7c5716acdb7f40d6505e09d2b3c38249faa71e4ef924c8de7722f4b9080adec1a8023caa0e604b82e2c43da4a2820b46896eb6545867aa9cff4ee9f40217d9cfc8c016eec9f92c22b205b25a7a6114e8dc2f923a0b872fd0185a10c57d4c9e75a985ee62a9d38be2562fe19476c46dc0b245a310c53f9409184573c1d3d9fa91b412c1767f0889bcf9604d015d182c34cf8f03fe6cb88da62c22447d414", @typed={0x8, 0x14b, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x1}]}]}, 0x240}, {&(0x7f0000001880)={0x324, 0x2f, 0x2, 0x70bd26, 0x25dfdbff, "", [@nested={0x311, 0xc6, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @str=')):\x00'}, @typed={0x8, 0x12d, 0x0, 0x0, @u32=0x230b}, @generic="b46eb469da6349c5e077b1f208e0322b3f177884489be6b83e61a334b6635ad436bea674a120d2b2d52bed713b62e665c61cee3a33e4837c73cf4c99c91bb09958b12964619e246ba6d70c491f39cb7b84fdd1b64eaf31a3f9c9b49dfed438d352b6f3292c80aabfe1538f851f44f3898ccc", @generic="67fa984e942d808ac028a3117fa667337dce1f9ddac335fa6b8c6302a9b351cccd962d5b03a8bbe1be6a5cca0553046b93e56c3f71d16dcd77a1143164357333a159b732d2968dd3e4555925e9ff45c7de8e021d67285f54ee631c0ccc5146a1f413e76766fdf5f4e5925fd0e30c03cd8cf48bf6f05188538a5a1e4b8c9808c141141f1ed09ad2a052441b8a33b3a35793746efd85f66785ed516589107bbdcbf23098a1ced9358d910862d415cdf16b1a5b0b729b04c4da9bfd996076f852950b5bc602ac98e1255ad132992af05259daaaf4e7408740a72e20913783ed628900", @generic, @generic="d607abfac6157d7fa2692f546e99b0b8552c017cad9dde14de9517952526da0a2eef38e229ccee03bdddf3fc073b33bf42b6e084c8b826b8b6c03fc7423d933633fbf12e70597d7c382766f41486a0e07a0720697512719a", @generic="409d4cc5cbad5ffcf8514fa2d51d4ee386ce9ac31e28a37a59293bba810913d67e420432b03ab7b08763e1e06764acecb89f7fbe0e40314125993cfa32428354d83958b7a2ff11679dcdadfb4846d09b2cc80f23c590a1a3446a90152d29123911ea6ee39858970751e13b69f16db42ea7455d2b8e6b5e02f41d8c2a8b487d3d642db4a59099ad1a3294287fbf33fcfbba0539b9d21ab6056daef58ac3a370fe822196dceff944a0d4ffebecc8c6d2c6290d0188723909", @generic="c5a210120532f6a16d59cc1c576a80ddd6739106bd57c9988997adef5dca39bf0267f450a01ffc3126c4b10d04bd1e3435dfca3c77388262c9a70d10c4fc94bebbdcfb2d80c9d633995beb9708b7a7adb00dccb3bfe5d847d7b46d5785ed5307eb00d73400b1bcd9cb58add1e6398548d4bb8264839d203d4dc64550ed44ab0074615c3aad0f35e9d82886d5f6c0cc6f72019d21d4d9410e33a5d6"]}]}, 0x324}], 0x5, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r2, r2, r6, r1, r0, r8]}}, @rights={{0x34, 0x1, 0x1, [r2, r0, r2, r2, r0, r1, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r2, r1, r0, r1, r12, r2]}}], 0x100, 0x1}, 0x24000001) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 2.180135902s ago: executing program 0 (id=801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.137137839s ago: executing program 3 (id=802): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000002a00)=""/4046, 0xfce}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f00000007c0)=""/172, 0xac}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000180)=""/48, 0x30}], 0xa}, 0x0) 2.019615152s ago: executing program 2 (id=803): r0 = socket$unix(0x1, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$uid(0x3, 0xee01, 0x2004) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 1.81840876s ago: executing program 2 (id=804): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) fanotify_init(0x200, 0x0) dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.766124198s ago: executing program 2 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0x80000000005, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) dup(r2) llistxattr(0x0, 0x0, 0x0) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) 1.71900599s ago: executing program 4 (id=806): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000009000071123b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x120) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x84) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10) fcntl$setstatus(r4, 0x4, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 1.706308727s ago: executing program 3 (id=807): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006d00010000000000000000000000000043df"], 0x20}}, 0x40) r1 = io_uring_setup(0x1fd1, &(0x7f0000000540)={0x0, 0xa8eb, 0x10, 0x2, 0x4000000}) io_uring_enter(r1, 0x2ddd, 0x32b4, 0x1c, &(0x7f00000005c0)={[0x2]}, 0x8) ioperm(0x7, 0x5, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.474704585s ago: executing program 3 (id=808): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0) r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fdatasync(r2) socket(0x200000000000011, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x200000000003, 0x87) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x822b01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x41) 696.295985ms ago: executing program 4 (id=809): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) userfaultfd(0x80001) openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$TCXONC(r0, 0x4b3a, 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xfffffffd}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, @remote, @mcast1}}) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000040)="0000000000000018ff6943b87902f5d9f27dbafff200000000861f4104bfeacd", 0x20, r4) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000180)={[{0x8, 0x3ff, 0x10, 0x5, 0x6, 0xc8, 0x5, 0x1, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffffa}, {0x0, 0x5, 0x6d, 0x2, 0x0, 0x81, 0x6, 0x9, 0x1, 0x1, 0x81, 0x7, 0x7}, {0xffffffff, 0xbe1, 0xa, 0x18, 0xf5, 0x6, 0x6, 0x5, 0x8, 0x9, 0x3, 0xc4, 0x7}], 0x76469741}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x80000000000001, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0) 685.675611ms ago: executing program 1 (id=810): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) fallocate(r2, 0x0, 0x0, 0xceec) pread64(r0, &(0x7f0000002180)=""/4105, 0x1009, 0x0) 587.016047ms ago: executing program 0 (id=811): socket$inet6(0xa, 0x3, 0xa) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="1da97993050240d7230fb3661ea9f971992efc439fd7e3a9c1a6e53f05cae3d4679de0051285f7920cd0e78ce0d367138d12ca2b959a1a9fdd3c507efa680ce9f9fb55672020f2d62ff6f2ee6aa96e6d7c3bd60109363dbe6a152d8346c5c889b87da81b6d833b212cd16725f7c627324a87ea26cbf32ef892f859c50c1a8bfc035fcede55284e7df97a7b26276fd9dd9e4321be9f0eefe7d951a39d6643c82b987930a6a586250c57c71bd6edaee9f715c54167afa53390f5e53e02ccfbc116861aecea0063bc1e5e2e2fe25ea759", 0xcf}, {&(0x7f0000000e80)="2f00a29ad9bc934428cb37cdf608e1e9635a79b20d38714766ea81b41780217f3c7b5f971080920538e53bf8760f9eefe47300d50684362e19d01a79a434e90de9d493e3452bf006e1a4913d9a1ce69f3af21094ec43909179ab4cc4725a8438992e53e413bb56425b0b26bd002a5d9c7b56fbe467dbfe8060394ae0c6242d3edd21659c9df715d2aaa48d711d7d5d65", 0x90}, {&(0x7f0000000780)="570a2cbad191d565d056d14ba16e460fe5d417af608a66595b47c8c41a73e8d4b4cf863318b4d546e7f961a869c350c9110d979b843a1c854ffa1b590dd4cad01dfaae4632c6e199244db6e9775d0a0828f225b412a8a321f923eba0d4ee496b749b88b5b3f0090c48868f2df20ed4d6ef872eb3e5777630ae83577c50f9f953949fbdc5857ee72b6f8897f2cfd59182971beda59000ac5e21b8c7105d277802d38087bea0c373acc16700959d973fbbacdcec73", 0xb4}, {&(0x7f00000002c0)="3cf7c93c4c868995da02336e87d3383a092ae4227b423c4be19a4dcf12e881b08999f9495af06cba9e66cdc25cba6a0f5174c6b07771706734f006d646b6f1d1e6", 0x41}, {&(0x7f0000000840)="cda6d2e323a674c106c938c94d86e2b6ab5aa8dbf89701cbd2a010969f48a5bd6e2ba680cc0778e1e797ed6b3ac06fd5da8e450983ee53adc38396ae3e52d1f25dfdd1e371bce73c8e8e73a5c6f4bc7656300edd010edb65c474b50ca661ad06349293ca8e444a1ef71c37a069482b6e728afbb93d996c2e800f79fc24984589eefcd163fc246d80a82e0b9fe60a8b219b9e0e9808427b780f6822e42af49a201122757a17a7a473b5c167ed5a4718ce8d51c5d71e3664766cfca28f6e6ed8ed1b818897a277ca3a1aa2e2e6e9961220cd7b872b30b3bfc7b3b09f70080033c50bdf9db5", 0xe4}], 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290000005c3500000000000100000000"], 0x18}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x10, @mcast1}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000a00)="3a753c045f870c4b8a5398f1b77b65c668d165c8e86dc907e8a2c855e64cb970e4da915c4b4b5d5a12a329f6075af965dfc2ce2442a214293aebcc71", 0x3c}, {&(0x7f0000000a40)="edeaca522d23bde08f0477fe313b1f36800fb3fc0e39320016e3711adc9351c3350b3a963656491addfd32f8a7a2d8a2b0625bf97f818291fbb110f088e673cf6e", 0x41}, {&(0x7f0000000ac0)="4634e4bfe41dfaedf3b24d9a740abb0905e34b91eee025e52e7069deb603f1c1aad54abc0978ab84976f2d7ea209cd58855d6488e77e32b9a37c9b304bbabe1a295c06afd8f4fd05e029565e8729a57d1f921813946cee8f71c675dbc0cf71854c3197cbdf90972695e0711f4d19dc784f172531251d692978f0106ea0d336a4008b084c676fc81903379b9f1d1926e83c8ca1c30414c79f1f7a4c5568fad658", 0xa0}, {&(0x7f0000000b80)="77f4eb0b1e0b91312d54bdb4ed79defbd5f6545bfd1a63c2f86033a11f888e52f388ef", 0x23}, {&(0x7f0000000bc0)="e2be1932f3c010081ff5a3ff3fe8c20345a4031e42ddf536d70c3647ece96382bba1244e23a4aa284442906cedbc51", 0x2f}], 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="180004000000000029000000040000001100000000000000"], 0x18}}, {{&(0x7f0000000d00)={0xa, 0x4e23, 0xfe9, @local, 0x3}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000000d40)="3b4780ed6f16c1c07ab0a8490b5b88c7f18c9239b6047f783eecf67b3dc7", 0x1e}, {&(0x7f0000000d80)="49a3a1a3", 0x4}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000001dc0)="c5298417f9e3d6c1af468984c05e677712cffb7cac46d505bdad8d1183a5347ad8a2410ca4c0d0ef1ca6bcbb3acf6db93332c757", 0x34}, {&(0x7f0000001e00)="2dca12e7e2beca3f075b06c261ee027a1a92e66bfcf77bfd98c66c37ad0d68e06e24044b61ff0e092103ff7fe6003098745e6e811554c8f9dbc7c24623ee47200ff0c99b04c428da90cf26fb3ce95214f3409d8cb7cc9c25f0be7490e52cd85f767d7755f4635e666e55f9b6c043fd73e0", 0xffffffffffffffea}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="600000000000000029000000370000000608000000000000c20400000002c910fe800000000000000000000000000036040100040104071800000003044000020100000000000000090000000000000004010401060000000000000502dc09c900fe8800000000000000000000000001010001000100f0a88326000000000000aa21362d79667544078ac333"], 0x60}}, {{&(0x7f0000001f80)={0xa, 0x4e22, 0x2, @private1, 0x40}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001fc0)="3f1b62d277316d57fc0a8578e3874b7dc0982c62a10b82d1fc6c539dc3b98189aa8a0ed13211548efcdbfe081be12662ff4bf1fe1ffe7a1ac3479eb7abf028a8a299f9", 0x43}], 0x1, &(0x7f0000002440)=ANY=[@ANYBLOB="00010000000000002900000004000000871c0000000000000730000000050a0480ff0f000000000000000700000000000000feffffffffffffff81000000000000000100000000000000c20400000006c2040000000107480000000010010000033600000000000007000000000000000700000000000000090000000000000000000000000000000300000000000000ff0300000000000008000000000000000d49397934abdf7feb79628ddc3cc2b9a2e1f7a75caac9686595daa180997f3692536ce731e1ef9bf051bb8becb415dacafb5011391e125a8f2d5865d0413d996a230f41fe21b33cc062ed01040000000004018001090000000000000000000014eb000000000000290000003e0000006108000000000000140000000000000029000000430000000200000000000000140000000000000029000000430000000300000000000000300000000000000029000000370000001d02000000000000c910fe88000000000000000000000000000105020001000014000000000000002900000043000000ff0700000000000068000000000000002900000039000000890a020500000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001fc0200000000000000000000000000009876390fbfb53c172094cb77825097911b72747345c69a5be184e572bf5f80f7daacb064efd2c7d986910c42226580c3802f924033f958653c9983c0b6f189a043de52e7b78693fc06b716c2d6ac8e5f711be889cec3951c95b7dc014f36b8598a358f26f2b0a7a99611e43694159450e7eee301270af406b4ba3767a925d0855d44de1a473bc948ff77f2ea86adb7093fcd54359b216307a5cbd21f9f88f2e2c802e8d8b7b9f6a55d4c4dc623b9322de8141acd2357b411dbfe1b380049d3d92aa4cf1708cc1732adc03f92d3dd1311f9a5342d9312918a1e3c7657d76b7e2245b8a6"], 0x1f8}}], 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x44) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xffffff9f, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/3, 0x3, 0x0, 0xd}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x2180, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8, {0x7fffffff}}, './file0\x00'}) r9 = syz_io_uring_setup(0x830, &(0x7f0000000340)={0x0, 0xa7f2, 0x20, 0x5, 0x1c1, 0x0, r4}, &(0x7f0000000cc0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x52, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x4}, r0, 0x3, 0x0, 0x1}) io_uring_enter(r9, 0x780, 0x0, 0xc, 0x0, 0x0) r12 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r15, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000e40)={0x8, 0x0, &(0x7f0000000280)=[@enter_looper, @enter_looper], 0x55, 0x0, &(0x7f0000000dc0)="700cb58d1e0f69e44a2e793325b8f79a4a38911af4d5fb3cd9dc10725e1e60a1b1bec7f000fe4148b37d782993979eacc4438fd6d86c1dd752497be89064158bde2bca96b6f1ef3469166ff0786cbddae77eebf5fb"}) syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r12, 0xbcf, 0xd8b9, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 0s ago: executing program 3 (id=812): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_emit_ethernet(0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd6012000800333a00fe8000000000000000000000000000f05c6300000000000000000000000000aa0802906100000000600008100000000000000000000000000000ffff00000000fc020000000000000000000000000000fb36ee"], 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) setfsgid(0xee00) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) kernel console output (not intermixed with test programs): +0x10/0x10 [ 169.111092][ T7097] __sys_sendmmsg+0x3ab/0x730 [ 169.115779][ T7097] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.120985][ T7097] ? __pfx_lock_release+0x10/0x10 [ 169.126098][ T7097] ? kstrtouint_from_user+0x128/0x190 [ 169.131496][ T7097] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 169.137388][ T7097] ? ksys_write+0x229/0x2b0 [ 169.141890][ T7097] ? __pfx_lock_release+0x10/0x10 [ 169.146920][ T7097] ? vfs_write+0x730/0xd30 [ 169.151336][ T7097] ? __mutex_unlock_slowpath+0x21d/0x750 [ 169.156997][ T7097] ? __fget_files+0x3f3/0x470 [ 169.161708][ T7097] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 169.167704][ T7097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.174041][ T7097] ? do_syscall_64+0x100/0x230 [ 169.178820][ T7097] __x64_sys_sendmmsg+0xa0/0xb0 [ 169.183677][ T7097] do_syscall_64+0xf3/0x230 [ 169.188189][ T7097] ? clear_bhb_loop+0x35/0x90 [ 169.192876][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.198772][ T7097] RIP: 0033:0x7f6795f7e719 [ 169.203189][ T7097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.222799][ T7097] RSP: 002b:00007f6796cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.231217][ T7097] RAX: ffffffffffffffda RBX: 00007f6796135f80 RCX: 00007f6795f7e719 [ 169.239191][ T7097] RDX: 0000000000000001 RSI: 0000000020003f40 RDI: 0000000000000003 [ 169.247160][ T7097] RBP: 00007f6796cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 169.255125][ T7097] R10: 00000000200000d0 R11: 0000000000000246 R12: 0000000000000001 [ 169.263090][ T7097] R13: 0000000000000000 R14: 00007f6796135f80 R15: 00007ffd245b6468 [ 169.271066][ T7097] [ 170.311202][ T7109] program syz.0.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.386545][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 172.574930][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 173.074615][ T7139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.098363][ T7139] batadv_slave_0: entered promiscuous mode [ 173.105679][ T7149] FAULT_INJECTION: forcing a failure. [ 173.105679][ T7149] name failslab, interval 1, probability 0, space 0, times 0 [ 173.125900][ T7149] CPU: 0 UID: 0 PID: 7149 Comm: syz.3.332 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 173.136534][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 173.146614][ T7149] Call Trace: [ 173.149914][ T7149] [ 173.152878][ T7149] dump_stack_lvl+0x241/0x360 [ 173.157591][ T7149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.162817][ T7149] ? __pfx__printk+0x10/0x10 [ 173.167449][ T7149] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 173.173022][ T7149] ? __pfx___might_resched+0x10/0x10 [ 173.178330][ T7149] should_fail_ex+0x3b0/0x4e0 [ 173.183016][ T7149] ? io_submit_one+0x154/0x18a0 [ 173.187879][ T7149] should_failslab+0xac/0x100 [ 173.192565][ T7149] ? io_submit_one+0x154/0x18a0 [ 173.197421][ T7149] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 173.202802][ T7149] io_submit_one+0x154/0x18a0 [ 173.207497][ T7149] ? __pfx_io_submit_one+0x10/0x10 [ 173.212608][ T7149] ? __might_fault+0xaa/0x120 [ 173.217286][ T7149] ? __pfx_lock_release+0x10/0x10 [ 173.222313][ T7149] ? lookup_ioctx+0x94/0x6a0 [ 173.226905][ T7149] ? __might_fault+0xaa/0x120 [ 173.231579][ T7149] ? __might_fault+0xc6/0x120 [ 173.236259][ T7149] __se_sys_io_submit+0x179/0x2f0 [ 173.241289][ T7149] ? __pfx___se_sys_io_submit+0x10/0x10 [ 173.246946][ T7149] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 173.252952][ T7149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.259313][ T7149] ? do_syscall_64+0x100/0x230 [ 173.264087][ T7149] ? do_syscall_64+0xb6/0x230 [ 173.268775][ T7149] do_syscall_64+0xf3/0x230 [ 173.273301][ T7149] ? clear_bhb_loop+0x35/0x90 [ 173.277990][ T7149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.283889][ T7149] RIP: 0033:0x7f053237e719 [ 173.288316][ T7149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.308022][ T7149] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 173.316441][ T7149] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719 [ 173.324409][ T7149] RDX: 00000000200004c0 RSI: 0000000000000001 RDI: 00007f0533194000 [ 173.332377][ T7149] RBP: 00007f05331b5090 R08: 0000000000000000 R09: 0000000000000000 [ 173.340371][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.348358][ T7149] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78 [ 173.356356][ T7149] [ 174.195988][ T7157] program syz.0.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.451334][ T7163] FAULT_INJECTION: forcing a failure. [ 174.451334][ T7163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.532212][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz.0.336 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 174.542858][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.552919][ T7163] Call Trace: [ 174.556199][ T7163] [ 174.559129][ T7163] dump_stack_lvl+0x241/0x360 [ 174.563816][ T7163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.569016][ T7163] ? __pfx__printk+0x10/0x10 [ 174.573611][ T7163] ? __pfx_lock_release+0x10/0x10 [ 174.578644][ T7163] should_fail_ex+0x3b0/0x4e0 [ 174.583320][ T7163] _copy_to_iter+0x4ae/0x1e70 [ 174.587996][ T7163] ? __virt_addr_valid+0x183/0x530 [ 174.593109][ T7163] ? __pfx__copy_to_iter+0x10/0x10 [ 174.598219][ T7163] ? __virt_addr_valid+0x183/0x530 [ 174.603324][ T7163] ? __virt_addr_valid+0x183/0x530 [ 174.608427][ T7163] ? __virt_addr_valid+0x45f/0x530 [ 174.613531][ T7163] ? __phys_addr_symbol+0x2f/0x70 [ 174.618557][ T7163] ? __check_object_size+0x48e/0x900 [ 174.623880][ T7163] seq_read_iter+0xb80/0xd70 [ 174.628486][ T7163] seq_read+0x3a9/0x4f0 [ 174.632646][ T7163] ? __pfx_seq_read+0x10/0x10 [ 174.637321][ T7163] ? __fsnotify_parent+0x20c/0x5e0 [ 174.642434][ T7163] ? __pfx___fsnotify_parent+0x10/0x10 [ 174.647898][ T7163] ? rw_verify_area+0x5c6/0x6f0 [ 174.652747][ T7163] vfs_readv+0x6bc/0xa80 [ 174.656990][ T7163] ? __pfx_seq_read+0x10/0x10 [ 174.661660][ T7163] ? __pfx_vfs_readv+0x10/0x10 [ 174.666416][ T7163] ? vfs_write+0x730/0xd30 [ 174.670838][ T7163] ? __fget_files+0x29/0x470 [ 174.675429][ T7163] ? __fget_files+0x29/0x470 [ 174.680027][ T7163] __x64_sys_preadv+0x1c7/0x2d0 [ 174.684884][ T7163] ? __pfx___x64_sys_preadv+0x10/0x10 [ 174.690254][ T7163] ? do_syscall_64+0x100/0x230 [ 174.695025][ T7163] ? do_syscall_64+0xb6/0x230 [ 174.699721][ T7163] do_syscall_64+0xf3/0x230 [ 174.704227][ T7163] ? clear_bhb_loop+0x35/0x90 [ 174.708916][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.714809][ T7163] RIP: 0033:0x7efc29b7e719 [ 174.719307][ T7163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.738917][ T7163] RSP: 002b:00007efc2a8f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 174.747420][ T7163] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7e719 [ 174.755388][ T7163] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000000005 [ 174.763354][ T7163] RBP: 00007efc2a8f5090 R08: 00000000000070ef R09: 0000000000000000 [ 174.771321][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.779284][ T7163] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68 [ 174.787526][ T7163] [ 175.698434][ T7172] tls_set_device_offload: netdev not found [ 175.801215][ T7178] FAULT_INJECTION: forcing a failure. [ 175.801215][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 175.834191][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.3.338 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 175.844845][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 175.854930][ T7178] Call Trace: [ 175.858231][ T7178] [ 175.861185][ T7178] dump_stack_lvl+0x241/0x360 [ 175.865895][ T7178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.871118][ T7178] ? __pfx__printk+0x10/0x10 [ 175.875745][ T7178] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 175.881744][ T7178] ? __pfx___might_resched+0x10/0x10 [ 175.887063][ T7178] should_fail_ex+0x3b0/0x4e0 [ 175.891746][ T7178] should_failslab+0xac/0x100 [ 175.896423][ T7178] ? __alloc_skb+0x1c3/0x440 [ 175.901018][ T7178] kmem_cache_alloc_node_noprof+0x71/0x320 [ 175.906829][ T7178] __alloc_skb+0x1c3/0x440 [ 175.911264][ T7178] ? __pfx___alloc_skb+0x10/0x10 [ 175.916202][ T7178] ? netlink_autobind+0xd6/0x2f0 [ 175.921313][ T7178] ? netlink_autobind+0x2b0/0x2f0 [ 175.926341][ T7178] netlink_sendmsg+0x638/0xcb0 [ 175.931143][ T7178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.936435][ T7178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.941804][ T7178] __sock_sendmsg+0x221/0x270 [ 175.946483][ T7178] ____sys_sendmsg+0x52a/0x7e0 [ 175.951256][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.956552][ T7178] __sys_sendmsg+0x292/0x380 [ 175.961150][ T7178] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.966270][ T7178] ? __pfx_vfs_write+0x10/0x10 [ 175.971052][ T7178] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.977402][ T7178] ? do_syscall_64+0x100/0x230 [ 175.982193][ T7178] ? do_syscall_64+0xb6/0x230 [ 175.986886][ T7178] do_syscall_64+0xf3/0x230 [ 175.991395][ T7178] ? clear_bhb_loop+0x35/0x90 [ 175.996088][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.002007][ T7178] RIP: 0033:0x7f053237e719 [ 176.006434][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.026145][ T7178] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.034572][ T7178] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719 [ 176.042543][ T7178] RDX: 0000000004008000 RSI: 0000000020000000 RDI: 0000000000000003 [ 176.050514][ T7178] RBP: 00007f05331b5090 R08: 0000000000000000 R09: 0000000000000000 [ 176.058482][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.066471][ T7178] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78 [ 176.074468][ T7178] [ 177.142252][ T7198] netlink: 276 bytes leftover after parsing attributes in process `syz.1.344'. [ 178.091197][ T7207] program syz.1.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.922592][ T7216] tipc: Enabling of bearer rejected, failed to enable media [ 180.274363][ T51] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.661797][ T7239] FAULT_INJECTION: forcing a failure. [ 180.661797][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.675366][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.2.352 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 180.685983][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.696048][ T7239] Call Trace: [ 180.699340][ T7239] [ 180.702285][ T7239] dump_stack_lvl+0x241/0x360 [ 180.706988][ T7239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.712214][ T7239] ? __pfx__printk+0x10/0x10 [ 180.716837][ T7239] should_fail_ex+0x3b0/0x4e0 [ 180.721533][ T7239] strncpy_from_user+0x36/0x260 [ 180.726406][ T7239] getname_flags+0xf1/0x540 [ 180.730926][ T7239] do_sys_openat2+0xd2/0x1d0 [ 180.735530][ T7239] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.740741][ T7239] ? rcu_is_watching+0x15/0xb0 [ 180.745530][ T7239] __x64_sys_openat+0x247/0x2a0 [ 180.750399][ T7239] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.755789][ T7239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.762139][ T7239] ? do_syscall_64+0xb6/0x230 [ 180.766834][ T7239] do_syscall_64+0xf3/0x230 [ 180.771361][ T7239] ? clear_bhb_loop+0x35/0x90 [ 180.776065][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.781971][ T7239] RIP: 0033:0x7f731db7d0b0 [ 180.786403][ T7239] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 180.806028][ T7239] RSP: 002b:00007f731e8b9b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 180.814459][ T7239] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f731db7d0b0 [ 180.822442][ T7239] RDX: 0000000000000002 RSI: 00007f731e8b9c10 RDI: 00000000ffffff9c [ 180.830425][ T7239] RBP: 00007f731e8b9c10 R08: 0000000000000000 R09: 00236f656469762f [ 180.838421][ T7239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 180.846415][ T7239] R13: 0000000000000000 R14: 00007f731dd36130 R15: 00007ffd0ec3bb98 [ 180.854423][ T7239] [ 180.928285][ T51] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 180.941963][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.014722][ T51] usb 1-1: config 0 descriptor?? [ 181.042668][ T51] gspca_main: spca505-2.14.0 probing 0733:0430 [ 181.197685][ T7244] overlayfs: failed to resolve './file0': -2 [ 181.425714][ T7248] FAULT_INJECTION: forcing a failure. [ 181.425714][ T7248] name failslab, interval 1, probability 0, space 0, times 0 [ 181.438760][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.3.357 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 181.449381][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.459460][ T7248] Call Trace: [ 181.462759][ T7248] [ 181.465708][ T7248] dump_stack_lvl+0x241/0x360 [ 181.470421][ T7248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.475650][ T7248] ? __pfx__printk+0x10/0x10 [ 181.480262][ T7248] ? fs_reclaim_acquire+0x93/0x130 [ 181.485393][ T7248] ? __pfx___might_resched+0x10/0x10 [ 181.490703][ T7248] should_fail_ex+0x3b0/0x4e0 [ 181.495401][ T7248] ? tomoyo_encode+0x26f/0x540 [ 181.500174][ T7248] should_failslab+0xac/0x100 [ 181.504854][ T7248] ? tomoyo_encode+0x26f/0x540 [ 181.509623][ T7248] __kmalloc_noprof+0xd8/0x400 [ 181.514401][ T7248] tomoyo_encode+0x26f/0x540 [ 181.519005][ T7248] tomoyo_realpath_from_path+0x59e/0x5e0 [ 181.524646][ T7248] tomoyo_path_number_perm+0x23a/0x880 [ 181.530110][ T7248] ? tomoyo_path_number_perm+0x208/0x880 [ 181.535753][ T7248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.541762][ T7248] ? __fget_files+0x29/0x470 [ 181.546354][ T7248] ? __fget_files+0x3f3/0x470 [ 181.551054][ T7248] security_file_ioctl+0xc6/0x2a0 [ 181.556083][ T7248] __se_sys_ioctl+0x47/0x170 [ 181.560676][ T7248] do_syscall_64+0xf3/0x230 [ 181.565183][ T7248] ? clear_bhb_loop+0x35/0x90 [ 181.569865][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.575762][ T7248] RIP: 0033:0x7f053237e719 [ 181.580172][ T7248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.599779][ T7248] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.608198][ T7248] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719 [ 181.616167][ T7248] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000005 [ 181.624136][ T7248] RBP: 00007f05331b5090 R08: 0000000000000000 R09: 0000000000000000 [ 181.632104][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.640070][ T7248] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78 [ 181.648059][ T7248] [ 181.684659][ T7248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.694329][ T51] gspca_spca505: reg write: error -110 [ 182.699910][ T51] spca505 1-1:0.0: probe with driver spca505 failed with error -5 [ 183.421099][ T7263] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.359' sets config #1 [ 183.436049][ T7263] overlayfs: conflicting lowerdir path [ 183.467644][ T5884] usb 1-1: USB disconnect, device number 10 [ 183.490992][ T9] IPVS: starting estimator thread 0... [ 183.589472][ T7264] program syz.4.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.599581][ T7265] IPVS: using max 16 ests per chain, 38400 per kthread [ 185.687726][ T7292] FAULT_INJECTION: forcing a failure. [ 185.687726][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 185.700761][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.3.365 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 185.711367][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 185.721437][ T7292] Call Trace: [ 185.724733][ T7292] [ 185.727847][ T7292] dump_stack_lvl+0x241/0x360 [ 185.732549][ T7292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.737766][ T7292] ? __pfx__printk+0x10/0x10 [ 185.742376][ T7292] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 185.748370][ T7292] ? __pfx___might_resched+0x10/0x10 [ 185.753677][ T7292] should_fail_ex+0x3b0/0x4e0 [ 185.758375][ T7292] should_failslab+0xac/0x100 [ 185.763068][ T7292] ? __alloc_skb+0x1c3/0x440 [ 185.767671][ T7292] kmem_cache_alloc_node_noprof+0x71/0x320 [ 185.773495][ T7292] __alloc_skb+0x1c3/0x440 [ 185.777930][ T7292] ? __pfx___alloc_skb+0x10/0x10 [ 185.782883][ T7292] ? smack_socket_getpeersec_dgram+0x220/0x410 [ 185.789069][ T7292] netlink_sendmsg+0x638/0xcb0 [ 185.793874][ T7292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.799189][ T7292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.804493][ T7292] __sock_sendmsg+0x221/0x270 [ 185.809191][ T7292] ____sys_sendmsg+0x52a/0x7e0 [ 185.813983][ T7292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.819300][ T7292] __sys_sendmsg+0x292/0x380 [ 185.823906][ T7292] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.829047][ T7292] ? __pfx_vfs_write+0x10/0x10 [ 185.833860][ T7292] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.840208][ T7292] ? do_syscall_64+0x100/0x230 [ 185.844992][ T7292] ? do_syscall_64+0xb6/0x230 [ 185.849687][ T7292] do_syscall_64+0xf3/0x230 [ 185.854204][ T7292] ? clear_bhb_loop+0x35/0x90 [ 185.858899][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.864807][ T7292] RIP: 0033:0x7f053237e719 [ 185.869229][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.888846][ T7292] RSP: 002b:00007f0533173038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.897280][ T7292] RAX: ffffffffffffffda RBX: 00007f0532536130 RCX: 00007f053237e719 [ 185.905262][ T7292] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000006 [ 185.913243][ T7292] RBP: 00007f0533173090 R08: 0000000000000000 R09: 0000000000000000 [ 185.921223][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.929209][ T7292] R13: 0000000000000000 R14: 00007f0532536130 R15: 00007ffcd76f7e78 [ 185.937204][ T7292] [ 186.406898][ T5943] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.416606][ T7296] 9pnet: Could not find request transport: f.]~gp䧊DTr7ُؗ˧$ ӯf0xffffffffffffffff [ 186.465713][ T7298] binder: 7297:7298 ioctl c0306201 20000a40 returned -14 [ 186.585601][ T5943] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 186.601159][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.757817][ T5943] usb 2-1: config 0 descriptor?? [ 186.781485][ T7307] FAULT_INJECTION: forcing a failure. [ 186.781485][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 186.794549][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.370 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 186.805172][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 186.815250][ T7307] Call Trace: [ 186.818554][ T7307] [ 186.821497][ T7307] dump_stack_lvl+0x241/0x360 [ 186.826199][ T7307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.831417][ T7307] ? __pfx__printk+0x10/0x10 [ 186.836026][ T7307] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 186.841504][ T7307] ? __pfx___might_resched+0x10/0x10 [ 186.846817][ T7307] should_fail_ex+0x3b0/0x4e0 [ 186.851523][ T7307] should_failslab+0xac/0x100 [ 186.856220][ T7307] ? rxrpc_lookup_local+0x54e/0x1890 [ 186.861535][ T7307] __kmalloc_cache_noprof+0x6c/0x2c0 [ 186.866843][ T7307] ? rxrpc_net+0x45/0x270 [ 186.871194][ T7307] rxrpc_lookup_local+0x54e/0x1890 [ 186.876327][ T7307] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.882330][ T7307] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.888680][ T7307] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 186.894245][ T7307] ? __local_bh_enable_ip+0x168/0x200 [ 186.899639][ T7307] ? lockdep_hardirqs_on+0x99/0x150 [ 186.904873][ T7307] ? __local_bh_enable_ip+0x168/0x200 [ 186.910265][ T7307] ? rxrpc_bind+0x2d7/0x700 [ 186.914788][ T7307] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 186.920538][ T7307] ? rxrpc_bind+0x38c/0x700 [ 186.925065][ T7307] rxrpc_bind+0x3b7/0x700 [ 186.929423][ T7307] __sys_bind+0x22d/0x2d0 [ 186.933769][ T7307] ? __pfx___sys_bind+0x10/0x10 [ 186.938648][ T7307] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.944986][ T7307] ? do_syscall_64+0x100/0x230 [ 186.949757][ T7307] __x64_sys_bind+0x7a/0x90 [ 186.954264][ T7307] do_syscall_64+0xf3/0x230 [ 186.958783][ T7307] ? clear_bhb_loop+0x35/0x90 [ 186.963461][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.969350][ T7307] RIP: 0033:0x7efc29b7e719 [ 186.973758][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.993359][ T7307] RSP: 002b:00007efc2a8d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 187.001773][ T7307] RAX: ffffffffffffffda RBX: 00007efc29d36058 RCX: 00007efc29b7e719 [ 187.009739][ T7307] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000007 [ 187.017711][ T7307] RBP: 00007efc2a8d4090 R08: 0000000000000000 R09: 0000000000000000 [ 187.025682][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.033649][ T7307] R13: 0000000000000000 R14: 00007efc29d36058 R15: 00007fff3d6dce68 [ 187.041631][ T7307] [ 187.176713][ T7311] program syz.3.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.932551][ T7316] FAULT_INJECTION: forcing a failure. [ 187.932551][ T7316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.964758][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: syz.0.374 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 187.975392][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 187.985465][ T7316] Call Trace: [ 187.988757][ T7316] [ 187.991698][ T7316] dump_stack_lvl+0x241/0x360 [ 187.996408][ T7316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.001627][ T7316] ? __pfx__printk+0x10/0x10 [ 188.006240][ T7316] ? __pfx_lock_release+0x10/0x10 [ 188.011292][ T7316] should_fail_ex+0x3b0/0x4e0 [ 188.015991][ T7316] _copy_from_user+0x2f/0xc0 [ 188.020601][ T7316] memdup_user+0x64/0xc0 [ 188.024869][ T7316] strndup_user+0x68/0xc0 [ 188.029219][ T7316] __se_sys_mount+0x9f/0x3c0 [ 188.033839][ T7316] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 188.039854][ T7316] ? __pfx___se_sys_mount+0x10/0x10 [ 188.045084][ T7316] ? do_syscall_64+0x100/0x230 [ 188.049873][ T7316] ? __x64_sys_mount+0x20/0xc0 [ 188.054659][ T7316] do_syscall_64+0xf3/0x230 [ 188.059187][ T7316] ? clear_bhb_loop+0x35/0x90 [ 188.063882][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.069798][ T7316] RIP: 0033:0x7efc29b7e719 [ 188.074227][ T7316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.093855][ T7316] RSP: 002b:00007efc2a8f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.102287][ T7316] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7e719 [ 188.110265][ T7316] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 188.118235][ T7316] RBP: 00007efc2a8f5090 R08: 0000000020000340 R09: 0000000000000000 [ 188.126206][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.134177][ T7316] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68 [ 188.142166][ T7316] [ 188.159159][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 188.520331][ T5943] ath6kl: Failed to read usb control message: -71 [ 189.021889][ T5943] ath6kl: Unable to read the bmi data from the device: -71 [ 189.079405][ T5943] ath6kl: unable to read target info byte count: -71 [ 189.209008][ T5943] ath6kl: Failed to init ath6kl core: -71 [ 189.219875][ T5943] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 189.340506][ T5943] usb 2-1: USB disconnect, device number 3 [ 189.724768][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 190.141925][ T25] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 190.212411][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.278310][ T25] usb 3-1: config 0 descriptor?? [ 190.324443][ T25] gspca_main: spca505-2.14.0 probing 0733:0430 [ 190.554959][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.609841][ T7343] trusted_key: encrypted_key: insufficient parameters specified [ 190.766029][ T25] gspca_spca505: reg write: error -71 [ 190.771699][ T25] spca505 3-1:0.0: probe with driver spca505 failed with error -5 [ 191.438725][ T9] usb 2-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 191.463322][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 191.528740][ T9] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 191.554333][ T25] usb 3-1: USB disconnect, device number 7 [ 191.556755][ T9] usb 2-1: Product: syz [ 191.573438][ T9] usb 2-1: Manufacturer: syz [ 191.588857][ T9] usb 2-1: SerialNumber: syz [ 193.200073][ T7369] syz.3.391: attempt to access beyond end of device [ 193.200073][ T7369] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 193.219793][ T7369] befs: (nbd3): unable to read superblock [ 193.453959][ T9] hub 2-1:189.0: bad descriptor, ignoring hub [ 193.468992][ T9] hub 2-1:189.0: probe with driver hub failed with error -5 [ 193.493985][ T9] keyspan 2-1:189.0: Keyspan - (without firmware) converter detected [ 193.571957][ T9] usb 2-1: USB disconnect, device number 4 [ 193.592095][ T9] keyspan 2-1:189.0: device disconnected [ 194.435852][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.450745][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.880303][ T5847] Bluetooth: hci5: sending frame failed (-49) [ 194.888484][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 195.132451][ T7396] Smack: duplicate mount options [ 195.364128][ T7398] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 195.372735][ T7398] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 195.381303][ T7398] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 195.656693][ T7397] netlink: 276 bytes leftover after parsing attributes in process `syz.3.400'. [ 196.855176][ T5884] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.041766][ T7411] netlink: 96 bytes leftover after parsing attributes in process `syz.2.404'. [ 197.062680][ T7414] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.403'. [ 197.115889][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 197.124154][ T5884] usb 2-1: can't read configurations, error -22 [ 197.254368][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.440790][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 197.616189][ T5884] usb 2-1: can't read configurations, error -22 [ 197.758749][ T5884] usb usb2-port1: attempt power cycle [ 198.317641][ T7424] hpfs: Bad magic ... probably not HPFS [ 198.662328][ T7426] usb usb8: usbfs: process 7426 (syz.2.408) did not claim interface 0 before use [ 198.754420][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.809171][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 198.841443][ T5884] usb 2-1: can't read configurations, error -22 [ 199.006653][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.219772][ T7434] netlink: 276 bytes leftover after parsing attributes in process `syz.2.411'. [ 199.287993][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 199.438361][ T5884] usb 2-1: can't read configurations, error -22 [ 199.463380][ T5884] usb usb2-port1: unable to enumerate USB device [ 199.754379][ T1198] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 199.944685][ T1198] usb 1-1: Using ep0 maxpacket: 16 [ 199.987297][ T1198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.059104][ T1198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.129771][ T1198] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.225138][ T1198] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.296967][ T1198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.438486][ T1198] usb 1-1: config 0 descriptor?? [ 201.983997][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 201.992177][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 201.999956][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 202.007483][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 202.014878][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 202.026829][ T1198] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input9 [ 202.303483][ T1198] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 202.467912][ T7476] hpfs: Bad magic ... probably not HPFS [ 203.087967][ T7472] netlink: 276 bytes leftover after parsing attributes in process `syz.1.423'. [ 203.224338][ T1198] usb 1-1: USB disconnect, device number 11 [ 203.694358][ T51] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.719769][ T7485] capability: warning: `syz.2.426' uses deprecated v2 capabilities in a way that may be insecure [ 203.884399][ T51] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 203.914956][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.982828][ T51] usb 5-1: Product: syz [ 204.003963][ T51] usb 5-1: Manufacturer: syz [ 204.032238][ T51] usb 5-1: SerialNumber: syz [ 204.071594][ T51] usb 5-1: config 0 descriptor?? [ 204.142242][ T7492] input: syz0 as /devices/virtual/input/input10 [ 204.320830][ T51] hso 5-1:0.0: Can't find BULK IN endpoint [ 204.353695][ T51] usb-storage 5-1:0.0: USB Mass Storage device detected [ 204.624455][ T5943] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.835806][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 204.943627][ T5943] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 205.167632][ T5943] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 205.447796][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 205.456187][ T5943] usb 4-1: Product: syz [ 205.460376][ T5943] usb 4-1: Manufacturer: syz [ 205.465053][ T5943] usb 4-1: SerialNumber: syz [ 205.522447][ T5943] usb 4-1: config 0 descriptor?? [ 205.711911][ T7511] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 205.750897][ T7511] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.434'. [ 206.434614][ T7494] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 206.566203][ T51] usb 5-1: USB disconnect, device number 8 [ 206.864389][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 207.385162][ T1198] usb 4-1: USB disconnect, device number 4 [ 209.194778][ T7553] binder: 7551:7553 ioctl 4018620d 0 returned -22 [ 209.309401][ T7553] syz_tun: entered promiscuous mode [ 209.329476][ T7553] macvtap1: entered promiscuous mode [ 209.352081][ T7553] macvtap1: entered allmulticast mode [ 209.364551][ T7553] syz_tun: entered allmulticast mode [ 209.455415][ T7553] netlink: 3 bytes leftover after parsing attributes in process `syz.4.446'. [ 209.490803][ T7553] batadv1: entered promiscuous mode [ 209.515664][ T7553] batadv1: entered allmulticast mode [ 209.921572][ T7578] 9pnet_fd: Insufficient options for proto=fd [ 210.544441][ T7586] netlink: 276 bytes leftover after parsing attributes in process `syz.2.453'. [ 211.578736][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 213.116673][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.123781][ T5905] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 213.281163][ T7626] batadv_slave_0: entered promiscuous mode [ 213.374429][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 213.388846][ T5905] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 213.433747][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.503112][ T5905] usb 4-1: config 0 has no interface number 0 [ 213.558731][ T5905] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 213.658370][ T5905] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 213.780960][ T5905] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.834472][ T5905] usb 4-1: config 0 interface 52 has no altsetting 0 [ 213.860934][ T5905] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 213.880310][ T5905] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 213.904264][ T5905] usb 4-1: Manufacturer: syz [ 213.922810][ T5905] usb 4-1: config 0 descriptor?? [ 214.903395][ T5905] usb 4-1: Can not set alternate setting to 1, error: -71 [ 214.925275][ T7645] binder: 7643:7645 ioctl 4018620d 0 returned -22 [ 214.984436][ T5905] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 215.042985][ T7645] netlink: 3 bytes leftover after parsing attributes in process `syz.1.465'. [ 215.054557][ T5905] usb 4-1: USB disconnect, device number 5 [ 215.071930][ T7645] batadv1: entered promiscuous mode [ 215.082947][ T7645] batadv1: entered allmulticast mode [ 215.245192][ T7624] dns_resolver: Unsupported server list version (0) [ 215.263897][ T7652] netlink: 120 bytes leftover after parsing attributes in process `syz.3.467'. [ 215.293806][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 215.488986][ T7669] FAULT_INJECTION: forcing a failure. [ 215.488986][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 215.545918][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.1.469 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 215.556554][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 215.566605][ T7669] Call Trace: [ 215.569873][ T7669] [ 215.572791][ T7669] dump_stack_lvl+0x241/0x360 [ 215.577483][ T7669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.582694][ T7669] ? __pfx__printk+0x10/0x10 [ 215.587289][ T7669] ? __kmalloc_noprof+0xb0/0x400 [ 215.592226][ T7669] ? __pfx___might_resched+0x10/0x10 [ 215.597514][ T7669] should_fail_ex+0x3b0/0x4e0 [ 215.602191][ T7669] ? sock_kmalloc+0xd7/0x160 [ 215.606778][ T7669] should_failslab+0xac/0x100 [ 215.611452][ T7669] ? sock_kmalloc+0xd7/0x160 [ 215.616045][ T7669] __kmalloc_noprof+0xd8/0x400 [ 215.620807][ T7669] ? __might_fault+0xaa/0x120 [ 215.625497][ T7669] sock_kmalloc+0xd7/0x160 [ 215.629921][ T7669] ____sys_sendmsg+0x216/0x7e0 [ 215.634693][ T7669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.639987][ T7669] __sys_sendmmsg+0x3ab/0x730 [ 215.644672][ T7669] ? __pfx___sys_sendmmsg+0x10/0x10 [ 215.649878][ T7669] ? __pfx_lock_release+0x10/0x10 [ 215.654904][ T7669] ? kstrtouint_from_user+0x128/0x190 [ 215.660290][ T7669] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 215.666180][ T7669] ? ksys_write+0x229/0x2b0 [ 215.670684][ T7669] ? __pfx_lock_release+0x10/0x10 [ 215.675723][ T7669] ? vfs_write+0x730/0xd30 [ 215.680149][ T7669] ? __mutex_unlock_slowpath+0x21d/0x750 [ 215.685791][ T7669] ? __fget_files+0x3f3/0x470 [ 215.690478][ T7669] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 215.696459][ T7669] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.702793][ T7669] ? do_syscall_64+0x100/0x230 [ 215.707594][ T7669] __x64_sys_sendmmsg+0xa0/0xb0 [ 215.712456][ T7669] do_syscall_64+0xf3/0x230 [ 215.716967][ T7669] ? clear_bhb_loop+0x35/0x90 [ 215.721645][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.727536][ T7669] RIP: 0033:0x7f6795f7e719 [ 215.731946][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.751547][ T7669] RSP: 002b:00007f6796c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 215.759963][ T7669] RAX: ffffffffffffffda RBX: 00007f6796136058 RCX: 00007f6795f7e719 [ 215.767929][ T7669] RDX: 0000000000000001 RSI: 0000000020000500 RDI: 0000000000000004 [ 215.775904][ T7669] RBP: 00007f6796c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.783868][ T7669] R10: 0000000004044040 R11: 0000000000000246 R12: 0000000000000001 [ 215.791837][ T7669] R13: 0000000000000000 R14: 00007f6796136058 R15: 00007ffd245b6468 [ 215.799819][ T7669] [ 216.334354][ T7682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.978936][ T5943] IPVS: starting estimator thread 0... [ 217.074399][ T7684] IPVS: using max 32 ests per chain, 76800 per kthread [ 217.109517][ T7688] xt_hashlimit: size too large, truncated to 1048576 [ 217.353082][ T7632] syz.2.463: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.454031][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.2.463 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 217.464681][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.474779][ T7632] Call Trace: [ 217.478088][ T7632] [ 217.481047][ T7632] dump_stack_lvl+0x241/0x360 [ 217.485777][ T7632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.491010][ T7632] ? __pfx__printk+0x10/0x10 [ 217.495638][ T7632] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 217.502077][ T7632] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 217.508609][ T7632] warn_alloc+0x278/0x410 [ 217.512978][ T7632] ? __pfx_warn_alloc+0x10/0x10 [ 217.517867][ T7632] ? vb2_vmalloc_alloc+0xf2/0x340 [ 217.522920][ T7632] ? __get_vm_area_node+0x23d/0x270 [ 217.528152][ T7632] __vmalloc_node_range_noprof+0x691/0x13f0 [ 217.534106][ T7632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.540474][ T7632] ? __kasan_kmalloc+0x98/0xb0 [ 217.545267][ T7632] ? vb2_vmalloc_alloc+0xb5/0x340 [ 217.550324][ T7632] vmalloc_user_noprof+0x74/0x80 [ 217.555288][ T7632] ? vb2_vmalloc_alloc+0xf2/0x340 [ 217.560346][ T7632] vb2_vmalloc_alloc+0xf2/0x340 [ 217.565231][ T7632] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 217.570712][ T7632] __vb2_queue_alloc+0xa0b/0x16f0 [ 217.575777][ T7632] vb2_core_reqbufs+0xd2e/0x17c0 [ 217.580753][ T7632] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 217.586138][ T7632] ? trace_contention_end+0x3c/0x120 [ 217.591441][ T7632] ? __mutex_lock+0x2ef/0xd70 [ 217.596145][ T7632] ? vb2_verify_memory_type+0x1f7/0x570 [ 217.601712][ T7632] vb2_ioctl_reqbufs+0x4e3/0x830 [ 217.606687][ T7632] __video_do_ioctl+0xc23/0xdd0 [ 217.611570][ T7632] ? __pfx___video_do_ioctl+0x10/0x10 [ 217.616958][ T7632] ? smack_log+0x123/0x540 [ 217.621392][ T7632] ? __might_fault+0xc6/0x120 [ 217.626093][ T7632] video_usercopy+0x89b/0x1180 [ 217.630887][ T7632] ? __pfx___video_do_ioctl+0x10/0x10 [ 217.636274][ T7632] ? __pfx_video_usercopy+0x10/0x10 [ 217.641486][ T7632] ? smack_file_ioctl+0x2f7/0x3a0 [ 217.646544][ T7632] ? __fget_files+0x3f3/0x470 [ 217.651252][ T7632] v4l2_ioctl+0x189/0x1e0 [ 217.655599][ T7632] ? __pfx_v4l2_ioctl+0x10/0x10 [ 217.660468][ T7632] __se_sys_ioctl+0xf9/0x170 [ 217.665082][ T7632] do_syscall_64+0xf3/0x230 [ 217.669611][ T7632] ? clear_bhb_loop+0x35/0x90 [ 217.674311][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.680224][ T7632] RIP: 0033:0x7f731db7e719 [ 217.684655][ T7632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.704276][ T7632] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.712722][ T7632] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719 [ 217.720713][ T7632] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000005 [ 217.728690][ T7632] RBP: 00007f731dbf175e R08: 0000000000000000 R09: 0000000000000000 [ 217.736660][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.744625][ T7632] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98 [ 217.752608][ T7632] [ 217.982825][ T7632] Mem-Info: [ 217.986693][ T7701] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 218.083648][ T7632] active_anon:359 inactive_anon:7480 isolated_anon:0 [ 218.083648][ T7632] active_file:21271 inactive_file:38121 isolated_file:0 [ 218.083648][ T7632] unevictable:782 dirty:219 writeback:0 [ 218.083648][ T7632] slab_reclaimable:10311 slab_unreclaimable:99250 [ 218.083648][ T7632] mapped:25628 shmem:4333 pagetables:788 [ 218.083648][ T7632] sec_pagetables:0 bounce:0 [ 218.083648][ T7632] kernel_misc_reclaimable:0 [ 218.083648][ T7632] free:1305985 free_pcp:5882 free_cma:0 [ 218.173631][ T7632] Node 0 active_anon:1436kB inactive_anon:30020kB active_file:85012kB inactive_file:152484kB unevictable:1592kB isolated(anon):0kB isolated(file):0kB mapped:102612kB dirty:872kB writeback:0kB shmem:15796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11272kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no [ 218.213731][ T7632] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 218.254589][ T7632] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.287967][ T7632] lowmem_reserve[]: 0 2465 2466 0 0 [ 218.293244][ T7632] Node 0 DMA32 free:1301052kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1432kB inactive_anon:29984kB active_file:84232kB inactive_file:152432kB unevictable:1592kB writepending:872kB present:3129332kB managed:2552500kB mlocked:56kB bounce:0kB free_pcp:23752kB local_pcp:832kB free_cma:0kB [ 218.490459][ T7632] lowmem_reserve[]: 0 0 0 0 0 [ 218.520931][ T7632] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 219.364706][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 220.257899][ T1198] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 220.266354][ T7632] lowmem_reserve[]: 0 0 0 0 0 [ 220.271241][ T7632] Node 1 Normal free:3907108kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.314264][ T7632] lowmem_reserve[]: 0 0 0 0 0 [ 220.318982][ T7632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 220.344296][ T7632] Node 0 DMA32: 2*4kB (UE) 1*8kB (M) 437*16kB (UME) 398*32kB (UM) 196*64kB (ME) 60*128kB (UME) 45*256kB (UME) 42*512kB (UME) 13*1024kB (ME) 9*2048kB (ME) 296*4096kB (M) = 1317152kB [ 220.384290][ T7632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 220.404510][ T7632] Node 1 Normal: 177*4kB (UME) 58*8kB (UME) 37*16kB (UME) 191*32kB (UME) 92*64kB (UME) 25*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 946*4096kB (M) = 3907140kB [ 220.445034][ T8] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 220.454590][ T7632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.464152][ T7632] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.484517][ T7632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.494063][ T7632] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.503441][ T7632] 63698 total pagecache pages [ 220.514729][ T7632] 0 pages in swap cache [ 220.518883][ T7632] Free swap = 124984kB [ 220.523037][ T7632] Total swap = 124996kB [ 220.544286][ T7632] 2097051 pages RAM [ 220.548092][ T7632] 0 pages HighMem/MovableOnly [ 220.552746][ T7632] 427074 pages reserved [ 220.574463][ T7632] 0 pages cma reserved [ 220.604375][ T1198] usb 5-1: Using ep0 maxpacket: 16 [ 220.613072][ T1198] usb 5-1: config 9 has an invalid interface number: 80 but max is 0 [ 220.664741][ T1198] usb 5-1: config 9 has no interface number 0 [ 220.675006][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 220.686201][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 220.696986][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 220.707775][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 220.718486][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 220.729319][ T1198] usb 5-1: config 9 interface 80 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 220.740326][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 220.750997][ T1198] usb 5-1: config 9 interface 80 has no altsetting 0 [ 220.785595][ T1198] usb 5-1: New USB device found, idVendor=2dc8, idProduct=6ba5, bcdDevice=59.9e [ 220.809090][ T1198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.837399][ T1198] usb 5-1: Product: syz [ 220.841614][ T1198] usb 5-1: Manufacturer: 䀁 [ 220.861041][ T1198] usb 5-1: SerialNumber: syz [ 221.295781][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 221.528586][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.551722][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.574425][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 221.713765][ T1198] usb 5-1: USB disconnect, device number 9 [ 221.808665][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 221.854625][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.888429][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.946201][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.975028][ T8] usb 2-1: config 0 descriptor?? [ 221.984705][ T51] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 222.205709][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 222.277433][ T51] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 222.353480][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.493254][ T51] usb 1-1: Product: syz [ 222.633429][ T51] usb 1-1: Manufacturer: syz [ 222.638500][ T51] usb 1-1: SerialNumber: syz [ 222.655397][ T51] usb 1-1: config 0 descriptor?? [ 223.035965][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.133649][ T7735] xt_time: unknown flags 0xc [ 223.205142][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 223.222527][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.241731][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.271015][ T25] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 223.302988][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.337717][ T25] usb 5-1: config 0 descriptor?? [ 223.369770][ T8] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.386912][ T8] usb 2-1: USB disconnect, device number 9 [ 223.405354][ T8] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 223.688071][ T51] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 224.015178][ T7779] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.027410][ T25] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 224.084527][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 224.084547][ T29] audit: type=1326 audit(1731828151.998:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.2.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f731db7e719 code=0x0 [ 224.270158][ T7786] input: syz1 as /devices/virtual/input/input11 [ 224.528198][ T7789] overlayfs: missing 'lowerdir' [ 224.632053][ T51] usb 1-1: USB disconnect, device number 12 [ 224.924176][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.935699][ T7795] batadv_slave_0: entered promiscuous mode [ 225.148528][ T3425] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 225.388340][ T7801] hpfs: Bad magic ... probably not HPFS [ 226.044402][ T51] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 226.112950][ T29] audit: type=1326 audit(1731828154.028:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 226.196135][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 226.202571][ T29] audit: type=1326 audit(1731828154.028:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 226.264349][ T29] audit: type=1326 audit(1731828154.058:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 226.366685][ T29] audit: type=1326 audit(1731828154.058:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 226.415711][ T29] audit: type=1326 audit(1731828154.068:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 226.437950][ T29] audit: type=1326 audit(1731828154.068:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 226.512953][ T29] audit: type=1326 audit(1731828154.068:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 226.597036][ T29] audit: type=1326 audit(1731828154.068:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000 [ 227.061574][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 227.554645][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 227.624432][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.744436][ T8] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 228.752599][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.762998][ T8] usb 2-1: config 0 has no interface number 0 [ 228.769390][ T8] usb 2-1: too many endpoints for config 0 interface 32 altsetting 119: 37, using maximum allowed: 30 [ 228.780718][ T8] usb 2-1: config 0 interface 32 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 228.794315][ T8] usb 2-1: config 0 interface 32 has no altsetting 0 [ 228.801033][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0310, bcdDevice=e4.df [ 228.810422][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.822666][ T8] usb 2-1: config 0 descriptor?? [ 229.008784][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'. [ 229.042971][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 229.104352][ T7818] cgroup: none used incorrectly [ 229.111215][ T8] usb 2-1: USB disconnect, device number 10 [ 229.293839][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 229.331485][ T7849] netlink: 'syz.3.507': attribute type 29 has an invalid length. [ 229.342200][ T7840] FAULT_INJECTION: forcing a failure. [ 229.342200][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.355823][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.0.508 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 229.366434][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 229.376508][ T7840] Call Trace: [ 229.379791][ T7840] [ 229.382719][ T7840] dump_stack_lvl+0x241/0x360 [ 229.387403][ T7840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.392606][ T7840] ? __pfx__printk+0x10/0x10 [ 229.397201][ T7840] ? snprintf+0xda/0x120 [ 229.401470][ T7840] should_fail_ex+0x3b0/0x4e0 [ 229.406174][ T7840] _copy_to_user+0x31/0xb0 [ 229.410603][ T7840] simple_read_from_buffer+0xca/0x150 [ 229.415985][ T7840] proc_fail_nth_read+0x1e9/0x250 [ 229.421033][ T7840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.426595][ T7840] ? rw_verify_area+0x568/0x6f0 [ 229.431451][ T7840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.437000][ T7840] vfs_read+0x1fc/0xb70 [ 229.441169][ T7840] ? fdget_pos+0x24e/0x320 [ 229.445613][ T7840] ? __pfx_vfs_read+0x10/0x10 [ 229.450309][ T7840] ? __fget_files+0x3f3/0x470 [ 229.455002][ T7840] ? fdget_pos+0x24e/0x320 [ 229.459427][ T7840] ksys_read+0x183/0x2b0 [ 229.463682][ T7840] ? __pfx_ksys_read+0x10/0x10 [ 229.468462][ T7840] ? do_syscall_64+0x100/0x230 [ 229.473241][ T7840] ? do_syscall_64+0xb6/0x230 [ 229.477924][ T7840] do_syscall_64+0xf3/0x230 [ 229.482432][ T7840] ? clear_bhb_loop+0x35/0x90 [ 229.487119][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.493019][ T7840] RIP: 0033:0x7efc29b7d15c [ 229.497441][ T7840] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 229.517050][ T7840] RSP: 002b:00007efc2a8f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.525462][ T7840] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7d15c [ 229.533436][ T7840] RDX: 000000000000000f RSI: 00007efc2a8f50a0 RDI: 0000000000000004 [ 229.541402][ T7840] RBP: 00007efc2a8f5090 R08: 0000000000000000 R09: 0000000000000000 [ 229.549370][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.557337][ T7840] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68 [ 229.565314][ T7840] [ 229.568647][ T7849] netlink: 'syz.3.507': attribute type 3 has an invalid length. [ 229.576869][ T7849] netlink: 76 bytes leftover after parsing attributes in process `syz.3.507'. [ 229.650818][ T7852] 9pnet_fd: Insufficient options for proto=fd [ 229.670150][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 230.310197][ T7870] program syz.0.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.722026][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 230.743069][ T7867] overlayfs: missing 'lowerdir' [ 230.888255][ T7873] fuse: Bad value for 'fd' [ 231.202965][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.518'. [ 231.223173][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 231.244622][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 231.689620][ T25] usb 5-1: USB disconnect, device number 10 [ 231.975895][ T7897] netlink: 276 bytes leftover after parsing attributes in process `syz.4.520'. [ 232.784967][ T7918] 9pnet_fd: Insufficient options for proto=fd [ 232.804754][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 232.879916][ T7923] fuse: Bad value for 'fd' [ 233.926133][ T5943] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 234.094371][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 234.117465][ T5943] usb 2-1: config 1 has an invalid interface number: 207 but max is 0 [ 234.159088][ T5943] usb 2-1: config 1 has no interface number 0 [ 234.191581][ T5943] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.f7 [ 234.214537][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.248032][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.533'. [ 234.257210][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 234.426869][ T7945] overlayfs: failed to resolve './file1': -2 [ 234.547901][ T5943] usb 2-1: Product: syz [ 234.797414][ T7948] hpfs: Bad magic ... probably not HPFS [ 234.944566][ T5943] usb 2-1: Manufacturer: syz [ 234.949255][ T5943] usb 2-1: SerialNumber: syz [ 235.186909][ T7915] program syz.3.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.232603][ T7954] input: syz1 as /devices/virtual/input/input12 [ 235.347641][ T29] audit: type=1107 audit(1731828163.258:44): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='mІuvj <먔^M4-Dbca#' [ 235.399958][ T7956] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 235.634663][ T7962] overlayfs: failed to resolve './file1': -2 [ 236.141210][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 236.324987][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.700842][ T8] usb 5-1: device descriptor read/64, error -71 [ 236.837216][ T5943] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 237.469846][ T5943] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 237.544350][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 237.559663][ T7977] 9pnet_fd: Insufficient options for proto=fd [ 237.604955][ T5943] dib0700: firmware download failed at 7 with -22 [ 237.633248][ T5943] usb 2-1: USB disconnect, device number 11 [ 237.720535][ T8] usb 5-1: device descriptor read/64, error -71 [ 237.903529][ T8] usb usb5-port1: attempt power cycle [ 238.257017][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 238.567786][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 238.656452][ T8] usb 5-1: device descriptor read/8, error -71 [ 238.877025][ T7999] tls_set_device_offload: netdev not found [ 240.042325][ T8011] hpfs: Bad magic ... probably not HPFS [ 240.063561][ T8013] 9pnet_fd: Insufficient options for proto=fd [ 240.397973][ T8010] overlay: filesystem on ./bus not supported as upperdir [ 241.992018][ T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 243.910413][ T8063] FAULT_INJECTION: forcing a failure. [ 243.910413][ T8063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.911843][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.2.568 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 243.911865][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 243.911876][ T8063] Call Trace: [ 243.911882][ T8063] [ 243.911898][ T8063] dump_stack_lvl+0x241/0x360 [ 243.911925][ T8063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.911945][ T8063] ? __pfx__printk+0x10/0x10 [ 243.911972][ T8063] should_fail_ex+0x3b0/0x4e0 [ 243.911993][ T8063] strncpy_from_user+0x36/0x260 [ 243.912012][ T8063] strncpy_from_user_nofault+0x71/0x140 [ 243.912031][ T8063] bpf_probe_read_compat_str+0xe9/0x180 [ 243.912056][ T8063] ? bpf_trace_run2+0x1fc/0x540 [ 243.912077][ T8063] bpf_prog_1ccb8ba97563bf77+0x41/0x64 [ 243.912093][ T8063] bpf_trace_run2+0x2ec/0x540 [ 243.912109][ T8063] ? __pfx_bpf_trace_run2+0x10/0x10 [ 243.912129][ T8063] trace_tlb_flush+0x118/0x140 [ 243.912143][ T8063] switch_mm_irqs_off+0x77a/0xa70 [ 243.912154][ T8063] ? psi_task_switch+0x387/0x7a0 [ 243.912170][ T8063] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 243.912188][ T8063] __schedule+0x10c7/0x4bd0 [ 243.912200][ T8063] ? trace_irq_enable+0x2c/0x120 [ 243.912216][ T8063] ? lockdep_hardirqs_on+0x99/0x150 [ 243.912231][ T8063] ? queue_work_on+0x25f/0x380 [ 243.912254][ T8063] ? __pfx___schedule+0x10/0x10 [ 243.912271][ T8063] ? soft_cursor+0xa9e/0xcd0 [ 243.912291][ T8063] preempt_schedule_notrace+0x100/0x140 [ 243.912310][ T8063] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 243.912329][ T8063] preempt_schedule_notrace_thunk+0x1a/0x30 [ 243.912344][ T8063] ? lock_acquire+0xd4/0x550 [ 243.912360][ T8063] rcu_is_watching+0x7e/0xb0 [ 243.912373][ T8063] lock_acquire+0xe3/0x550 [ 243.912391][ T8063] ? __pfx_lock_acquire+0x10/0x10 [ 243.912406][ T8063] ? __pfx_bit_cursor+0x10/0x10 [ 243.912424][ T8063] ? hide_cursor+0x193/0x4a0 [ 243.912438][ T8063] ? __pfx_hide_cursor+0x10/0x10 [ 243.912452][ T8063] ? atomic_notifier_call_chain+0x26/0x180 [ 243.912468][ T8063] atomic_notifier_call_chain+0x43/0x180 [ 243.912483][ T8063] ? atomic_notifier_call_chain+0x26/0x180 [ 243.912498][ T8063] do_con_write+0xab1/0x4c30 [ 243.912516][ T8063] ? desc_read+0x200/0x3f0 [ 243.912530][ T8063] ? desc_read+0x1a2/0x3f0 [ 243.912567][ T8063] ? __pfx_do_con_write+0x10/0x10 [ 243.912594][ T8063] ? __mutex_trylock_common+0x183/0x2e0 [ 243.912607][ T8063] ? __pfx___might_resched+0x10/0x10 [ 243.912623][ T8063] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.912640][ T8063] con_put_char+0x95/0xf0 [ 243.912654][ T8063] ? __pfx_con_put_char+0x10/0x10 [ 243.912668][ T8063] ? __mutex_lock+0x2ef/0xd70 [ 243.912684][ T8063] ? __mutex_unlock_slowpath+0x21d/0x750 [ 243.912697][ T8063] ? __pfx_con_put_char+0x10/0x10 [ 243.912713][ T8063] tty_put_char+0xe3/0x190 [ 243.912729][ T8063] ? __pfx_tty_put_char+0x10/0x10 [ 243.912743][ T8063] ? __pfx_bit_cursor+0x10/0x10 [ 243.912761][ T8063] do_output_char+0x6b1/0x970 [ 243.912776][ T8063] n_tty_write+0xe06/0x1230 [ 243.912799][ T8063] ? __pfx_n_tty_write+0x10/0x10 [ 243.912811][ T8063] ? __pfx_woken_wake_function+0x10/0x10 [ 243.912827][ T8063] ? __virt_addr_valid+0x183/0x530 [ 243.912838][ T8063] ? __virt_addr_valid+0x183/0x530 [ 243.912848][ T8063] ? __virt_addr_valid+0x45f/0x530 [ 243.912860][ T8063] ? __phys_addr_symbol+0x2f/0x70 [ 243.912870][ T8063] ? __check_object_size+0x48e/0x900 [ 243.912884][ T8063] ? __pfx_n_tty_write+0x10/0x10 [ 243.912894][ T8063] file_tty_write+0x546/0x9b0 [ 243.912914][ T8063] vfs_write+0xaeb/0xd30 [ 243.912931][ T8063] ? __pfx_tty_write+0x10/0x10 [ 243.912945][ T8063] ? __pfx_vfs_write+0x10/0x10 [ 243.912969][ T8063] ? fdget_pos+0x19a/0x320 [ 243.912986][ T8063] ksys_write+0x183/0x2b0 [ 243.913001][ T8063] ? __pfx_ksys_write+0x10/0x10 [ 243.913015][ T8063] ? do_syscall_64+0x100/0x230 [ 243.913030][ T8063] ? do_syscall_64+0xb6/0x230 [ 243.913047][ T8063] do_syscall_64+0xf3/0x230 [ 243.913062][ T8063] ? clear_bhb_loop+0x35/0x90 [ 243.913077][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.913090][ T8063] RIP: 0033:0x7f731db7e719 [ 243.913100][ T8063] Code: Unable to access opcode bytes at 0x7f731db7e6ef. [ 243.913106][ T8063] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.913121][ T8063] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719 [ 243.913130][ T8063] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000004 [ 243.913138][ T8063] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000 [ 243.913146][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.913153][ T8063] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98 [ 243.913171][ T8063] [ 244.246992][ T8066] tls_set_device_offload: netdev not found [ 244.342178][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 245.533003][ T8084] fuse: Unknown parameter '' [ 245.555695][ T8084] netlink: 176 bytes leftover after parsing attributes in process `syz.3.573'. [ 245.610368][ T8086] trusted_key: encrypted_key: insufficient parameters specified [ 245.644717][ T5883] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 245.799935][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 245.811508][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.812749][ T5883] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 245.812776][ T5883] usb 2-1: config 127 has no interface number 0 [ 245.812802][ T5883] usb 2-1: config 127 interface 25 has no altsetting 0 [ 245.820490][ T5883] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 245.820521][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.820543][ T5883] usb 2-1: Product: syz [ 245.820560][ T5883] usb 2-1: Manufacturer: syz [ 245.820577][ T5883] usb 2-1: SerialNumber: syz [ 246.136036][ T5883] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 246.789447][ T5883] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 247.716859][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 248.210409][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 248.297923][ T8108] overlay: ./file0 is not a directory [ 248.307962][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.321790][ T5883] usb 2-1: device firmware changed [ 248.329956][ T5883] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 248.347725][ T5883] usb 2-1: USB disconnect, device number 12 [ 248.455626][ T8116] overlayfs: missing 'lowerdir' [ 248.504311][ T5943] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 248.606169][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 248.621729][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 248.674515][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 248.706482][ T5943] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 248.731896][ T5943] usb 4-1: config 0 has no interface number 0 [ 248.758183][ T5943] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.794674][ T5943] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 248.818361][ T5943] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 248.849693][ T5943] usb 4-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 249.011660][ T5943] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.028098][ T5943] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 249.188765][ T5943] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 249.198110][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.213610][ T5943] usb 4-1: Product: syz [ 249.218770][ T5943] usb 4-1: Manufacturer: syz [ 249.223965][ T5943] usb 4-1: SerialNumber: syz [ 249.630997][ T5943] usb 4-1: config 0 descriptor?? [ 249.703781][ T8134] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 250.084695][ T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 250.654807][ T8109] syz.0.579: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 250.686593][ T8109] CPU: 1 UID: 0 PID: 8109 Comm: syz.0.579 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 250.697235][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 250.707285][ T8109] Call Trace: [ 250.710550][ T8109] [ 250.713491][ T8109] dump_stack_lvl+0x241/0x360 [ 250.718166][ T8109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.723355][ T8109] ? __pfx__printk+0x10/0x10 [ 250.727944][ T8109] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 250.734376][ T8109] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 250.740869][ T8109] warn_alloc+0x278/0x410 [ 250.745213][ T8109] ? __pfx_warn_alloc+0x10/0x10 [ 250.750098][ T8109] ? vb2_vmalloc_alloc+0xf2/0x340 [ 250.755152][ T8109] ? __get_vm_area_node+0x23d/0x270 [ 250.760364][ T8109] __vmalloc_node_range_noprof+0x691/0x13f0 [ 250.766278][ T8109] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.772609][ T8109] ? __kasan_kmalloc+0x98/0xb0 [ 250.777809][ T8109] ? vb2_vmalloc_alloc+0xb5/0x340 [ 250.782840][ T8109] vmalloc_user_noprof+0x74/0x80 [ 250.787781][ T8109] ? vb2_vmalloc_alloc+0xf2/0x340 [ 250.792807][ T8109] vb2_vmalloc_alloc+0xf2/0x340 [ 250.797838][ T8109] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 250.803300][ T8109] __vb2_queue_alloc+0xa0b/0x16f0 [ 250.808343][ T8109] vb2_core_reqbufs+0xd2e/0x17c0 [ 250.813295][ T8109] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 250.818671][ T8109] ? trace_contention_end+0x3c/0x120 [ 250.823957][ T8109] ? __mutex_lock+0x2ef/0xd70 [ 250.828640][ T8109] ? vb2_verify_memory_type+0x1f7/0x570 [ 250.834216][ T8109] vb2_ioctl_reqbufs+0x4e3/0x830 [ 250.839166][ T8109] __video_do_ioctl+0xc23/0xdd0 [ 250.844025][ T8109] ? __pfx___video_do_ioctl+0x10/0x10 [ 250.849401][ T8109] ? smack_log+0x123/0x540 [ 250.853822][ T8109] ? __might_fault+0xc6/0x120 [ 250.858504][ T8109] video_usercopy+0x89b/0x1180 [ 250.863272][ T8109] ? __pfx___video_do_ioctl+0x10/0x10 [ 250.868640][ T8109] ? __pfx_video_usercopy+0x10/0x10 [ 250.873844][ T8109] ? smack_file_ioctl+0x2f7/0x3a0 [ 250.878882][ T8109] ? __fget_files+0x3f3/0x470 [ 250.883565][ T8109] v4l2_ioctl+0x189/0x1e0 [ 250.887895][ T8109] ? __pfx_v4l2_ioctl+0x10/0x10 [ 250.892743][ T8109] __se_sys_ioctl+0xf9/0x170 [ 250.897341][ T8109] do_syscall_64+0xf3/0x230 [ 250.901873][ T8109] ? clear_bhb_loop+0x35/0x90 [ 250.906552][ T8109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.912444][ T8109] RIP: 0033:0x7efc29b7e719 [ 250.916861][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.936464][ T8109] RSP: 002b:00007efc2a8f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.944896][ T8109] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7e719 [ 250.952884][ T8109] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000005 [ 250.960876][ T8109] RBP: 00007efc29bf175e R08: 0000000000000000 R09: 0000000000000000 [ 250.968858][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.976832][ T8109] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68 [ 250.984820][ T8109] [ 251.024472][ T8109] Mem-Info: [ 251.028908][ T8109] active_anon:348 inactive_anon:13043 isolated_anon:0 [ 251.028908][ T8109] active_file:23325 inactive_file:36088 isolated_file:0 [ 251.028908][ T8109] unevictable:768 dirty:303 writeback:0 [ 251.028908][ T8109] slab_reclaimable:10134 slab_unreclaimable:100227 [ 251.028908][ T8109] mapped:31756 shmem:9913 pagetables:803 [ 251.028908][ T8109] sec_pagetables:0 bounce:0 [ 251.028908][ T8109] kernel_misc_reclaimable:0 [ 251.028908][ T8109] free:1306246 free_pcp:1510 free_cma:0 [ 251.081574][ T8109] Node 0 active_anon:1392kB inactive_anon:52328kB active_file:93228kB inactive_file:144352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127140kB dirty:1224kB writeback:0kB shmem:38116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11364kB pagetables:3276kB sec_pagetables:0kB all_unreclaimable? no [ 251.128727][ T8109] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 251.159186][ T8109] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.191100][ T8109] lowmem_reserve[]: 0 2465 2466 0 0 [ 251.196605][ T8109] Node 0 DMA32 free:1306560kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1388kB inactive_anon:52828kB active_file:92448kB inactive_file:144300kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:664kB local_pcp:360kB free_cma:0kB [ 251.271283][ T8109] lowmem_reserve[]: 0 0 0 0 0 [ 251.278540][ T8109] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 251.305440][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.316369][ T8109] lowmem_reserve[]: 0 0 0 0 0 [ 251.515067][ T8109] Node 1 Normal free:3902816kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:4320kB local_pcp:4288kB free_cma:0kB [ 252.217030][ T5943] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 252.226781][ T5943] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 252.238378][ T8109] lowmem_reserve[]: 0 0 0 0 0 [ 252.243104][ T8109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.245097][ T5943] usb 4-1: USB disconnect, device number 6 [ 252.261902][ T8109] Node 0 DMA32: 2*4kB (UM) 1*8kB (E) 27*16kB (UME) 294*32kB (UME) 10*64kB (UME) 51*128kB (UME) 37*256kB (ME) 40*512kB (UME) 19*1024kB (UME) 9*2048kB (UME) 298*4096kB (M) = 1305472kB [ 252.280238][ T8109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.292074][ T8109] Node 1 Normal: 177*4kB (UME) 58*8kB (UME) 38*16kB (UME) 185*32kB (UME) 92*64kB (UME) 25*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3902868kB [ 252.314930][ T8109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.336450][ T8109] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.370295][ T8109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.562616][ T8109] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.803587][ T8109] 66608 total pagecache pages [ 252.903888][ T8109] 0 pages in swap cache [ 252.968660][ T8109] Free swap = 124760kB [ 252.989844][ T8109] Total swap = 124996kB [ 252.994455][ T8109] 2097051 pages RAM [ 252.998599][ T8109] 0 pages HighMem/MovableOnly [ 253.003598][ T8109] 427074 pages reserved [ 253.027520][ T8109] 0 pages cma reserved [ 253.662844][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'. [ 254.048465][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 256.152452][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.158879][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.183134][ T3425] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 256.245507][ T8196] FAULT_INJECTION: forcing a failure. [ 256.245507][ T8196] name failslab, interval 1, probability 0, space 0, times 0 [ 256.312905][ T8196] CPU: 0 UID: 0 PID: 8196 Comm: syz.3.605 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 256.323570][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 256.333662][ T8196] Call Trace: [ 256.336965][ T8196] [ 256.339917][ T8196] dump_stack_lvl+0x241/0x360 [ 256.344635][ T8196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.349870][ T8196] ? __pfx__printk+0x10/0x10 [ 256.354500][ T8196] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 256.360503][ T8196] ? __pfx___might_resched+0x10/0x10 [ 256.365837][ T8196] should_fail_ex+0x3b0/0x4e0 [ 256.370521][ T8196] should_failslab+0xac/0x100 [ 256.375211][ T8196] ? __alloc_skb+0x1c3/0x440 [ 256.379810][ T8196] kmem_cache_alloc_node_noprof+0x71/0x320 [ 256.385672][ T8196] __alloc_skb+0x1c3/0x440 [ 256.390105][ T8196] ? __pfx___alloc_skb+0x10/0x10 [ 256.395059][ T8196] ? __pfx___might_resched+0x10/0x10 [ 256.400359][ T8196] alloc_skb_with_frags+0xc3/0x820 [ 256.405486][ T8196] sock_alloc_send_pskb+0x91a/0xa60 [ 256.410701][ T8196] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 256.416437][ T8196] ? dev_get_by_index+0x23/0x2d0 [ 256.421401][ T8196] packet_sendmsg+0x3f33/0x6860 [ 256.426256][ T8196] ? mark_lock+0x9a/0x360 [ 256.430590][ T8196] ? mark_lock+0x9a/0x360 [ 256.434921][ T8196] ? __lock_acquire+0x1384/0x2050 [ 256.439968][ T8196] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 256.445704][ T8196] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 256.452132][ T8196] ? __pfx_lock_release+0x10/0x10 [ 256.457162][ T8196] ? __pfx_packet_sendmsg+0x10/0x10 [ 256.462377][ T8196] ? __fget_files+0x29/0x470 [ 256.467070][ T8196] ? __might_fault+0xaa/0x120 [ 256.471767][ T8196] ? __pfx_packet_sendmsg+0x10/0x10 [ 256.476974][ T8196] __sock_sendmsg+0x221/0x270 [ 256.481658][ T8196] __sys_sendto+0x39b/0x4f0 [ 256.486170][ T8196] ? __pfx___sys_sendto+0x10/0x10 [ 256.491192][ T8196] ? __mutex_unlock_slowpath+0x21d/0x750 [ 256.496849][ T8196] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.502843][ T8196] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.509183][ T8196] __x64_sys_sendto+0xde/0x100 [ 256.513973][ T8196] do_syscall_64+0xf3/0x230 [ 256.518496][ T8196] ? clear_bhb_loop+0x35/0x90 [ 256.523177][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.529074][ T8196] RIP: 0033:0x7f053237e719 [ 256.533490][ T8196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.553105][ T8196] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 256.561525][ T8196] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719 [ 256.569496][ T8196] RDX: 0000000000010012 RSI: 0000000020000180 RDI: 0000000000000003 [ 256.577469][ T8196] RBP: 00007f05331b5090 R08: 0000000020000140 R09: 0000000000000014 [ 256.585436][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.593402][ T8196] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78 [ 256.601379][ T8196] [ 256.928009][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'. [ 259.685906][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 259.873548][ T8246] trusted_key: encrypted_key: insufficient parameters specified [ 261.441046][ T8259] block device autoloading is deprecated and will be removed. [ 261.606859][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 261.644906][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 261.668536][ T8272] Bluetooth: MGMT ver 1.23 [ 262.481242][ T8279] overlayfs: failed to resolve './file1': -2 [ 264.008182][ T8293] trusted_key: encrypted_key: insufficient parameters specified [ 264.692701][ T8311] FAULT_INJECTION: forcing a failure. [ 264.692701][ T8311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.750305][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.2.642 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 264.760950][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 264.771031][ T8311] Call Trace: [ 264.774338][ T8311] [ 264.777286][ T8311] dump_stack_lvl+0x241/0x360 [ 264.781999][ T8311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.787232][ T8311] ? __pfx__printk+0x10/0x10 [ 264.791851][ T8311] ? __pfx_lock_release+0x10/0x10 [ 264.796921][ T8311] ? __lock_acquire+0x1384/0x2050 [ 264.801979][ T8311] should_fail_ex+0x3b0/0x4e0 [ 264.806694][ T8311] _copy_from_user+0x2f/0xc0 [ 264.811309][ T8311] kstrtouint_from_user+0xc6/0x190 [ 264.816454][ T8311] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 264.822213][ T8311] ? __pfx_lock_acquire+0x10/0x10 [ 264.827265][ T8311] proc_fail_nth_write+0xaa/0x2d0 [ 264.832300][ T8311] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 264.838193][ T8311] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.843831][ T8311] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.849463][ T8311] vfs_write+0x2a3/0xd30 [ 264.853709][ T8311] ? fdget_pos+0x24e/0x320 [ 264.858129][ T8311] ? __pfx_vfs_write+0x10/0x10 [ 264.862898][ T8311] ? __fget_files+0x3f3/0x470 [ 264.867580][ T8311] ? fdget_pos+0x24e/0x320 [ 264.872001][ T8311] ksys_write+0x183/0x2b0 [ 264.876341][ T8311] ? __pfx_ksys_write+0x10/0x10 [ 264.881190][ T8311] ? do_syscall_64+0x100/0x230 [ 264.885959][ T8311] ? do_syscall_64+0xb6/0x230 [ 264.890637][ T8311] do_syscall_64+0xf3/0x230 [ 264.895142][ T8311] ? clear_bhb_loop+0x35/0x90 [ 264.899840][ T8311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.905731][ T8311] RIP: 0033:0x7f731db7d1ff [ 264.910145][ T8311] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 264.929762][ T8311] RSP: 002b:00007f731e8ba030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 264.938177][ T8311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f731db7d1ff [ 264.946143][ T8311] RDX: 0000000000000001 RSI: 00007f731e8ba0a0 RDI: 0000000000000004 [ 264.954107][ T8311] RBP: 00007f731e8ba090 R08: 0000000000000000 R09: 0000000000000000 [ 264.962074][ T8311] R10: 0000000024008094 R11: 0000000000000293 R12: 0000000000000001 [ 264.970046][ T8311] R13: 0000000000000000 R14: 00007f731dd36130 R15: 00007ffd0ec3bb98 [ 264.978027][ T8311] [ 265.154727][ T8319] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 265.163133][ T8319] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 265.174876][ T8319] overlayfs: missing 'lowerdir' [ 265.281796][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 265.312404][ T8324] afs: Unknown parameter 'posixacl' [ 265.352788][ T8324] sctp: [Deprecated]: syz.1.645 (pid 8324) Use of int in maxseg socket option. [ 265.352788][ T8324] Use struct sctp_assoc_value instead [ 265.361484][ T8] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.451662][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 265.555421][ T5884] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 265.816767][ T8333] tls_set_device_offload: netdev not found [ 266.027695][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 266.664458][ T5884] usb 3-1: no configurations [ 266.669116][ T5884] usb 3-1: can't read configurations, error -22 [ 266.721922][ T8335] overlayfs: missing 'workdir' [ 267.372881][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 268.254293][ T5883] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 268.414304][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 268.422288][ T5883] usb 1-1: config 2 has an invalid interface number: 20 but max is 0 [ 268.430875][ T5883] usb 1-1: config 2 has no interface number 0 [ 268.442226][ T5883] usb 1-1: config 2 interface 20 altsetting 140 bulk endpoint 0x2 has invalid maxpacket 8 [ 268.462905][ T5883] usb 1-1: config 2 interface 20 altsetting 140 bulk endpoint 0xC has invalid maxpacket 16 [ 268.499985][ T5883] usb 1-1: config 2 interface 20 altsetting 140 endpoint 0x8 has invalid maxpacket 1576, setting to 64 [ 268.532120][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 268.545397][ T5883] usb 1-1: config 2 interface 20 altsetting 140 endpoint 0x8D has invalid maxpacket 43717, setting to 64 [ 268.556743][ T5883] usb 1-1: config 2 interface 20 altsetting 140 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 268.568126][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has a duplicate endpoint with address 0xD, skipping [ 268.579251][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has a duplicate endpoint with address 0x9, skipping [ 268.590256][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 268.603793][ T5883] usb 1-1: config 2 interface 20 has no altsetting 0 [ 268.620075][ T5883] usb 1-1: New USB device found, idVendor=1410, idProduct=2420, bcdDevice=b0.ee [ 268.630058][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.640720][ T5883] usb 1-1: Product: syz [ 268.645379][ T5883] usb 1-1: Manufacturer: 釬뇒ᇫﮞၞ꺬챛죿ᓠ⸀ᔃ왭㗒䒅遷褛뫯鑗꘮珃盋觨䅶瑭乺佐⬔싍눠ꔕὣแѢꄁၼ녵 [ 268.660524][ T5883] usb 1-1: SerialNumber: syz [ 268.697233][ T8348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.713295][ T8348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.802333][ T8366] overlayfs: missing 'workdir' [ 268.815732][ T8369] IPVS: set_ctl: invalid protocol: 95 172.20.20.170:20004 [ 269.565216][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.576765][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.617402][ T5883] option 1-1:2.20: GSM modem (1-port) converter detected [ 269.730038][ T5883] usb 1-1: USB disconnect, device number 13 [ 269.748974][ T5883] option 1-1:2.20: device disconnected [ 271.234631][ T6687] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 271.368631][ T8413] overlayfs: missing 'lowerdir' [ 271.545782][ T8423] capability: warning: `syz.2.671' uses 32-bit capabilities (legacy support in use) [ 271.581986][ T8423] FAULT_INJECTION: forcing a failure. [ 271.581986][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 271.582130][ T8416] syzkaller0: entered promiscuous mode [ 271.633982][ T8416] syzkaller0: entered allmulticast mode [ 271.645238][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.2.671 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 271.655869][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 271.665952][ T8423] Call Trace: [ 271.669253][ T8423] [ 271.672201][ T8423] dump_stack_lvl+0x241/0x360 [ 271.676912][ T8423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.682136][ T8423] ? __pfx__printk+0x10/0x10 [ 271.686752][ T8423] ? __kmalloc_node_noprof+0xb7/0x440 [ 271.692410][ T8423] ? __pfx___might_resched+0x10/0x10 [ 271.697729][ T8423] should_fail_ex+0x3b0/0x4e0 [ 271.702435][ T8423] should_failslab+0xac/0x100 [ 271.707133][ T8423] __kmalloc_node_noprof+0xdf/0x440 [ 271.712353][ T8423] ? __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 271.718457][ T8423] __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 271.724379][ T8423] ? mark_lock+0x9a/0x360 [ 271.728745][ T8423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.735103][ T8423] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 271.740670][ T8423] __vmalloc_noprof+0x79/0x90 [ 271.745378][ T8423] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 271.750948][ T8423] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 271.756342][ T8423] ? bpf_prog_alloc+0x28/0x1b0 [ 271.761141][ T8423] bpf_prog_alloc+0x3a/0x1b0 [ 271.765756][ T8423] bpf_prog_load+0x7f7/0x20f0 [ 271.770470][ T8423] ? __pfx_bpf_prog_load+0x10/0x10 [ 271.775604][ T8423] ? __pfx___might_resched+0x10/0x10 [ 271.780929][ T8423] ? __might_fault+0xc6/0x120 [ 271.785719][ T8423] __sys_bpf+0x4ee/0x810 [ 271.789987][ T8423] ? __pfx___sys_bpf+0x10/0x10 [ 271.794785][ T8423] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.800795][ T8423] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.807149][ T8423] ? do_syscall_64+0x100/0x230 [ 271.811944][ T8423] __x64_sys_bpf+0x7c/0x90 [ 271.816386][ T8423] do_syscall_64+0xf3/0x230 [ 271.820914][ T8423] ? clear_bhb_loop+0x35/0x90 [ 271.825614][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.831528][ T8423] RIP: 0033:0x7f731db7e719 [ 271.835964][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.855598][ T8423] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.864045][ T8423] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719 [ 271.872046][ T8423] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 271.880041][ T8423] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000 [ 271.888037][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.896029][ T8423] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98 [ 271.904035][ T8423] [ 272.036775][ T8435] netlink: 276 bytes leftover after parsing attributes in process `syz.3.677'. [ 272.437852][ T8423] syz.2.671: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.455515][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.2.671 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 272.466148][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 272.476229][ T8423] Call Trace: [ 272.479525][ T8423] [ 272.482476][ T8423] dump_stack_lvl+0x241/0x360 [ 272.487184][ T8423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.492410][ T8423] ? __pfx__printk+0x10/0x10 [ 272.497028][ T8423] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 272.503464][ T8423] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 272.509989][ T8423] warn_alloc+0x278/0x410 [ 272.514343][ T8423] ? __pfx___might_resched+0x10/0x10 [ 272.519657][ T8423] ? __pfx_warn_alloc+0x10/0x10 [ 272.524547][ T8423] ? rcu_is_watching+0x15/0xb0 [ 272.529333][ T8423] ? trace_kmalloc+0x1f/0xd0 [ 272.533943][ T8423] ? __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 272.540034][ T8423] __vmalloc_node_range_noprof+0x691/0x13f0 [ 272.545964][ T8423] ? mark_lock+0x9a/0x360 [ 272.550331][ T8423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.556689][ T8423] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 272.562258][ T8423] __vmalloc_noprof+0x79/0x90 [ 272.566967][ T8423] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 272.572545][ T8423] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 272.577941][ T8423] ? bpf_prog_alloc+0x28/0x1b0 [ 272.582731][ T8423] bpf_prog_alloc+0x3a/0x1b0 [ 272.587342][ T8423] bpf_prog_load+0x7f7/0x20f0 [ 272.592059][ T8423] ? __pfx_bpf_prog_load+0x10/0x10 [ 272.597216][ T8423] ? __pfx___might_resched+0x10/0x10 [ 272.602546][ T8423] ? __might_fault+0xc6/0x120 [ 272.607252][ T8423] __sys_bpf+0x4ee/0x810 [ 272.611520][ T8423] ? __pfx___sys_bpf+0x10/0x10 [ 272.616321][ T8423] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.622330][ T8423] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.628684][ T8423] ? do_syscall_64+0x100/0x230 [ 272.633474][ T8423] __x64_sys_bpf+0x7c/0x90 [ 272.637920][ T8423] do_syscall_64+0xf3/0x230 [ 272.642448][ T8423] ? clear_bhb_loop+0x35/0x90 [ 272.647146][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.653059][ T8423] RIP: 0033:0x7f731db7e719 [ 272.657491][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.677132][ T8423] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.685580][ T8423] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719 [ 272.694004][ T8423] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 272.701995][ T8423] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000 [ 272.709981][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.717970][ T8423] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98 [ 272.725973][ T8423] [ 272.731804][ T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 272.834297][ T8423] Mem-Info: [ 272.837534][ T8423] active_anon:324 inactive_anon:19895 isolated_anon:0 [ 272.837534][ T8423] active_file:23827 inactive_file:35694 isolated_file:0 [ 272.837534][ T8423] unevictable:768 dirty:427 writeback:0 [ 272.837534][ T8423] slab_reclaimable:10260 slab_unreclaimable:101525 [ 272.837534][ T8423] mapped:22429 shmem:15970 pagetables:837 [ 272.837534][ T8423] sec_pagetables:0 bounce:0 [ 272.837534][ T8423] kernel_misc_reclaimable:0 [ 272.837534][ T8423] free:1315775 free_pcp:1399 free_cma:0 [ 272.934313][ T8423] Node 0 active_anon:1296kB inactive_anon:78180kB active_file:95236kB inactive_file:142776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89716kB dirty:1704kB writeback:0kB shmem:60444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3348kB sec_pagetables:0kB all_unreclaimable? no [ 273.010122][ T8423] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 273.119315][ T8423] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.146868][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.161601][ T8423] lowmem_reserve[]: 0 2465 2466 0 0 [ 273.168813][ T8423] Node 0 DMA32 free:1343008kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1224kB inactive_anon:29524kB active_file:94456kB inactive_file:142724kB unevictable:1536kB writepending:1724kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:51868kB local_pcp:160kB free_cma:0kB [ 273.199616][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.229123][ T8423] lowmem_reserve[]: 0 0 0 0 0 [ 273.229175][ T8423] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 273.229230][ T8423] lowmem_reserve[]: 0 0 0 0 0 [ 273.229272][ T8423] Node 1 Normal free:3907204kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.229327][ T8423] lowmem_reserve[]: 0 0 0 0 0 [ 273.229369][ T8423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.229512][ T8423] Node 0 DMA32: 498*4kB (UME) 407*8kB (UME) 842*16kB (UME) 530*32kB (UME) 165*64kB (UM) 93*128kB (UME) 65*256kB (UE) 65*512kB (UME) 27*1024kB (UME) 9*2048kB (UME) 298*4096kB (M) = 1374752kB [ 273.229698][ T8423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 273.229813][ T8423] Node 1 Normal: 177*4kB (UME) 58*8kB (UME) 39*16kB (UME) 192*32kB (UME) 92*64kB (UME) 25*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 946*4096kB (M) = 3907204kB [ 273.230000][ T8423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.230017][ T8423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.230034][ T8423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.230050][ T8423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.230067][ T8423] 60931 total pagecache pages [ 273.230077][ T8423] 0 pages in swap cache [ 273.230084][ T8423] Free swap = 120112kB [ 273.230093][ T8423] Total swap = 124996kB [ 273.230101][ T8423] 2097051 pages RAM [ 273.230109][ T8423] 0 pages HighMem/MovableOnly [ 273.230118][ T8423] 427074 pages reserved [ 273.230126][ T8423] 0 pages cma reserved [ 273.454310][ T5883] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 273.749530][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 273.787503][ T5883] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 273.806189][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.825041][ T5883] usb 5-1: Product: syz [ 273.829266][ T5883] usb 5-1: Manufacturer: syz [ 273.833878][ T5883] usb 5-1: SerialNumber: syz [ 273.854939][ T5883] usb 5-1: config 0 descriptor?? [ 274.161537][ T5883] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 274.179528][ T5883] usb 5-1: USB disconnect, device number 15 [ 274.234547][ T5884] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 274.409053][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 274.415691][ T5884] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 274.430553][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.440547][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.450383][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.466615][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.486173][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.495295][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.724899][ T5884] usb 2-1: usb_control_msg returned -32 [ 274.730529][ T5884] usbtmc 2-1:16.0: can't read capabilities [ 277.008413][ T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 277.284059][ T5884] usb 2-1: USB disconnect, device number 13 [ 277.864049][ T8487] netlink: 'syz.3.690': attribute type 3 has an invalid length. [ 278.255157][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 280.193153][ T8546] FAULT_INJECTION: forcing a failure. [ 280.193153][ T8546] name failslab, interval 1, probability 0, space 0, times 0 [ 280.211595][ T8546] CPU: 0 UID: 0 PID: 8546 Comm: syz.1.705 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 280.222229][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 280.232312][ T8546] Call Trace: [ 280.235618][ T8546] [ 280.238566][ T8546] dump_stack_lvl+0x241/0x360 [ 280.243268][ T8546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.248496][ T8546] ? __pfx__printk+0x10/0x10 [ 280.253123][ T8546] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 280.258692][ T8546] ? __pfx___might_resched+0x10/0x10 [ 280.263980][ T8546] should_fail_ex+0x3b0/0x4e0 [ 280.268665][ T8546] ? alloc_empty_file+0x9e/0x1d0 [ 280.273631][ T8546] should_failslab+0xac/0x100 [ 280.278323][ T8546] ? alloc_empty_file+0x9e/0x1d0 [ 280.283250][ T8546] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 280.288629][ T8546] alloc_empty_file+0x9e/0x1d0 [ 280.293420][ T8546] path_openat+0x107/0x3590 [ 280.297953][ T8546] ? unwind_next_frame+0x18e6/0x22d0 [ 280.303272][ T8546] ? preempt_count_add+0x93/0x190 [ 280.308325][ T8546] ? 0xffffffffa00038c0 [ 280.312491][ T8546] ? 0xffffffffa00038c0 [ 280.316664][ T8546] ? __pfx_validate_chain+0x10/0x10 [ 280.321881][ T8546] ? is_bpf_text_address+0x26/0x2a0 [ 280.327107][ T8546] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 280.333293][ T8546] ? kernel_text_address+0xa7/0xe0 [ 280.338440][ T8546] ? __kernel_text_address+0xd/0x40 [ 280.343661][ T8546] ? unwind_get_return_address+0x4d/0x90 [ 280.349327][ T8546] ? __pfx_path_openat+0x10/0x10 [ 280.354291][ T8546] ? arch_stack_walk+0xfd/0x150 [ 280.359180][ T8546] do_filp_open+0x235/0x490 [ 280.363711][ T8546] ? __pfx_do_filp_open+0x10/0x10 [ 280.368789][ T8546] ? alloc_bprm+0xac/0xe20 [ 280.373238][ T8546] alloc_bprm+0x178/0xe20 [ 280.377599][ T8546] ? __might_fault+0xaa/0x120 [ 280.382301][ T8546] ? __pfx_lock_release+0x10/0x10 [ 280.387355][ T8546] ? __pfx_alloc_bprm+0x10/0x10 [ 280.392237][ T8546] ? __might_fault+0xaa/0x120 [ 280.396941][ T8546] ? __might_fault+0xc6/0x120 [ 280.401643][ T8546] do_execveat_common+0x18c/0x6f0 [ 280.406706][ T8546] __x64_sys_execveat+0xc4/0xe0 [ 280.411583][ T8546] do_syscall_64+0xf3/0x230 [ 280.416116][ T8546] ? clear_bhb_loop+0x35/0x90 [ 280.420820][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.426738][ T8546] RIP: 0033:0x7f6795f7e719 [ 280.431175][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.450810][ T8546] RSP: 002b:00007f6796cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 280.459252][ T8546] RAX: ffffffffffffffda RBX: 00007f6796135f80 RCX: 00007f6795f7e719 [ 280.467245][ T8546] RDX: 0000000020000040 RSI: 0000000020000040 RDI: 0000000000000004 [ 280.475238][ T8546] RBP: 00007f6796cc0090 R08: 0000000000001000 R09: 0000000000000000 [ 280.483233][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.491225][ T8546] R13: 0000000000000000 R14: 00007f6796135f80 R15: 00007ffd245b6468 [ 280.499232][ T8546] [ 280.560871][ T8558] syz.2.706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 280.642889][ T8559] bad cache= option: none [ 280.642889][ T8559] [ 280.649967][ T8559] CIFS: VFS: bad cache= option: none [ 281.479299][ T8574] 9pnet_fd: Insufficient options for proto=fd [ 282.214626][ T8588] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.715'. [ 283.635742][ T3455] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 284.325618][ T8602] program syz.1.718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.766683][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 285.697855][ T8617] overlayfs: missing 'workdir' [ 286.055599][ T8625] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.727'. [ 286.154126][ T8624] (syz.1.726,8624,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 286.164049][ T8624] (syz.1.726,8624,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 286.269648][ T29] audit: type=1326 audit(1731828214.138:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 286.836412][ T29] audit: type=1326 audit(1731828214.138:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 286.915586][ T29] audit: type=1326 audit(1731828214.138:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 286.984246][ T29] audit: type=1326 audit(1731828214.138:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 287.032353][ T29] audit: type=1326 audit(1731828214.138:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 287.080216][ T29] audit: type=1326 audit(1731828214.338:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 287.144407][ T29] audit: type=1326 audit(1731828214.348:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 287.173163][ T29] audit: type=1326 audit(1731828214.348:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 287.206532][ T29] audit: type=1326 audit(1731828214.358:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 287.507367][ T8648] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 287.550914][ T29] audit: type=1326 audit(1731828214.368:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000 [ 289.330900][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 290.466960][ T3455] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 291.069171][ T8703] FAULT_INJECTION: forcing a failure. [ 291.069171][ T8703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.142299][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.4.743 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 291.153290][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 291.163367][ T8703] Call Trace: [ 291.166651][ T8703] [ 291.169578][ T8703] dump_stack_lvl+0x241/0x360 [ 291.174293][ T8703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.180016][ T8703] ? __pfx__printk+0x10/0x10 [ 291.184612][ T8703] ? snprintf+0xda/0x120 [ 291.189205][ T8703] should_fail_ex+0x3b0/0x4e0 [ 291.194261][ T8703] _copy_to_user+0x31/0xb0 [ 291.198703][ T8703] simple_read_from_buffer+0xca/0x150 [ 291.204094][ T8703] proc_fail_nth_read+0x1e9/0x250 [ 291.209133][ T8703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.214714][ T8703] ? rw_verify_area+0x55e/0x6f0 [ 291.219683][ T8703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.225335][ T8703] vfs_read+0x1fc/0xb70 [ 291.229502][ T8703] ? fdget_pos+0x24e/0x320 [ 291.233927][ T8703] ? __pfx_vfs_read+0x10/0x10 [ 291.238615][ T8703] ? __fget_files+0x3f3/0x470 [ 291.243301][ T8703] ? fdget_pos+0x24e/0x320 [ 291.247726][ T8703] ksys_read+0x183/0x2b0 [ 291.251999][ T8703] ? __pfx_ksys_read+0x10/0x10 [ 291.256784][ T8703] ? do_syscall_64+0x100/0x230 [ 291.261576][ T8703] ? do_syscall_64+0xb6/0x230 [ 291.266263][ T8703] do_syscall_64+0xf3/0x230 [ 291.270772][ T8703] ? clear_bhb_loop+0x35/0x90 [ 291.275459][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.281833][ T8703] RIP: 0033:0x7fab93b7d15c [ 291.286250][ T8703] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 291.305945][ T8703] RSP: 002b:00007fab9499d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.314368][ T8703] RAX: ffffffffffffffda RBX: 00007fab93d35f80 RCX: 00007fab93b7d15c [ 291.322337][ T8703] RDX: 000000000000000f RSI: 00007fab9499d0a0 RDI: 0000000000000004 [ 291.330307][ T8703] RBP: 00007fab9499d090 R08: 0000000000000000 R09: 0000000000000000 [ 291.338275][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.346245][ T8703] R13: 0000000000000000 R14: 00007fab93d35f80 R15: 00007ffcf0de6768 [ 291.354232][ T8703] [ 293.915436][ T8738] xt_nat: multiple ranges no longer supported [ 294.884815][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 294.922611][ T8747] FAULT_INJECTION: forcing a failure. [ 294.922611][ T8747] name failslab, interval 1, probability 0, space 0, times 0 [ 294.956619][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.2.757 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 294.967263][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 294.977347][ T8747] Call Trace: [ 294.980659][ T8747] [ 294.983618][ T8747] dump_stack_lvl+0x241/0x360 [ 294.988325][ T8747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.993532][ T8747] ? __pfx__printk+0x10/0x10 [ 294.998131][ T8747] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 295.003676][ T8747] ? __pfx___might_resched+0x10/0x10 [ 295.008970][ T8747] should_fail_ex+0x3b0/0x4e0 [ 295.013664][ T8747] ? ep_insert+0x4c5/0x1aa0 [ 295.018172][ T8747] should_failslab+0xac/0x100 [ 295.022848][ T8747] ? ep_insert+0x4c5/0x1aa0 [ 295.027349][ T8747] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 295.032725][ T8747] ep_insert+0x4c5/0x1aa0 [ 295.037062][ T8747] ? __pfx_ep_insert+0x10/0x10 [ 295.041820][ T8747] ? do_epoll_ctl+0x435/0xf60 [ 295.046495][ T8747] ? __pfx___mutex_lock+0x10/0x10 [ 295.051513][ T8747] ? __fget_files+0x29/0x470 [ 295.056111][ T8747] ? __fget_files+0x29/0x470 [ 295.060700][ T8747] ? safesetid_security_capable+0xb2/0x1d0 [ 295.066508][ T8747] ? bpf_lsm_capable+0x9/0x10 [ 295.071180][ T8747] ? security_capable+0x7e/0x2d0 [ 295.076123][ T8747] do_epoll_ctl+0x8c9/0xf60 [ 295.080624][ T8747] ? do_epoll_ctl+0x831/0xf60 [ 295.085299][ T8747] __x64_sys_epoll_ctl+0x161/0x1a0 [ 295.090415][ T8747] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 295.096043][ T8747] ? do_syscall_64+0x100/0x230 [ 295.100822][ T8747] ? do_syscall_64+0xb6/0x230 [ 295.105501][ T8747] do_syscall_64+0xf3/0x230 [ 295.110003][ T8747] ? clear_bhb_loop+0x35/0x90 [ 295.114681][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.120574][ T8747] RIP: 0033:0x7f731db7e719 [ 295.124990][ T8747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.144591][ T8747] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 295.153003][ T8747] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719 [ 295.160986][ T8747] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 295.168974][ T8747] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000 [ 295.176947][ T8747] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.184916][ T8747] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98 [ 295.192902][ T8747] [ 295.262308][ T8750] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.758'. [ 295.355649][ T8] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 295.510398][ T8] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 295.518753][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 295.527998][ T8] usb 1-1: config 0 has no interface number 0 [ 295.538121][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 295.547417][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.558955][ T8] usb 1-1: config 0 descriptor?? [ 295.686630][ T5884] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 295.695385][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.707968][ T5884] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 295.719640][ T5884] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 295.728780][ T5884] usb 3-1: Manufacturer: syz [ 295.742487][ T5884] usb 3-1: config 0 descriptor?? [ 295.771813][ T8] usb 1-1: string descriptor 0 read error: -71 [ 295.782715][ T8] ums-realtek 1-1:0.3: USB Mass Storage device detected [ 295.814331][ T5884] rc_core: IR keymap rc-hauppauge not found [ 295.820357][ T5884] Registered IR keymap rc-empty [ 295.829276][ T5884] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 295.852996][ T8] usb 1-1: USB disconnect, device number 14 [ 295.863002][ T5884] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 295.984492][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.034376][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.044106][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.134354][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 296.143454][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.154880][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.164061][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.172804][ T8667] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 296.183966][ T9] usb 5-1: config 0 descriptor?? [ 296.435564][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 296.852627][ T5943] usb 5-1: USB disconnect, device number 16 [ 297.021315][ T5943] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 297.336989][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 297.337007][ T29] audit: type=1804 audit(1731828225.248:60): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.766" name="/newroot/164/file0" dev="9p" ino=2 res=1 errno=0 [ 297.498928][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'. [ 297.680850][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 298.154410][ T5943] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 298.344461][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 298.931876][ T5943] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 299.591734][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.599944][ T5943] usb 4-1: Product: syz [ 299.604138][ T5943] usb 4-1: Manufacturer: syz [ 299.608813][ T5943] usb 4-1: SerialNumber: syz [ 299.626757][ T5943] usb 4-1: config 0 descriptor?? [ 299.636931][ T5883] usb 3-1: USB disconnect, device number 10 [ 299.868536][ T8802] overlay: ./file0 is not a directory [ 299.889735][ T8801] netlink: 60 bytes leftover after parsing attributes in process `syz.0.775'. [ 299.905441][ T5943] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.906531][ T8801] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 300.007665][ T8672] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 300.112366][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 300.121794][ T8782] bridge_slave_1: left allmulticast mode [ 300.138484][ T8782] bridge_slave_1: left promiscuous mode [ 300.156148][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.180087][ T8782] bridge_slave_0: left allmulticast mode [ 300.186004][ T8782] bridge_slave_0: left promiscuous mode [ 300.191982][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.584403][ T5883] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 300.734396][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 300.741698][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.753264][ T5883] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.762642][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.773688][ T5883] usb 2-1: config 0 descriptor?? [ 300.990567][ T5883] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 301.004608][ T8816] loop6: detected capacity change from 0 to 1 [ 301.019552][ T8816] Dev loop6: unable to read RDB block 1 [ 301.025735][ T8816] loop6: unable to read partition table [ 301.031613][ T8816] loop6: partition table beyond EOD, truncated [ 301.038230][ T5883] usb 2-1: USB disconnect, device number 14 [ 301.045961][ T8816] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 301.045961][ T8816] ) failed (rc=-5) [ 301.059927][ T5883] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 301.238793][ T5943] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 301.317850][ T5943] usb 4-1: USB disconnect, device number 7 [ 301.882274][ T29] audit: type=1326 audit(1731828229.748:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 301.928528][ T8672] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 301.933204][ T29] audit: type=1326 audit(1731828229.748:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 301.984486][ T29] audit: type=1326 audit(1731828229.748:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 302.003447][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 302.016520][ T29] audit: type=1326 audit(1731828229.748:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 302.487741][ T29] audit: type=1326 audit(1731828229.748:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 302.520103][ T29] audit: type=1326 audit(1731828229.748:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 302.549571][ T29] audit: type=1326 audit(1731828229.748:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 302.649147][ T29] audit: type=1326 audit(1731828229.748:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 302.695730][ T8840] netlink: 276 bytes leftover after parsing attributes in process `syz.2.786'. [ 302.711334][ T8838] affs: Unrecognized mount option "" or missing value [ 302.723654][ T8838] affs: Error parsing options [ 302.728822][ T29] audit: type=1326 audit(1731828229.748:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc29b7d0b0 code=0x7ffc0000 [ 302.775273][ T8842] FAULT_INJECTION: forcing a failure. [ 302.775273][ T8842] name failslab, interval 1, probability 0, space 0, times 0 [ 302.796225][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.4.789 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 302.806856][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 302.816913][ T8842] Call Trace: [ 302.820187][ T8842] [ 302.823116][ T8842] dump_stack_lvl+0x241/0x360 [ 302.827803][ T8842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.833003][ T8842] ? __pfx__printk+0x10/0x10 [ 302.837599][ T8842] ? fs_reclaim_acquire+0x93/0x130 [ 302.842721][ T8842] ? __pfx___might_resched+0x10/0x10 [ 302.848013][ T8842] should_fail_ex+0x3b0/0x4e0 [ 302.852696][ T8842] ? tomoyo_encode+0x26f/0x540 [ 302.857470][ T8842] should_failslab+0xac/0x100 [ 302.862153][ T8842] ? tomoyo_encode+0x26f/0x540 [ 302.866919][ T8842] __kmalloc_noprof+0xd8/0x400 [ 302.871686][ T8842] tomoyo_encode+0x26f/0x540 [ 302.876284][ T8842] tomoyo_realpath_from_path+0x59e/0x5e0 [ 302.881919][ T8842] tomoyo_path_number_perm+0x23a/0x880 [ 302.887382][ T8842] ? tomoyo_path_number_perm+0x208/0x880 [ 302.893101][ T8842] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.899201][ T8842] ? __fget_files+0x29/0x470 [ 302.903796][ T8842] ? __fget_files+0x3f3/0x470 [ 302.908485][ T8842] security_file_ioctl+0xc6/0x2a0 [ 302.913512][ T8842] __se_sys_ioctl+0x47/0x170 [ 302.918101][ T8842] do_syscall_64+0xf3/0x230 [ 302.922611][ T8842] ? clear_bhb_loop+0x35/0x90 [ 302.927290][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.933182][ T8842] RIP: 0033:0x7fab93b7e719 [ 302.937598][ T8842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.957205][ T8842] RSP: 002b:00007fab9499d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.965622][ T8842] RAX: ffffffffffffffda RBX: 00007fab93d35f80 RCX: 00007fab93b7e719 [ 302.973605][ T8842] RDX: 0000000020000000 RSI: 00000000000007a4 RDI: 0000000000000004 [ 302.981589][ T8842] RBP: 00007fab9499d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.989570][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.997556][ T8842] R13: 0000000000000000 R14: 00007fab93d35f80 R15: 00007ffcf0de6768 [ 303.005549][ T8842] [ 303.010189][ T29] audit: type=1326 audit(1731828229.748:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 303.035220][ T8842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.054245][ T29] audit: type=1326 audit(1731828229.748:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 303.084797][ T29] audit: type=1326 audit(1731828229.748:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 303.105522][ T29] audit: type=1326 audit(1731828229.748:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 303.126317][ T29] audit: type=1326 audit(1731828229.748:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000 [ 303.644366][ T5943] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 304.104632][ T5943] usb 1-1: device descriptor read/64, error -71 [ 304.524299][ T5943] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 304.881538][ T8865] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 305.005072][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 305.014688][ T8864] openvswitch: netlink: Actions may not be safe on all matching packets [ 305.054385][ T5943] usb 1-1: device descriptor read/64, error -71 [ 305.519996][ T5943] usb usb1-port1: attempt power cycle [ 305.765952][ T8672] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 305.826565][ T8871] input: syz1 as /devices/virtual/input/input14 [ 305.954473][ T5943] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 305.987786][ T5943] usb 1-1: device descriptor read/8, error -71 [ 306.254656][ T5943] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 306.521106][ T8876] binder: 8875:8876 ioctl 4018620d 0 returned -22 [ 306.552891][ T5943] usb 1-1: device descriptor read/8, error -71 [ 306.696424][ T8880] netlink: 3 bytes leftover after parsing attributes in process `syz.1.800'. [ 306.714836][ T5943] usb usb1-port1: unable to enumerate USB device [ 306.741040][ T8880] batadv1: entered promiscuous mode [ 306.754284][ T8880] batadv1: entered allmulticast mode [ 306.858910][ T8883] netlink: 'syz.3.802': attribute type 29 has an invalid length. [ 306.933997][ T8887] netlink: 'syz.3.802': attribute type 29 has an invalid length. [ 308.106855][ T8905] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 308.670326][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 308.682545][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 308.682560][ T29] audit: type=1800 audit(1731828236.598:84): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.810" name="bus" dev="overlay" ino=1020 res=0 errno=0 [ 308.804896][ T29] audit: type=1800 audit(1731828236.698:85): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.810" name="bus" dev="overlay" ino=1020 res=0 errno=0 [ 308.824895][ T29] [ 308.824905][ T29] ====================================================== [ 308.824912][ T29] WARNING: possible circular locking dependency detected [ 308.824920][ T29] 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 Not tainted [ 308.824930][ T29] ------------------------------------------------------ [ 308.824937][ T29] kauditd/29 is trying to acquire lock: [ 308.824946][ T29] ffff88805b364618 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbe/0x14b0 [ 308.824990][ T29] [ 308.824990][ T29] but task is already holding lock: [ 308.824995][ T29] ffffffff8e813418 ((console_sem).lock){-.-.}-{2:2}, at: up+0x1d/0x90 [ 308.825033][ T29] [ 308.825033][ T29] which lock already depends on the new lock. [ 308.825033][ T29] [ 308.825039][ T29] [ 308.825039][ T29] the existing dependency chain (in reverse order) is: [ 308.825045][ T29] [ 308.825045][ T29] -> #2 ((console_sem).lock){-.-.}-{2:2}: [ 308.825068][ T29] lock_acquire+0x1ed/0x550 [ 308.825091][ T29] _raw_spin_lock_irqsave+0xd5/0x120 [ 308.825108][ T29] down_trylock+0x20/0xa0 [ 308.825126][ T29] __down_trylock_console_sem+0x109/0x250 [ 308.825146][ T29] vprintk_emit+0x3d7/0xa10 [ 308.825163][ T29] _printk+0xd5/0x120 [ 308.825181][ T29] should_fail_ex+0x391/0x4e0 [ 308.825198][ T29] strncpy_from_user+0x36/0x260 [ 308.825214][ T29] strncpy_from_user_nofault+0x71/0x140 [ 308.825231][ T29] bpf_probe_read_compat_str+0xe9/0x180 [ 308.825253][ T29] 0xffffffffa0000859 [ 308.825265][ T29] bpf_trace_run2+0x2ec/0x540 [ 308.825282][ T29] trace_tlb_flush+0x118/0x140 [ 308.825298][ T29] switch_mm_irqs_off+0x77a/0xa70 [ 308.825313][ T29] __schedule+0x10c7/0x4bd0 [ 308.825329][ T29] preempt_schedule_notrace+0x100/0x140 [ 308.825354][ T29] preempt_schedule_notrace_thunk+0x1a/0x30 [ 308.825371][ T29] rcu_is_watching+0x7e/0xb0 [ 308.825387][ T29] lock_acquire+0xe3/0x550 [ 308.825407][ T29] atomic_notifier_call_chain+0x43/0x180 [ 308.825430][ T29] do_con_write+0xab1/0x4c30 [ 308.825452][ T29] con_put_char+0x95/0xf0 [ 308.825472][ T29] tty_put_char+0xe3/0x190 [ 308.825494][ T29] do_output_char+0x6b1/0x970 [ 308.825511][ T29] n_tty_write+0xe06/0x1230 [ 308.825527][ T29] file_tty_write+0x546/0x9b0 [ 308.825546][ T29] vfs_write+0xaeb/0xd30 [ 308.825566][ T29] ksys_write+0x183/0x2b0 [ 308.825584][ T29] do_syscall_64+0xf3/0x230 [ 308.825603][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.825622][ T29] [ 308.825622][ T29] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 308.825645][ T29] lock_acquire+0x1ed/0x550 [ 308.825666][ T29] _raw_spin_lock_nested+0x31/0x40 [ 308.825683][ T29] raw_spin_rq_lock_nested+0x2a/0x140 [ 308.825702][ T29] task_rq_lock+0xc6/0x360 [ 308.825719][ T29] cgroup_move_task+0x9b/0x5a0 [ 308.825734][ T29] css_set_move_task+0x72e/0x950 [ 308.825749][ T29] cgroup_post_fork+0x256/0x880 [ 308.825765][ T29] copy_process+0x39e9/0x3d50 [ 308.825789][ T29] kernel_clone+0x223/0x880 [ 308.825810][ T29] user_mode_thread+0x132/0x1a0 [ 308.825831][ T29] rest_init+0x23/0x300 [ 308.825852][ T29] start_kernel+0x47f/0x500 [ 308.825872][ T29] x86_64_start_reservations+0x2a/0x30 [ 308.825890][ T29] x86_64_start_kernel+0x9f/0xa0 [ 308.825905][ T29] common_startup_64+0x13e/0x147 [ 308.825923][ T29] [ 308.825923][ T29] -> #0 (&p->pi_lock){-.-.}-{2:2}: [ 308.825947][ T29] validate_chain+0x18ef/0x5920 [ 308.825963][ T29] __lock_acquire+0x1384/0x2050 [ 308.825984][ T29] lock_acquire+0x1ed/0x550 [ 308.826005][ T29] _raw_spin_lock_irqsave+0xd5/0x120 [ 308.826022][ T29] try_to_wake_up+0xbe/0x14b0 [ 308.826035][ T29] up+0x72/0x90 [ 308.826061][ T29] __console_unlock+0x123/0x1f0 [ 308.826079][ T29] console_unlock+0x18f/0x3b0 [ 308.826096][ T29] vprintk_emit+0x730/0xa10 [ 308.826112][ T29] _printk+0xd5/0x120 [ 308.826130][ T29] kauditd_hold_skb+0x1be/0x210 [ 308.826148][ T29] kauditd_send_queue+0x2b1/0x310 [ 308.826165][ T29] kauditd_thread+0x74a/0x9b0 [ 308.826180][ T29] kthread+0x2f0/0x390 [ 308.826191][ T29] ret_from_fork+0x4b/0x80 [ 308.826211][ T29] ret_from_fork_asm+0x1a/0x30 [ 308.826229][ T29] [ 308.826229][ T29] other info that might help us debug this: [ 308.826229][ T29] [ 308.826234][ T29] Chain exists of: [ 308.826234][ T29] &p->pi_lock --> &rq->__lock --> (console_sem).lock [ 308.826234][ T29] [ 308.826258][ T29] Possible unsafe locking scenario: [ 308.826258][ T29] [ 308.826262][ T29] CPU0 CPU1 [ 308.826266][ T29] ---- ---- [ 308.826271][ T29] lock((console_sem).lock); [ 308.826281][ T29] lock(&rq->__lock); [ 308.826291][ T29] lock((console_sem).lock); [ 308.826302][ T29] lock(&p->pi_lock); [ 308.826312][ T29] [ 308.826312][ T29] *** DEADLOCK *** [ 308.826312][ T29] [ 308.826316][ T29] 1 lock held by kauditd/29: [ 308.826325][ T29] #0: ffffffff8e813418 ((console_sem).lock){-.-.}-{2:2}, at: up+0x1d/0x90 [ 308.826362][ T29] [ 308.826362][ T29] stack backtrace: [ 308.826368][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 308.826385][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 308.826401][ T29] Call Trace: [ 308.826407][ T29] [ 308.826413][ T29] dump_stack_lvl+0x241/0x360 [ 308.826436][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.826456][ T29] ? __pfx__printk+0x10/0x10 [ 308.826481][ T29] print_circular_bug+0x13a/0x1b0 [ 308.826501][ T29] check_noncircular+0x36a/0x4a0 [ 308.826522][ T29] ? __pfx_check_noncircular+0x10/0x10 [ 308.826541][ T29] ? lockdep_lock+0x123/0x2b0 [ 308.826565][ T29] ? __pfx_validate_chain+0x10/0x10 [ 308.826582][ T29] ? __lock_acquire+0x1384/0x2050 [ 308.826607][ T29] validate_chain+0x18ef/0x5920 [ 308.826631][ T29] ? prb_first_seq+0x131/0x210 [ 308.826651][ T29] ? __pfx_validate_chain+0x10/0x10 [ 308.826669][ T29] ? validate_chain+0x11e/0x5920 [ 308.826688][ T29] ? this_cpu_in_panic+0x4f/0x80 [ 308.826712][ T29] ? __pfx_validate_chain+0x10/0x10 [ 308.826729][ T29] ? sprintf+0xda/0x120 [ 308.826748][ T29] ? mark_lock+0x9a/0x360 [ 308.826765][ T29] __lock_acquire+0x1384/0x2050 [ 308.826800][ T29] lock_acquire+0x1ed/0x550 [ 308.826822][ T29] ? try_to_wake_up+0xbe/0x14b0 [ 308.826839][ T29] ? mark_lock+0x9a/0x360 [ 308.826856][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 308.826887][ T29] _raw_spin_lock_irqsave+0xd5/0x120 [ 308.826905][ T29] ? try_to_wake_up+0xbe/0x14b0 [ 308.826920][ T29] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 308.826940][ T29] ? do_raw_spin_lock+0x14f/0x370 [ 308.826962][ T29] try_to_wake_up+0xbe/0x14b0 [ 308.826981][ T29] ? __pfx_try_to_wake_up+0x10/0x10 [ 308.826998][ T29] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 308.827016][ T29] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 308.827034][ T29] ? __up+0x3c/0x150 [ 308.827055][ T29] up+0x72/0x90 [ 308.827075][ T29] __console_unlock+0x123/0x1f0 [ 308.827094][ T29] ? __pfx___console_unlock+0x10/0x10 [ 308.827116][ T29] ? this_cpu_in_panic+0x4f/0x80 [ 308.827133][ T29] ? is_printk_legacy_deferred+0x43/0x50 [ 308.827156][ T29] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 308.827177][ T29] console_unlock+0x18f/0x3b0 [ 308.827197][ T29] ? __pfx_console_unlock+0x10/0x10 [ 308.827217][ T29] ? this_cpu_in_panic+0x4f/0x80 [ 308.827234][ T29] ? is_printk_legacy_deferred+0x43/0x50 [ 308.827257][ T29] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 308.827278][ T29] vprintk_emit+0x730/0xa10 [ 308.827298][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 308.827316][ T29] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 308.827334][ T29] ? lockdep_hardirqs_on+0x99/0x150 [ 308.827355][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 308.827373][ T29] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 308.827395][ T29] _printk+0xd5/0x120 [ 308.827415][ T29] ? kauditd_hold_skb+0xe7/0x210 [ 308.827435][ T29] ? __pfx__printk+0x10/0x10 [ 308.827457][ T29] ? netlink_has_listeners+0x2ea/0x3a0 [ 308.827477][ T29] kauditd_hold_skb+0x1be/0x210 [ 308.827498][ T29] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 308.827518][ T29] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 308.827539][ T29] kauditd_send_queue+0x2b1/0x310 [ 308.827559][ T29] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 308.827580][ T29] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 308.827601][ T29] ? kauditd_thread+0xb4/0x9b0 [ 308.827620][ T29] kauditd_thread+0x74a/0x9b0 [ 308.827637][ T29] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 308.827671][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 308.827688][ T29] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 308.827707][ T29] ? __pfx_kauditd_thread+0x10/0x10 [ 308.827726][ T29] ? __pfx_autoremove_wake_function+0x10/0x10 [ 308.827751][ T29] ? __kthread_parkme+0x169/0x1d0 [ 308.827775][ T29] ? __pfx_kauditd_thread+0x10/0x10 [ 308.827800][ T29] kthread+0x2f0/0x390 [ 308.827816][ T29] ? __pfx_kauditd_thread+0x10/0x10 [ 308.827835][ T29] ? __pfx_kthread+0x10/0x10 [ 308.827851][ T29] ret_from_fork+0x4b/0x80 [ 308.827874][ T29] ? __pfx_kthread+0x10/0x10 [ 308.827890][ T29] ret_from_fork_asm+0x1a/0x30 [ 308.827918][ T29] [ 309.798132][ T8907] tty tty1: ldisc open failed (-12), clearing slot 0 [ 310.884657][ T8679] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 314.084972][ T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 316.004669][ T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 317.287284][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.293604][ T1296] ieee802154 phy1 wpan1: encryption failed: -22