last executing test programs: 12.023180405s ago: executing program 1 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}}, 0x0) 10.940188809s ago: executing program 0 (id=1217): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) (fail_nth: 2) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) 10.833687523s ago: executing program 4 (id=1218): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fstat(r0, &(0x7f00000000c0)) fstat(r0, &(0x7f0000000140)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x38, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x101, 0x3ffe, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 10.287916212s ago: executing program 3 (id=1220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40509d1}, 0x440d8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000400)=0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffc, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c) r4 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x3, [0x0, 0x6, 0x405, 0x7, 0xe72b, 0x7, 0x5, 0x80, 0x3b2e, 0x8, 0x4, 0x800, 0xe81d, 0x6e, 0x1, 0x5, 0xd842, 0x7, 0xfff, 0x6, 0xba4, 0xfffb, 0xfffd, 0x101, 0x8, 0x1, 0x2, 0xa, 0x12, 0x400, 0x45, 0x8, 0x4, 0x3, 0xfff9, 0x800, 0x6433, 0x4, 0x2, 0x7e3, 0x9, 0x477a, 0x1dc, 0x8, 0xa6, 0x65, 0x1d47, 0x6], 0xffffffff}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000020c0), 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x4c000) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000300)=0xc9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005"], 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x44110) 10.246179321s ago: executing program 1 (id=1221): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x8, 0xc, 0x3, 0x5, 0x1, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0xb, 0x1, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x4000, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x1, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x9, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0x5, 0x4, 0xffffffff, 0x1f, 0x2, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x401, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x57f, 0x10001, 0x80, 0x8]}, 0x45c) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r7, 0xc0046d00, &(0x7f00000000c0)=0x101) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x0, 0x0, 0x7], 0x2}, {0xffffffffffffffff, [0x5, 0xb2cc575b459b5b35, 0x4, 0x2, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x7}, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x3}, 0x2, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 9.887692504s ago: executing program 4 (id=1222): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6d2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000023, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$igmp(0x2, 0x3, 0x2) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0x7) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, 0x2b94, 0x6, 0x0) 9.176032109s ago: executing program 0 (id=1223): openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 6.04631191s ago: executing program 2 (id=1224): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 5.718218771s ago: executing program 1 (id=1225): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SECCOMP(0x15) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000100)={0xad76, 0x3}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000fe0f07000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x40840) 5.416085791s ago: executing program 4 (id=1226): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.265950562s ago: executing program 3 (id=1227): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020500090900000b000000000000000005000600000000000a000000000000000000000000000000000002000000000000000002000100"/70], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r6, 0x7, r4, &(0x7f0000000040)={r5, r4}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0xb, 0x7fffffff, 0x2, 0x6, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) move_pages(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000808000/0x4000)=nil, &(0x7f000069d000/0x2000)=nil, &(0x7f00006d2000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00002cd000/0x4000)=nil, &(0x7f00005f8000/0x4000)=nil, &(0x7f00005b2000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000006911120000000000851000000e000000850000000500000095000000001700e49400a5050000000081dc68fc79d75a03ec"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x51, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socket$inet(0x2, 0x3, 0x2) 5.232739829s ago: executing program 2 (id=1228): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000008000000000597b000318110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 4.990822748s ago: executing program 0 (id=1229): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x8, @vbi={0x9f9, 0x100, 0xc, 0x5abb37001e896ccd, [0x7, 0x4], [0xe8d4, 0x8], 0x13a}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x9, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x81, 0x3, 0xffffffff, 0x116, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x952a3dc372662478, 0x2010, 0xffffffffffffffff, 0x8000000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000001c0)={r7, 0x0, 0xc075}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000300)={r7, 0x6f, "bd41abfaf705e1e133a6b43f644ac0c19d603833df11b982a9c536a3387f51336ffa1aa7fc07c3ce1f64892f30d65a46a65784cb058d3daa72db3b9d4eb1b4306359e12f39bcd6a3f1dba25bd47e06f3054072c6ebb4c9b29acb7ad8038b098b853e89b7e3ac2b0ef09cc1dd184dc9"}, &(0x7f0000000380)=0x77) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x0, &(0x7f0000000240)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) write$P9_RWRITE(r8, &(0x7f0000000280)={0xb, 0x77, 0x2, 0x9}, 0xb) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) ioctl$HIDIOCGNAME(r8, 0x80404806, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.937670882s ago: executing program 2 (id=1230): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffe}, {0x6, 0x0, 0x3, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 3.936947536s ago: executing program 4 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 3.811884152s ago: executing program 3 (id=1232): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) 3.787922174s ago: executing program 1 (id=1233): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa6, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x1, @pix={0x0, 0x0, 0x31363553}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1341, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r4 = dup(r3) write$nbd(r4, &(0x7f0000000680)=ANY=[], 0x10) pread64(r4, &(0x7f0000000400)=""/179, 0xb3, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000022c0)={{0x2, 0x0, 0x80, {0x4, 0x10000, 0x5}}, "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", "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"}) close(r2) socket$netlink(0x10, 0x3, 0x4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) write$char_usb(r5, &(0x7f0000000000)="bec3900eb949ffd501a568b8778604ab70ebf302d0d0ab", 0x17) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="89b1ee2c7cf3d9b4b47381c988a8", 0xe}], 0x1) 3.616666464s ago: executing program 4 (id=1234): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 3.547845833s ago: executing program 2 (id=1235): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendto$inet(r2, &(0x7f0000002640)="01", 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x4) mount$fuseblk(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', &(0x7f0000000480), 0x2218402, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRESDEC=r3]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x4}, {0x0, 0x1003ff}, 0xffffffff, 0x7}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000140)=[{r7, 0x6402}], 0x1, 0x0, 0x0, 0x0) dup2(r7, r4) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000340)={0x4, @win={{0x4, 0x4, 0x0, 0x5}, 0x7, 0x7f800000, 0x0, 0x9, 0x0, 0x28}}) close_range(r3, 0xffffffffffffffff, 0x0) 3.253363484s ago: executing program 1 (id=1236): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000480)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x80008007, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, 0x1040}}, 0x20}}, 0x400c004) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000400), &(0x7f0000000580)='%pK \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r11, 0x0, 0x0}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.875039131s ago: executing program 0 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40509d1}, 0x440d8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000400)=0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffc, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c) r4 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x3, [0x0, 0x6, 0x405, 0x7, 0xe72b, 0x7, 0x5, 0x80, 0x3b2e, 0x8, 0x4, 0x800, 0xe81d, 0x6e, 0x1, 0x5, 0xd842, 0x7, 0xfff, 0x6, 0xba4, 0xfffb, 0xfffd, 0x101, 0x8, 0x1, 0x2, 0xa, 0x12, 0x400, 0x45, 0x8, 0x4, 0x3, 0xfff9, 0x800, 0x6433, 0x4, 0x2, 0x7e3, 0x9, 0x477a, 0x1dc, 0x8, 0xa6, 0x65, 0x1d47, 0x6], 0xffffffff}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000020c0), 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x4c000) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000300)=0xc9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005"], 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x44110) 2.746236019s ago: executing program 3 (id=1238): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) connect$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x8926, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) semget$private(0x0, 0x6, 0x3b1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.627877607s ago: executing program 1 (id=1239): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x23, "12273a0500"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000800)={0xffffffffffffffc4, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xb3, @lang_id={0x0, 0x3, 0x860}}, 0x0, 0x0}, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000b41000/0x3000)=nil) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x735041, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000bf7000)={0x2, 0x3, 0x3000, 0x2000, &(0x7f0000675000/0x2000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) 1.581032495s ago: executing program 3 (id=1240): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) connect$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) (fail_nth: 2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x8926, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) semget$private(0x0, 0x6, 0x3b1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.407666817s ago: executing program 4 (id=1241): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.351948145s ago: executing program 2 (id=1242): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020500090900000b000000000000000005000600000000000a000000000000000000000000000000000002000000000000000002000100"/70], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r6, 0x7, r4, &(0x7f0000000040)={r5, r4}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0xb, 0x7fffffff, 0x2, 0x6, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) move_pages(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000808000/0x4000)=nil, &(0x7f000069d000/0x2000)=nil, &(0x7f00006d2000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00002cd000/0x4000)=nil, &(0x7f00005f8000/0x4000)=nil, &(0x7f00005b2000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000006911120000000000851000000e000000850000000500000095000000001700e49400a5050000000081dc68fc79d75a03ec"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x51, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socket$inet(0x2, 0x3, 0x2) 211.771113ms ago: executing program 3 (id=1243): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_set$pid(0x1, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="fb4a0f03678125bea25d0db5e922a3fb447834e658a60c2a6ab642", 0x1b, r0) r1 = syz_open_procfs(0x0, &(0x7f0000011d40)='stack\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) fsopen(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, 0x0, 0x20000005) iopl(0x3) rt_sigaction(0x13e, 0x0, 0x0, 0x8, &(0x7f0000000440)) pread64(r1, 0x0, 0x0, 0x4) poll(0x0, 0x0, 0x9) 168.094677ms ago: executing program 0 (id=1244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 41.412737ms ago: executing program 0 (id=1245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="3c0200007d"], 0x23c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000280)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8], 0x2000, 0x98302}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0x299, 0x0, 0x80000000}, {0x909, 0x0, 0x3}, {0x610, 0x0, 0x400}, {0x3ac, 0x0, 0x4}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=1246): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x2a280) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x3000000}) write$smackfs_netlabel(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='0000000000009:0000:2'], 0xfffffdef) kernel console output (not intermixed with test programs): msg+0x221/0x270 [ 291.697836][ T8396] ____sys_sendmsg+0x523/0x860 [ 291.697861][ T8396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.697877][ T8396] ? __fget_files+0x2a/0x420 [ 291.697896][ T8396] ? __fget_files+0x2a/0x420 [ 291.697920][ T8396] __sys_sendmsg+0x271/0x360 [ 291.697942][ T8396] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.697998][ T8396] ? do_syscall_64+0xb6/0x230 [ 291.698013][ T8396] do_syscall_64+0xf3/0x230 [ 291.698024][ T8396] ? clear_bhb_loop+0x45/0xa0 [ 291.698040][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.698053][ T8396] RIP: 0033:0x7f9ec798d169 [ 291.698065][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.698076][ T8396] RSP: 002b:00007f9ec8730038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.698090][ T8396] RAX: ffffffffffffffda RBX: 00007f9ec7ba5fa0 RCX: 00007f9ec798d169 [ 291.698100][ T8396] RDX: 0000000000004000 RSI: 0000200000000c40 RDI: 0000000000000004 [ 291.698108][ T8396] RBP: 00007f9ec8730090 R08: 0000000000000000 R09: 0000000000000000 [ 291.698116][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.698124][ T8396] R13: 0000000000000000 R14: 00007f9ec7ba5fa0 R15: 00007fff89d0bc68 [ 291.698145][ T8396] [ 292.253555][ T7345] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.292399][ T7345] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 292.316064][ T7345] usb 1-1: can't read configurations, error -71 [ 292.395577][ T8411] overlayfs: failed to clone upperpath [ 292.426051][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 293.006686][ T8410] tipc: Enabling of bearer rejected, failed to enable media [ 293.128948][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'. [ 293.511682][ T8435] FAULT_INJECTION: forcing a failure. [ 293.511682][ T8435] name failslab, interval 1, probability 0, space 0, times 0 [ 293.655273][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.1.690 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 293.655301][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.655311][ T8435] Call Trace: [ 293.655318][ T8435] [ 293.655325][ T8435] dump_stack_lvl+0x241/0x360 [ 293.655352][ T8435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.655373][ T8435] ? __pfx__printk+0x10/0x10 [ 293.655398][ T8435] ? __pfx___might_resched+0x10/0x10 [ 293.655421][ T8435] should_fail_ex+0x424/0x570 [ 293.655451][ T8435] should_failslab+0xac/0x100 [ 293.655474][ T8435] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 293.655496][ T8435] ? __alloc_skb+0x1c2/0x480 [ 293.655521][ T8435] __alloc_skb+0x1c2/0x480 [ 293.655547][ T8435] ? __pfx___alloc_skb+0x10/0x10 [ 293.655570][ T8435] ? netlink_autobind+0xd6/0x2f0 [ 293.655588][ T8435] ? netlink_autobind+0x2b0/0x2f0 [ 293.655611][ T8435] netlink_sendmsg+0x638/0xcd0 [ 293.655642][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.655673][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.655689][ T8435] __sock_sendmsg+0x221/0x270 [ 293.655710][ T8435] ____sys_sendmsg+0x523/0x860 [ 293.655742][ T8435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.655761][ T8435] ? __fget_files+0x2a/0x420 [ 293.655786][ T8435] ? __fget_files+0x2a/0x420 [ 293.655816][ T8435] __sys_sendmsg+0x271/0x360 [ 293.655843][ T8435] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.655918][ T8435] ? do_syscall_64+0xb6/0x230 [ 293.655936][ T8435] do_syscall_64+0xf3/0x230 [ 293.655952][ T8435] ? clear_bhb_loop+0x45/0xa0 [ 293.655971][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.655990][ T8435] RIP: 0033:0x7f53f678d169 [ 293.656005][ T8435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.656019][ T8435] RSP: 002b:00007f53f75e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.656037][ T8435] RAX: ffffffffffffffda RBX: 00007f53f69a5fa0 RCX: 00007f53f678d169 [ 293.656049][ T8435] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 293.656059][ T8435] RBP: 00007f53f75e9090 R08: 0000000000000000 R09: 0000000000000000 [ 293.656070][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.656080][ T8435] R13: 0000000000000000 R14: 00007f53f69a5fa0 R15: 00007fff062be2b8 [ 293.656115][ T8435] [ 293.679484][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 293.938739][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.693'. [ 294.583808][ T5837] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 294.722463][ T8471] FAULT_INJECTION: forcing a failure. [ 294.722463][ T8471] name failslab, interval 1, probability 0, space 0, times 0 [ 294.758070][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: syz.3.699 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 294.758094][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.758104][ T8471] Call Trace: [ 294.758110][ T8471] [ 294.758117][ T8471] dump_stack_lvl+0x241/0x360 [ 294.758143][ T8471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.758164][ T8471] ? __pfx__printk+0x10/0x10 [ 294.758186][ T8471] ? __pfx___might_resched+0x10/0x10 [ 294.758226][ T8471] should_fail_ex+0x424/0x570 [ 294.758255][ T8471] should_failslab+0xac/0x100 [ 294.758276][ T8471] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 294.758297][ T8471] ? __alloc_skb+0x1c2/0x480 [ 294.758321][ T8471] __alloc_skb+0x1c2/0x480 [ 294.758344][ T8471] ? __pfx___alloc_skb+0x10/0x10 [ 294.758367][ T8471] ? netlink_autobind+0xd6/0x2f0 [ 294.758383][ T8471] ? netlink_autobind+0x2b0/0x2f0 [ 294.758406][ T8471] netlink_sendmsg+0x638/0xcd0 [ 294.758434][ T8471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.758465][ T8471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.758481][ T8471] __sock_sendmsg+0x221/0x270 [ 294.758501][ T8471] ____sys_sendmsg+0x523/0x860 [ 294.758533][ T8471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.758553][ T8471] ? __fget_files+0x2a/0x420 [ 294.758578][ T8471] ? __fget_files+0x2a/0x420 [ 294.758606][ T8471] __sys_sendmsg+0x271/0x360 [ 294.758632][ T8471] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.758697][ T8471] ? do_syscall_64+0xb6/0x230 [ 294.758717][ T8471] do_syscall_64+0xf3/0x230 [ 294.758732][ T8471] ? clear_bhb_loop+0x45/0xa0 [ 294.758750][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.758765][ T8471] RIP: 0033:0x7fe8b5d8d169 [ 294.758780][ T8471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.758794][ T8471] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.758813][ T8471] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 294.758824][ T8471] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 294.758834][ T8471] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.758843][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.758854][ T8471] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 294.758881][ T8471] [ 295.024007][ T8474] FAULT_INJECTION: forcing a failure. [ 295.024007][ T8474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.037173][ T8474] CPU: 0 UID: 0 PID: 8474 Comm: syz.0.700 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 295.037197][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.037207][ T8474] Call Trace: [ 295.037213][ T8474] [ 295.037220][ T8474] dump_stack_lvl+0x241/0x360 [ 295.037250][ T8474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.037271][ T8474] ? __pfx__printk+0x10/0x10 [ 295.037303][ T8474] should_fail_ex+0x424/0x570 [ 295.037333][ T8474] _copy_to_user+0x31/0xb0 [ 295.037356][ T8474] simple_read_from_buffer+0xc4/0x170 [ 295.037383][ T8474] proc_fail_nth_read+0x1ef/0x260 [ 295.037409][ T8474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.037434][ T8474] ? rw_verify_area+0x246/0x630 [ 295.037449][ T8474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.037473][ T8474] vfs_read+0x21f/0xb90 [ 295.037494][ T8474] ? __pfx___mutex_lock+0x10/0x10 [ 295.037512][ T8474] ? __pfx_vfs_read+0x10/0x10 [ 295.037531][ T8474] ? __fget_files+0x2a/0x420 [ 295.037554][ T8474] ? __fget_files+0x39d/0x420 [ 295.037574][ T8474] ? __fget_files+0x2a/0x420 [ 295.037604][ T8474] ksys_read+0x19d/0x2d0 [ 295.037624][ T8474] ? __pfx_ksys_read+0x10/0x10 [ 295.037647][ T8474] ? do_syscall_64+0xb6/0x230 [ 295.037665][ T8474] do_syscall_64+0xf3/0x230 [ 295.037682][ T8474] ? clear_bhb_loop+0x45/0xa0 [ 295.037701][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.037716][ T8474] RIP: 0033:0x7f2a6438bb7c [ 295.037732][ T8474] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.037746][ T8474] RSP: 002b:00007f2a651ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.037764][ T8474] RAX: ffffffffffffffda RBX: 00007f2a645a5fa0 RCX: 00007f2a6438bb7c [ 295.037776][ T8474] RDX: 000000000000000f RSI: 00007f2a651ae0a0 RDI: 0000000000000005 [ 295.037787][ T8474] RBP: 00007f2a651ae090 R08: 0000000000000000 R09: 0000000000000000 [ 295.037797][ T8474] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 295.037808][ T8474] R13: 0000000000000000 R14: 00007f2a645a5fa0 R15: 00007ffeeb8ea188 [ 295.037836][ T8474] [ 295.414155][ T5837] usb 2-1: config 1 has an invalid interface number: 66 but max is 0 [ 295.484147][ T5837] usb 2-1: config 1 has no interface number 0 [ 295.674331][ T5837] usb 2-1: config 1 interface 66 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 295.689083][ T5837] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=5f.72 [ 295.698183][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.720063][ T5837] usb 2-1: Product: ఊ [ 295.724282][ T5837] usb 2-1: Manufacturer: 〯2ꊱᆲ຋﵋ఱ偋䰓戰贉㳞垓რ䏊蓱먠率挢쉽䢹㥞㨕ㅈ鍎墬硴霨䡻焹䅜Ⴑ䯪೿朎भ섐䂩篣衣侔茄◱ܓ헆撁䥖๽딜檌ٙ絊᪸⳺๊췾쀿隮ฬચﲈ뀜槹ᅹ♐≞呛橗痿欳鞔黸黬ѱ諁ず톚嬱湁鸔$퓆㠵㣺ᗷु㑆킩透䢺郗삣룺᭙꜅틼 [ 295.767659][ T5837] usb 2-1: SerialNumber: Б [ 295.893875][ T8455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.149498][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.158188][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.236402][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.296933][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.502879][ T5837] usb 2-1: USB disconnect, device number 7 [ 298.928058][ T8519] FAULT_INJECTION: forcing a failure. [ 298.928058][ T8519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.958273][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.3.713 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 298.958300][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.958310][ T8519] Call Trace: [ 298.958317][ T8519] [ 298.958324][ T8519] dump_stack_lvl+0x241/0x360 [ 298.958353][ T8519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.958375][ T8519] ? __pfx__printk+0x10/0x10 [ 298.958408][ T8519] should_fail_ex+0x424/0x570 [ 298.958438][ T8519] _copy_from_user+0x2d/0xb0 [ 298.958460][ T8519] sctp_setsockopt+0xc9/0x11e0 [ 298.958483][ T8519] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 298.958503][ T8519] do_sock_setsockopt+0x3b1/0x710 [ 298.958530][ T8519] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 298.958558][ T8519] ? __fget_files+0x2a/0x420 [ 298.958584][ T8519] ? __fget_files+0x39d/0x420 [ 298.958603][ T8519] ? __fget_files+0x2a/0x420 [ 298.958633][ T8519] __x64_sys_setsockopt+0x1ee/0x280 [ 298.958661][ T8519] do_syscall_64+0xf3/0x230 [ 298.958678][ T8519] ? clear_bhb_loop+0x45/0xa0 [ 298.958699][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.958714][ T8519] RIP: 0033:0x7fe8b5d8d169 [ 298.958730][ T8519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.958747][ T8519] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.958766][ T8519] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 298.958778][ T8519] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 298.958788][ T8519] RBP: 00007fe8b6ba6090 R08: 000000000000009c R09: 0000000000000000 [ 298.958798][ T8519] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 298.958808][ T8519] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 298.958836][ T8519] [ 299.249720][ T8521] FAULT_INJECTION: forcing a failure. [ 299.249720][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.365841][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz.4.714 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 299.365868][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.365879][ T8521] Call Trace: [ 299.365887][ T8521] [ 299.365895][ T8521] dump_stack_lvl+0x241/0x360 [ 299.365923][ T8521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.365945][ T8521] ? __pfx__printk+0x10/0x10 [ 299.365980][ T8521] should_fail_ex+0x424/0x570 [ 299.366010][ T8521] _copy_from_user+0x2d/0xb0 [ 299.366032][ T8521] kstrtouint_from_user+0xce/0x1a0 [ 299.366055][ T8521] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 299.366077][ T8521] ? __lock_acquire+0xad5/0xd80 [ 299.366103][ T8521] proc_fail_nth_write+0xac/0x2d0 [ 299.366127][ T8521] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 299.366148][ T8521] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.366177][ T8521] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.366202][ T8521] vfs_write+0x2bc/0xd10 [ 299.366226][ T8521] ? fdget_pos+0x247/0x310 [ 299.366252][ T8521] ? __pfx_vfs_write+0x10/0x10 [ 299.366273][ T8521] ? __fget_files+0x2a/0x420 [ 299.366296][ T8521] ? __fget_files+0x39d/0x420 [ 299.366316][ T8521] ? __fget_files+0x2a/0x420 [ 299.366347][ T8521] ksys_write+0x19d/0x2d0 [ 299.366367][ T8521] ? __pfx_ksys_write+0x10/0x10 [ 299.366391][ T8521] ? do_syscall_64+0xb6/0x230 [ 299.366412][ T8521] do_syscall_64+0xf3/0x230 [ 299.366428][ T8521] ? clear_bhb_loop+0x45/0xa0 [ 299.366448][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.366464][ T8521] RIP: 0033:0x7f9ec798bc1f [ 299.366480][ T8521] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 299.366493][ T8521] RSP: 002b:00007f9ec8730030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 299.366512][ T8521] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9ec798bc1f [ 299.366532][ T8521] RDX: 0000000000000001 RSI: 00007f9ec87300a0 RDI: 0000000000000004 [ 299.366542][ T8521] RBP: 00007f9ec8730090 R08: 0000000000000000 R09: 0000000000000000 [ 299.366553][ T8521] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 299.366563][ T8521] R13: 0000000000000000 R14: 00007f9ec7ba5fa0 R15: 00007fff89d0bc68 [ 299.366591][ T8521] [ 299.758349][ T8528] FAULT_INJECTION: forcing a failure. [ 299.758349][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.780697][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.4.717 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 299.780724][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.780735][ T8528] Call Trace: [ 299.780742][ T8528] [ 299.780749][ T8528] dump_stack_lvl+0x241/0x360 [ 299.780779][ T8528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.780800][ T8528] ? __pfx__printk+0x10/0x10 [ 299.780834][ T8528] should_fail_ex+0x424/0x570 [ 299.780864][ T8528] _copy_from_user+0x2d/0xb0 [ 299.780887][ T8528] sctp_setsockopt+0xc9/0x11e0 [ 299.780911][ T8528] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 299.780929][ T8528] do_sock_setsockopt+0x3b1/0x710 [ 299.780958][ T8528] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 299.780978][ T8528] ? __fget_files+0x2a/0x420 [ 299.781004][ T8528] ? __fget_files+0x39d/0x420 [ 299.781024][ T8528] ? __fget_files+0x2a/0x420 [ 299.781054][ T8528] __x64_sys_setsockopt+0x1ee/0x280 [ 299.781083][ T8528] do_syscall_64+0xf3/0x230 [ 299.781100][ T8528] ? clear_bhb_loop+0x45/0xa0 [ 299.781121][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.781138][ T8528] RIP: 0033:0x7f9ec798d169 [ 299.781153][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.781167][ T8528] RSP: 002b:00007f9ec870f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.781186][ T8528] RAX: ffffffffffffffda RBX: 00007f9ec7ba6080 RCX: 00007f9ec798d169 [ 299.781199][ T8528] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 299.781209][ T8528] RBP: 00007f9ec870f090 R08: 0000000000000008 R09: 0000000000000000 [ 299.781220][ T8528] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 299.781231][ T8528] R13: 0000000000000001 R14: 00007f9ec7ba6080 R15: 00007fff89d0bc68 [ 299.781259][ T8528] [ 301.585727][ T8554] __nla_validate_parse: 2 callbacks suppressed [ 301.585746][ T8554] netlink: 52 bytes leftover after parsing attributes in process `syz.0.722'. [ 301.694438][ T8546] FAULT_INJECTION: forcing a failure. [ 301.694438][ T8546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.743027][ T8546] CPU: 1 UID: 0 PID: 8546 Comm: syz.1.720 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 301.743054][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.743064][ T8546] Call Trace: [ 301.743072][ T8546] [ 301.743079][ T8546] dump_stack_lvl+0x241/0x360 [ 301.743109][ T8546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.743130][ T8546] ? __pfx__printk+0x10/0x10 [ 301.743162][ T8546] should_fail_ex+0x424/0x570 [ 301.743192][ T8546] _copy_to_user+0x31/0xb0 [ 301.743215][ T8546] simple_read_from_buffer+0xc4/0x170 [ 301.743241][ T8546] proc_fail_nth_read+0x1ef/0x260 [ 301.743267][ T8546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.743293][ T8546] ? rw_verify_area+0x246/0x630 [ 301.743310][ T8546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.743334][ T8546] vfs_read+0x21f/0xb90 [ 301.743356][ T8546] ? __pfx___mutex_lock+0x10/0x10 [ 301.743374][ T8546] ? __pfx_vfs_read+0x10/0x10 [ 301.743395][ T8546] ? __fget_files+0x2a/0x420 [ 301.743419][ T8546] ? __fget_files+0x39d/0x420 [ 301.743439][ T8546] ? __fget_files+0x2a/0x420 [ 301.743471][ T8546] ksys_read+0x19d/0x2d0 [ 301.743491][ T8546] ? __pfx_ksys_read+0x10/0x10 [ 301.743515][ T8546] ? do_syscall_64+0xb6/0x230 [ 301.743534][ T8546] do_syscall_64+0xf3/0x230 [ 301.743550][ T8546] ? clear_bhb_loop+0x45/0xa0 [ 301.743577][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.743593][ T8546] RIP: 0033:0x7f53f678bb7c [ 301.743608][ T8546] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 301.743622][ T8546] RSP: 002b:00007f53f75c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.743640][ T8546] RAX: ffffffffffffffda RBX: 00007f53f69a6080 RCX: 00007f53f678bb7c [ 301.743653][ T8546] RDX: 000000000000000f RSI: 00007f53f75c80a0 RDI: 0000000000000004 [ 301.743663][ T8546] RBP: 00007f53f75c8090 R08: 0000000000000000 R09: 0000000000000000 [ 301.743674][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.743683][ T8546] R13: 0000000000000001 R14: 00007f53f69a6080 R15: 00007fff062be2b8 [ 301.743712][ T8546] [ 304.990419][ T8601] overlayfs: failed to clone upperpath [ 305.056933][ T8605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.364824][ T8633] FAULT_INJECTION: forcing a failure. [ 306.364824][ T8633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.383805][ T8632] FAULT_INJECTION: forcing a failure. [ 306.383805][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 306.400002][ T8633] CPU: 1 UID: 0 PID: 8633 Comm: syz.3.741 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 306.400029][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.400051][ T8633] Call Trace: [ 306.400058][ T8633] [ 306.400065][ T8633] dump_stack_lvl+0x241/0x360 [ 306.400093][ T8633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.400115][ T8633] ? __pfx__printk+0x10/0x10 [ 306.400148][ T8633] should_fail_ex+0x424/0x570 [ 306.400179][ T8633] _copy_from_iter+0x211/0x1c70 [ 306.400200][ T8633] ? 0xffffffffa000095c [ 306.400216][ T8633] ? is_bpf_text_address+0x288/0x2a0 [ 306.400232][ T8633] ? is_bpf_text_address+0x26/0x2a0 [ 306.400250][ T8633] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.400276][ T8633] ? __pfx__copy_from_iter+0x10/0x10 [ 306.400298][ T8633] ? smack_socket_sendmsg+0x184/0x580 [ 306.400332][ T8633] bcm_sendmsg+0x15e/0x7c0 [ 306.400356][ T8633] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 306.400374][ T8633] ? __pfx_bcm_sendmsg+0x10/0x10 [ 306.400409][ T8633] ? __pfx_bcm_sendmsg+0x10/0x10 [ 306.400425][ T8633] __sock_sendmsg+0x221/0x270 [ 306.400448][ T8633] ____sys_sendmsg+0x523/0x860 [ 306.400480][ T8633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.400500][ T8633] ? __fget_files+0x2a/0x420 [ 306.400526][ T8633] ? __fget_files+0x2a/0x420 [ 306.400557][ T8633] __sys_sendmsg+0x271/0x360 [ 306.400584][ T8633] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.400663][ T8633] ? do_syscall_64+0xb6/0x230 [ 306.400683][ T8633] do_syscall_64+0xf3/0x230 [ 306.400699][ T8633] ? clear_bhb_loop+0x45/0xa0 [ 306.400718][ T8633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.400739][ T8633] RIP: 0033:0x7fe8b5d8d169 [ 306.400753][ T8633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.400767][ T8633] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.400786][ T8633] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 306.400799][ T8633] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 306.400809][ T8633] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.400819][ T8633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.400829][ T8633] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 306.400857][ T8633] [ 306.403070][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.1.743 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 306.403095][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.403105][ T8632] Call Trace: [ 306.403113][ T8632] [ 306.403120][ T8632] dump_stack_lvl+0x241/0x360 [ 306.403153][ T8632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.403174][ T8632] ? __pfx__printk+0x10/0x10 [ 306.403194][ T8632] ? kstrtoull+0x1d3/0x2f0 [ 306.403214][ T8632] ? __pfx___might_resched+0x10/0x10 [ 306.403238][ T8632] should_fail_ex+0x424/0x570 [ 306.403267][ T8632] should_failslab+0xac/0x100 [ 306.403291][ T8632] __kmalloc_noprof+0xdf/0x4d0 [ 306.403312][ T8632] ? tomoyo_encode2+0x27e/0x550 [ 306.403332][ T8632] tomoyo_encode2+0x27e/0x550 [ 306.403357][ T8632] tomoyo_check_unix_address+0x36b/0x8e0 [ 306.403388][ T8632] ? tomoyo_check_unix_address+0x173/0x8e0 [ 306.403426][ T8632] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 306.403463][ T8632] ? __lock_acquire+0xad5/0xd80 [ 306.403488][ T8632] tomoyo_socket_connect_permission+0x282/0x380 [ 306.403517][ T8632] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 306.403559][ T8632] security_socket_connect+0xc6/0x2a0 [ 306.403582][ T8632] __sys_connect+0x1d7/0x2d0 [ 306.403603][ T8632] ? __fget_files+0x2a/0x420 [ 306.403625][ T8632] ? __pfx___sys_connect+0x10/0x10 [ 306.403671][ T8632] __x64_sys_connect+0x7a/0x90 [ 306.403693][ T8632] do_syscall_64+0xf3/0x230 [ 306.403710][ T8632] ? clear_bhb_loop+0x45/0xa0 [ 306.403730][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.403746][ T8632] RIP: 0033:0x7f53f678d169 [ 306.403761][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.403775][ T8632] RSP: 002b:00007f53f75e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 306.403793][ T8632] RAX: ffffffffffffffda RBX: 00007f53f69a5fa0 RCX: 00007f53f678d169 [ 306.403805][ T8632] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000004 [ 306.403816][ T8632] RBP: 00007f53f75e9090 R08: 0000000000000000 R09: 0000000000000000 [ 306.403827][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.403836][ T8632] R13: 0000000000000000 R14: 00007f53f69a5fa0 R15: 00007fff062be2b8 [ 306.403866][ T8632] [ 308.170923][ T8640] netlink: 92 bytes leftover after parsing attributes in process `syz.2.742'. [ 309.864142][ T8668] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.749'. [ 309.873235][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'. [ 311.654872][ T8689] FAULT_INJECTION: forcing a failure. [ 311.654872][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 311.761568][ T8689] CPU: 0 UID: 0 PID: 8689 Comm: syz.3.756 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 311.761597][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.761608][ T8689] Call Trace: [ 311.761617][ T8689] [ 311.761624][ T8689] dump_stack_lvl+0x241/0x360 [ 311.761655][ T8689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.761677][ T8689] ? __pfx__printk+0x10/0x10 [ 311.761703][ T8689] ? __pfx___might_resched+0x10/0x10 [ 311.761727][ T8689] should_fail_ex+0x424/0x570 [ 311.761757][ T8689] should_failslab+0xac/0x100 [ 311.761781][ T8689] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 311.761803][ T8689] ? __alloc_skb+0x1c2/0x480 [ 311.761830][ T8689] __alloc_skb+0x1c2/0x480 [ 311.761857][ T8689] ? __pfx___alloc_skb+0x10/0x10 [ 311.761880][ T8689] ? netlink_autobind+0xd6/0x2f0 [ 311.761899][ T8689] ? netlink_autobind+0x2b0/0x2f0 [ 311.761923][ T8689] netlink_sendmsg+0x638/0xcd0 [ 311.761955][ T8689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.761988][ T8689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.762005][ T8689] __sock_sendmsg+0x221/0x270 [ 311.762028][ T8689] ____sys_sendmsg+0x523/0x860 [ 311.762060][ T8689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.762080][ T8689] ? __fget_files+0x2a/0x420 [ 311.762106][ T8689] ? __fget_files+0x2a/0x420 [ 311.762136][ T8689] __sys_sendmsg+0x271/0x360 [ 311.762169][ T8689] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.762245][ T8689] ? do_syscall_64+0xb6/0x230 [ 311.762265][ T8689] do_syscall_64+0xf3/0x230 [ 311.762281][ T8689] ? clear_bhb_loop+0x45/0xa0 [ 311.762302][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.762318][ T8689] RIP: 0033:0x7fe8b5d8d169 [ 311.762334][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.762348][ T8689] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.762367][ T8689] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 311.762387][ T8689] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 311.762398][ T8689] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.762408][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.762419][ T8689] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 311.762447][ T8689] [ 312.897999][ T30] audit: type=1326 audit(2000000080.186:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 312.930747][ T30] audit: type=1326 audit(2000000080.214:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 312.999255][ T30] audit: type=1326 audit(2000000080.214:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 313.126227][ T30] audit: type=1326 audit(2000000080.214:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 313.193271][ T30] audit: type=1326 audit(2000000080.214:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 313.243377][ T30] audit: type=1326 audit(2000000080.242:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 313.294915][ T30] audit: type=1326 audit(2000000080.242:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 313.343169][ T8709] overlayfs: failed to clone upperpath [ 313.358094][ T30] audit: type=1326 audit(2000000080.242:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0205d8d169 code=0x7ffc0000 [ 313.468804][ T30] audit: type=1326 audit(2000000080.242:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0205d8f087 code=0x7ffc0000 [ 313.529494][ T30] audit: type=1326 audit(2000000080.261:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0205d8effc code=0x7ffc0000 [ 316.748238][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 317.058684][ T5837] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 317.362680][ T5837] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 317.378302][ T5837] usb 1-1: config 8 has no interface number 0 [ 317.422014][ T5837] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 317.498352][ T5837] usb 1-1: config 8 interface 177 has no altsetting 0 [ 317.536573][ T5837] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 317.550096][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 317.706344][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 317.754432][ T8737] FAULT_INJECTION: forcing a failure. [ 317.754432][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 317.767092][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.799389][ T8725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.812423][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.4.772 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 317.812449][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.812459][ T8737] Call Trace: [ 317.812465][ T8737] [ 317.812472][ T8737] dump_stack_lvl+0x241/0x360 [ 317.812501][ T8737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.812521][ T8737] ? __pfx__printk+0x10/0x10 [ 317.812547][ T8737] ? __pfx___might_resched+0x10/0x10 [ 317.812571][ T8737] should_fail_ex+0x424/0x570 [ 317.812601][ T8737] should_failslab+0xac/0x100 [ 317.812624][ T8737] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 317.812665][ T8737] ? __alloc_skb+0x1c2/0x480 [ 317.812691][ T8737] __alloc_skb+0x1c2/0x480 [ 317.812717][ T8737] ? __pfx___alloc_skb+0x10/0x10 [ 317.812740][ T8737] ? netlink_autobind+0xd6/0x2f0 [ 317.812758][ T8737] ? netlink_autobind+0x2b0/0x2f0 [ 317.812781][ T8737] netlink_sendmsg+0x638/0xcd0 [ 317.812812][ T8737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.812841][ T8737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.812856][ T8737] __sock_sendmsg+0x221/0x270 [ 317.812878][ T8737] ____sys_sendmsg+0x523/0x860 [ 317.812910][ T8737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.812930][ T8737] ? __fget_files+0x2a/0x420 [ 317.812952][ T8737] ? __fget_files+0x2a/0x420 [ 317.812979][ T8737] __sys_sendmsg+0x271/0x360 [ 317.813005][ T8737] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.813083][ T8737] ? do_syscall_64+0xb6/0x230 [ 317.813101][ T8737] do_syscall_64+0xf3/0x230 [ 317.813114][ T8737] ? clear_bhb_loop+0x45/0xa0 [ 317.813132][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.813146][ T8737] RIP: 0033:0x7f9ec798d169 [ 317.813160][ T8737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.813172][ T8737] RSP: 002b:00007f9ec8730038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.813190][ T8737] RAX: ffffffffffffffda RBX: 00007f9ec7ba5fa0 RCX: 00007f9ec798d169 [ 317.813201][ T8737] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 317.813211][ T8737] RBP: 00007f9ec8730090 R08: 0000000000000000 R09: 0000000000000000 [ 317.813221][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.813229][ T8737] R13: 0000000000000000 R14: 00007f9ec7ba5fa0 R15: 00007fff89d0bc68 [ 317.813254][ T8737] [ 318.083033][ T8738] tipc: Enabled bearer , priority 10 [ 318.130315][ T8744] netlink: 'syz.0.766': attribute type 3 has an invalid length. [ 318.140352][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 318.360879][ T5837] usb 1-1: string descriptor 0 read error: -71 [ 318.377192][ C1] ir_toy 1-1:8.177: out urb status: -71 [ 319.091348][ T5837] ir_toy 1-1:8.177: could not write reset command: -110 [ 319.102605][ T5837] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 319.124511][ T5837] usb 1-1: USB disconnect, device number 15 [ 319.193875][ T8760] FAULT_INJECTION: forcing a failure. [ 319.193875][ T8760] name failslab, interval 1, probability 0, space 0, times 0 [ 319.357042][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.3.778 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 319.357067][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.357078][ T8760] Call Trace: [ 319.357085][ T8760] [ 319.357092][ T8760] dump_stack_lvl+0x241/0x360 [ 319.357122][ T8760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.357142][ T8760] ? __pfx__printk+0x10/0x10 [ 319.357166][ T8760] ? __pfx___might_resched+0x10/0x10 [ 319.357188][ T8760] should_fail_ex+0x424/0x570 [ 319.357216][ T8760] should_failslab+0xac/0x100 [ 319.357238][ T8760] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 319.357261][ T8760] ? __alloc_skb+0x1c2/0x480 [ 319.357287][ T8760] __alloc_skb+0x1c2/0x480 [ 319.357314][ T8760] ? __pfx___alloc_skb+0x10/0x10 [ 319.357335][ T8760] ? netlink_autobind+0xd6/0x2f0 [ 319.357351][ T8760] ? netlink_autobind+0x2b0/0x2f0 [ 319.357375][ T8760] netlink_sendmsg+0x638/0xcd0 [ 319.357408][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.357440][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.357456][ T8760] __sock_sendmsg+0x221/0x270 [ 319.357478][ T8760] ____sys_sendmsg+0x523/0x860 [ 319.357510][ T8760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.357531][ T8760] ? __fget_files+0x2a/0x420 [ 319.357555][ T8760] ? __fget_files+0x2a/0x420 [ 319.357585][ T8760] __sys_sendmsg+0x271/0x360 [ 319.357614][ T8760] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.357684][ T8760] ? do_syscall_64+0xb6/0x230 [ 319.357704][ T8760] do_syscall_64+0xf3/0x230 [ 319.357720][ T8760] ? clear_bhb_loop+0x45/0xa0 [ 319.357738][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.357753][ T8760] RIP: 0033:0x7fe8b5d8d169 [ 319.357767][ T8760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.357780][ T8760] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.357797][ T8760] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 319.357811][ T8760] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 319.357822][ T8760] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.357832][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.357842][ T8760] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 319.357869][ T8760] [ 319.363055][ T5902] tipc: Node number set to 771766885 [ 319.482660][ T8763] fuse: Bad value for 'fd' [ 319.818350][ T8767] FAULT_INJECTION: forcing a failure. [ 319.818350][ T8767] name failslab, interval 1, probability 0, space 0, times 0 [ 319.838646][ T8767] CPU: 1 UID: 0 PID: 8767 Comm: syz.3.782 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 319.838672][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.838682][ T8767] Call Trace: [ 319.838689][ T8767] [ 319.838697][ T8767] dump_stack_lvl+0x241/0x360 [ 319.838727][ T8767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.838749][ T8767] ? __pfx__printk+0x10/0x10 [ 319.838775][ T8767] ? __pfx___might_resched+0x10/0x10 [ 319.838798][ T8767] should_fail_ex+0x424/0x570 [ 319.838828][ T8767] should_failslab+0xac/0x100 [ 319.838852][ T8767] __kmalloc_noprof+0xdf/0x4d0 [ 319.838871][ T8767] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 319.838887][ T8767] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 319.838908][ T8767] tomoyo_realpath_from_path+0xcf/0x5e0 [ 319.838937][ T8767] tomoyo_path_number_perm+0x245/0x790 [ 319.838962][ T8767] ? tomoyo_path_number_perm+0x215/0x790 [ 319.838984][ T8767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.839010][ T8767] ? ksys_write+0x24e/0x2d0 [ 319.839036][ T8767] ? __lock_acquire+0xad5/0xd80 [ 319.839071][ T8767] ? __fget_files+0x2a/0x420 [ 319.839092][ T8767] ? __fget_files+0x2a/0x420 [ 319.839116][ T8767] ? __fget_files+0x2a/0x420 [ 319.839143][ T8767] security_file_ioctl+0xc6/0x2a0 [ 319.839166][ T8767] __se_sys_ioctl+0x46/0x160 [ 319.839188][ T8767] do_syscall_64+0xf3/0x230 [ 319.839205][ T8767] ? clear_bhb_loop+0x45/0xa0 [ 319.839226][ T8767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.839241][ T8767] RIP: 0033:0x7fe8b5d8d169 [ 319.839257][ T8767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.839271][ T8767] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.839290][ T8767] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 319.839302][ T8767] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 319.839312][ T8767] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.839323][ T8767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.839333][ T8767] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 319.839361][ T8767] [ 319.839369][ T8767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.213719][ T5902] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 320.629936][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 320.644464][ T5902] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.662461][ T5902] usb 1-1: config 0 has no interface number 0 [ 320.706457][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.726791][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.746044][ T5902] usb 1-1: Product: syz [ 320.757799][ T5902] usb 1-1: Manufacturer: syz [ 320.767341][ T5902] usb 1-1: SerialNumber: syz [ 320.783057][ T5902] usb 1-1: config 0 descriptor?? [ 320.900326][ T5902] smsc95xx v2.0.0 [ 320.904006][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 320.936875][ T5902] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 321.513134][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 322.025505][ T8797] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 322.746090][ T5872] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 322.916950][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 322.924478][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.950407][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.240486][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.255071][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.265993][ T7345] usb 1-1: USB disconnect, device number 16 [ 323.269306][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.170083][ T5872] usb 4-1: config 0 descriptor?? [ 324.762692][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x2 [ 324.816103][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.494434][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.519424][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.533167][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.553695][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.627260][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.646502][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.667604][ T5872] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 325.680920][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.796'. [ 325.715566][ T5872] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input8 [ 326.221053][ T5872] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 326.287804][ T8824] netlink: 64 bytes leftover after parsing attributes in process `syz.2.796'. [ 326.310895][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 326.587620][ T5872] usb 4-1: USB disconnect, device number 17 [ 326.609567][ T8835] tipc: Enabling of bearer rejected, failed to enable media [ 327.551893][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.558378][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.721880][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.801'. [ 328.052248][ T8846] netlink: 64 bytes leftover after parsing attributes in process `syz.3.801'. [ 328.063465][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 328.249626][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 328.263032][ T8856] FAULT_INJECTION: forcing a failure. [ 328.263032][ T8856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.278782][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.1.804 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 328.278808][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.278818][ T8856] Call Trace: [ 328.278825][ T8856] [ 328.278832][ T8856] dump_stack_lvl+0x241/0x360 [ 328.278862][ T8856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.278885][ T8856] ? __pfx__printk+0x10/0x10 [ 328.278919][ T8856] should_fail_ex+0x424/0x570 [ 328.278951][ T8856] _copy_from_user+0x2d/0xb0 [ 328.278973][ T8856] ipv6_flowlabel_opt+0x115/0x29d0 [ 328.279013][ T8856] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 328.279047][ T8856] ? __lock_acquire+0xad5/0xd80 [ 328.279074][ T8856] ? __local_bh_enable_ip+0x168/0x200 [ 328.279107][ T8856] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.279134][ T8856] ? __local_bh_enable_ip+0x168/0x200 [ 328.279159][ T8856] ? do_ipv6_setsockopt+0xccd/0x3680 [ 328.279194][ T8856] do_ipv6_setsockopt+0xf7c/0x3680 [ 328.279225][ T8856] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 328.279278][ T8856] ? rcu_read_lock_any_held+0xbb/0x160 [ 328.279299][ T8856] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 328.279323][ T8856] ? vfs_write+0xb29/0xd10 [ 328.279352][ T8856] ? ksys_write+0x24e/0x2d0 [ 328.279374][ T8856] ? __lock_acquire+0xad5/0xd80 [ 328.279393][ T8856] ipv6_setsockopt+0x5d/0x170 [ 328.279416][ T8856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 328.279437][ T8856] do_sock_setsockopt+0x3b1/0x710 [ 328.279467][ T8856] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 328.279487][ T8856] ? __fget_files+0x2a/0x420 [ 328.279514][ T8856] ? __fget_files+0x39d/0x420 [ 328.279535][ T8856] ? __fget_files+0x2a/0x420 [ 328.279566][ T8856] __x64_sys_setsockopt+0x1ee/0x280 [ 328.279597][ T8856] do_syscall_64+0xf3/0x230 [ 328.279614][ T8856] ? clear_bhb_loop+0x45/0xa0 [ 328.279635][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.279651][ T8856] RIP: 0033:0x7f53f678d169 [ 328.279667][ T8856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.279682][ T8856] RSP: 002b:00007f53f75e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.279701][ T8856] RAX: ffffffffffffffda RBX: 00007f53f69a5fa0 RCX: 00007f53f678d169 [ 328.279714][ T8856] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 328.279725][ T8856] RBP: 00007f53f75e9090 R08: 0000000000000020 R09: 0000000000000000 [ 328.279736][ T8856] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.279747][ T8856] R13: 0000000000000000 R14: 00007f53f69a5fa0 R15: 00007fff062be2b8 [ 328.279777][ T8856] [ 328.764877][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 328.938546][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 328.958786][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.329312][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.359186][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.372464][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 329.386569][ T5837] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 329.405792][ T5837] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.419449][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 329.441366][ T5837] usb 5-1: SerialNumber: syz [ 329.464329][ T8849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 329.476029][ T5837] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 329.498988][ T5837] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 330.444501][ T5138] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 330.863253][ T5902] usb 5-1: USB disconnect, device number 8 [ 331.029232][ T8882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.815'. [ 332.651929][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 332.651948][ T30] audit: type=1326 audit(2000000611.664:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.2.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0205d8d169 code=0x0 [ 333.540909][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 333.559533][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.821'. [ 333.629155][ T8911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.821'. [ 333.661923][ T8911] gretap1: entered promiscuous mode [ 333.681292][ T8911] gretap1: entered allmulticast mode [ 334.371342][ T8924] FAULT_INJECTION: forcing a failure. [ 334.371342][ T8924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.389068][ T8924] CPU: 0 UID: 0 PID: 8924 Comm: syz.0.826 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 334.389093][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.389103][ T8924] Call Trace: [ 334.389109][ T8924] [ 334.389116][ T8924] dump_stack_lvl+0x241/0x360 [ 334.389144][ T8924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.389163][ T8924] ? __pfx__printk+0x10/0x10 [ 334.389195][ T8924] should_fail_ex+0x424/0x570 [ 334.389223][ T8924] _copy_from_iter+0x211/0x1c70 [ 334.389258][ T8924] ? alloc_pages_mpol+0x4e6/0x690 [ 334.389283][ T8924] ? __pfx__copy_from_iter+0x10/0x10 [ 334.389308][ T8924] ? set_page_refcounted+0xa1/0x1e0 [ 334.389330][ T8924] ? alloc_pages_noprof+0x136/0x190 [ 334.389347][ T8924] ? page_copy_sane+0x46/0x260 [ 334.389367][ T8924] copy_page_from_iter+0x7a/0x100 [ 334.389390][ T8924] tun_get_user+0x1f6c/0x47c0 [ 334.389416][ T8924] ? tun_get_user+0x852/0x47c0 [ 334.389454][ T8924] ? kstrtouint+0xfc/0x190 [ 334.389470][ T8924] ? __pfx_tun_get_user+0x10/0x10 [ 334.389506][ T8924] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 334.389536][ T8924] ? tun_get+0x1e/0x2f0 [ 334.389556][ T8924] ? tun_get+0x1e/0x2f0 [ 334.389576][ T8924] ? tun_get+0x27d/0x2f0 [ 334.389598][ T8924] tun_chr_write_iter+0x10d/0x1f0 [ 334.389622][ T8924] vfs_write+0x70f/0xd10 [ 334.389647][ T8924] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 334.389670][ T8924] ? __pfx_vfs_write+0x10/0x10 [ 334.389690][ T8924] ? __fget_files+0x2a/0x420 [ 334.389716][ T8924] ? __fget_files+0x2a/0x420 [ 334.389746][ T8924] ksys_write+0x19d/0x2d0 [ 334.389766][ T8924] ? __pfx_ksys_write+0x10/0x10 [ 334.389788][ T8924] ? do_syscall_64+0xb6/0x230 [ 334.389807][ T8924] do_syscall_64+0xf3/0x230 [ 334.389823][ T8924] ? clear_bhb_loop+0x45/0xa0 [ 334.389842][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.389859][ T8924] RIP: 0033:0x7f2a6438bc1f [ 334.389874][ T8924] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 334.389888][ T8924] RSP: 002b:00007f2a651ae000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 334.389906][ T8924] RAX: ffffffffffffffda RBX: 00007f2a645a5fa0 RCX: 00007f2a6438bc1f [ 334.389919][ T8924] RDX: 000000000000007a RSI: 0000200000000700 RDI: 00000000000000c8 [ 334.389929][ T8924] RBP: 00007f2a651ae090 R08: 0000000000000000 R09: 0000000000000000 [ 334.389939][ T8924] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 334.389949][ T8924] R13: 0000000000000000 R14: 00007f2a645a5fa0 R15: 00007ffeeb8ea188 [ 334.389977][ T8924] [ 336.890096][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 337.107428][ T8960] bond_slave_0: entered promiscuous mode [ 337.113417][ T8960] bond_slave_1: entered promiscuous mode [ 337.130412][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 337.146756][ T8960] vlan2: entered promiscuous mode [ 337.165072][ T8960] bond0: entered promiscuous mode [ 337.175948][ T9] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 337.210448][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.253194][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.274905][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.283692][ T9] usb 1-1: Product: syz [ 337.296037][ T9] usb 1-1: Manufacturer: syz [ 337.305688][ T9] usb 1-1: SerialNumber: syz [ 337.334434][ T8966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.839'. [ 337.890746][ T8975] SET target dimension over the limit! [ 338.373619][ T8976] tipc: Enabling of bearer rejected, failed to enable media [ 338.922210][ T9] usb 1-1: 0:2 : does not exist [ 338.933248][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 339.053545][ T9] usb 1-1: USB disconnect, device number 17 [ 339.349127][ T6357] udevd[6357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.032966][ T9008] syz.1.855: attempt to access beyond end of device [ 340.032966][ T9008] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 340.090051][ T9011] program syz.4.857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.151391][ T9019] tipc: Enabling of bearer rejected, failed to enable media [ 344.334685][ T9043] overlayfs: failed to clone upperpath [ 344.559581][ T9048] netlink: 92 bytes leftover after parsing attributes in process `syz.4.867'. [ 346.183234][ T9058] syz.0.870: attempt to access beyond end of device [ 346.183234][ T9058] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 346.582692][ T9068] netlink: 'syz.1.875': attribute type 3 has an invalid length. [ 346.600928][ T9068] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 346.657512][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'. [ 346.738118][ T9068] netlink: 141184 bytes leftover after parsing attributes in process `syz.1.875'. [ 347.574636][ T9074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.876'. [ 347.703289][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 348.033050][ T9078] FAULT_INJECTION: forcing a failure. [ 348.033050][ T9078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.060644][ T9080] tipc: Enabling of bearer rejected, failed to enable media [ 348.082905][ T9078] CPU: 1 UID: 0 PID: 9078 Comm: syz.0.878 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 348.082931][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.082941][ T9078] Call Trace: [ 348.082948][ T9078] [ 348.082955][ T9078] dump_stack_lvl+0x241/0x360 [ 348.082985][ T9078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.083006][ T9078] ? __pfx__printk+0x10/0x10 [ 348.083038][ T9078] should_fail_ex+0x424/0x570 [ 348.083081][ T9078] _copy_from_user+0x2d/0xb0 [ 348.083103][ T9078] ucma_resolve_addr+0xaf/0x380 [ 348.083130][ T9078] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 348.083193][ T9078] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 348.083212][ T9078] ucma_write+0x2db/0x430 [ 348.083238][ T9078] ? __pfx_ucma_write+0x10/0x10 [ 348.083256][ T9078] ? bpf_lsm_file_permission+0x9/0x10 [ 348.083274][ T9078] ? rw_verify_area+0x246/0x630 [ 348.083290][ T9078] ? __pfx_ucma_write+0x10/0x10 [ 348.083310][ T9078] vfs_write+0x2bc/0xd10 [ 348.083339][ T9078] ? __pfx_vfs_write+0x10/0x10 [ 348.083357][ T9078] ? __fget_files+0x2a/0x420 [ 348.083378][ T9078] ? __fget_files+0x2a/0x420 [ 348.083400][ T9078] ? __fget_files+0x39d/0x420 [ 348.083419][ T9078] ? __fget_files+0x2a/0x420 [ 348.083450][ T9078] ksys_write+0x19d/0x2d0 [ 348.083470][ T9078] ? __pfx_ksys_write+0x10/0x10 [ 348.083493][ T9078] ? do_syscall_64+0xb6/0x230 [ 348.083513][ T9078] do_syscall_64+0xf3/0x230 [ 348.083529][ T9078] ? clear_bhb_loop+0x45/0xa0 [ 348.083549][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.083565][ T9078] RIP: 0033:0x7f2a6438d169 [ 348.083580][ T9078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.083594][ T9078] RSP: 002b:00007f2a651ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.083613][ T9078] RAX: ffffffffffffffda RBX: 00007f2a645a5fa0 RCX: 00007f2a6438d169 [ 348.083626][ T9078] RDX: 0000000000000118 RSI: 0000200000000280 RDI: 0000000000000003 [ 348.083636][ T9078] RBP: 00007f2a651ae090 R08: 0000000000000000 R09: 0000000000000000 [ 348.083645][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.083654][ T9078] R13: 0000000000000000 R14: 00007f2a645a5fa0 R15: 00007ffeeb8ea188 [ 348.083679][ T9078] [ 348.610850][ T9088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.327706][ T5870] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 350.552340][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 350.559705][ T5870] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 350.579903][ T5870] usb 2-1: config 0 has no interface number 0 [ 351.339997][ T5870] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 351.364630][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.552391][ T5870] usb 2-1: Product: syz [ 351.557294][ T5870] usb 2-1: Manufacturer: syz [ 351.561925][ T5870] usb 2-1: SerialNumber: syz [ 351.588356][ T5870] usb 2-1: config 0 descriptor?? [ 351.602674][ T5870] smsc95xx v2.0.0 [ 351.606362][ T5870] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 351.623315][ T9119] syz.0.888: attempt to access beyond end of device [ 351.623315][ T9119] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 351.670972][ T30] audit: type=1326 audit(2000000629.455:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9121 comm="syz.2.890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0205d8d169 code=0x0 [ 351.822960][ T5870] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 353.668119][ T9] usb 2-1: USB disconnect, device number 8 [ 353.883804][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.894'. [ 354.211299][ T9152] SET target dimension over the limit! [ 355.161526][ T9146] FAULT_INJECTION: forcing a failure. [ 355.161526][ T9146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.444669][ T9146] CPU: 0 UID: 0 PID: 9146 Comm: syz.0.895 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 355.444704][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.444715][ T9146] Call Trace: [ 355.444722][ T9146] [ 355.444729][ T9146] dump_stack_lvl+0x241/0x360 [ 355.444758][ T9146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.444779][ T9146] ? __pfx__printk+0x10/0x10 [ 355.444811][ T9146] should_fail_ex+0x424/0x570 [ 355.444838][ T9146] _copy_from_user+0x2d/0xb0 [ 355.444860][ T9146] move_addr_to_kernel+0x7f/0x170 [ 355.444879][ T9146] __sys_bind+0x12e/0x290 [ 355.444902][ T9146] ? __pfx___sys_bind+0x10/0x10 [ 355.444946][ T9146] __x64_sys_bind+0x7a/0x90 [ 355.444967][ T9146] do_syscall_64+0xf3/0x230 [ 355.444984][ T9146] ? clear_bhb_loop+0x45/0xa0 [ 355.445004][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.445020][ T9146] RIP: 0033:0x7f2a6438d169 [ 355.445036][ T9146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.445049][ T9146] RSP: 002b:00007f2a651ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 355.445068][ T9146] RAX: ffffffffffffffda RBX: 00007f2a645a5fa0 RCX: 00007f2a6438d169 [ 355.445081][ T9146] RDX: 0000000000000006 RSI: 00002000000002c0 RDI: 0000000000000004 [ 355.445092][ T9146] RBP: 00007f2a651ae090 R08: 0000000000000000 R09: 0000000000000000 [ 355.445102][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.445112][ T9146] R13: 0000000000000000 R14: 00007f2a645a5fa0 R15: 00007ffeeb8ea188 [ 355.445141][ T9146] [ 355.962518][ T9160] syz.4.901: attempt to access beyond end of device [ 355.962518][ T9160] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 357.301720][ T9167] tipc: Enabling of bearer rejected, failed to enable media [ 357.441025][ T9173] SET target dimension over the limit! [ 358.649108][ T9182] program syz.3.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.730730][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 358.733079][ T9185] netlink: 72 bytes leftover after parsing attributes in process `syz.2.910'. [ 358.876124][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 358.891255][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 358.962325][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 359.020318][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 359.073157][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.124172][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.206968][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.257180][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.541484][ T5893] usb 2-1: GET_CAPABILITIES returned 0 [ 359.554085][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 359.759094][ T5893] usb 2-1: USB disconnect, device number 9 [ 359.893459][ T9202] syz.3.913: attempt to access beyond end of device [ 359.893459][ T9202] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 360.760226][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.916'. [ 360.956968][ T9211] netlink: 64 bytes leftover after parsing attributes in process `syz.4.918'. [ 361.057476][ T9211] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 361.064138][ T9211] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.100859][ T9211] vhci_hcd vhci_hcd.0: Device attached [ 361.151608][ T9212] vhci_hcd: connection closed [ 361.153501][ T6106] vhci_hcd: stop threads [ 361.312981][ T6106] vhci_hcd: release socket [ 361.338387][ T6106] vhci_hcd: disconnect device [ 362.168789][ T5870] vhci_hcd: vhci_device speed not set [ 362.170669][ T9223] tipc: Enabling of bearer rejected, failed to enable media [ 362.209277][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 363.750988][ T9247] syz.1.926: attempt to access beyond end of device [ 363.750988][ T9247] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 370.172260][ T9271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.278279][ T9275] FAULT_INJECTION: forcing a failure. [ 370.278279][ T9275] name failslab, interval 1, probability 0, space 0, times 0 [ 370.293485][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: syz.1.936 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 370.293512][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.293524][ T9275] Call Trace: [ 370.293532][ T9275] [ 370.293539][ T9275] dump_stack_lvl+0x241/0x360 [ 370.293568][ T9275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.293589][ T9275] ? __pfx__printk+0x10/0x10 [ 370.293615][ T9275] ? __pfx___might_resched+0x10/0x10 [ 370.293638][ T9275] should_fail_ex+0x424/0x570 [ 370.293664][ T9275] should_failslab+0xac/0x100 [ 370.293684][ T9275] ? __get_vm_area_node+0x132/0x2d0 [ 370.293702][ T9275] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 370.293730][ T9275] __get_vm_area_node+0x132/0x2d0 [ 370.293755][ T9275] __vmalloc_node_range_noprof+0x349/0x1390 [ 370.293776][ T9275] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 370.293794][ T9275] ? kstrtoull+0x1d3/0x2f0 [ 370.293812][ T9275] ? __pfx_kstrtoull+0x10/0x10 [ 370.293846][ T9275] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.293873][ T9275] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 370.293898][ T9275] __vmalloc_noprof+0x79/0x90 [ 370.293920][ T9275] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 370.293936][ T9275] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 370.293951][ T9275] ? bpf_prog_alloc+0x28/0x1b0 [ 370.293969][ T9275] bpf_prog_alloc+0x3a/0x1b0 [ 370.293986][ T9275] bpf_prog_load+0x7f4/0x2250 [ 370.294015][ T9275] ? __pfx_bpf_prog_load+0x10/0x10 [ 370.294052][ T9275] ? bpf_lsm_bpf+0x9/0x10 [ 370.294072][ T9275] __sys_bpf+0x5dd/0x8b0 [ 370.294098][ T9275] ? __pfx___sys_bpf+0x10/0x10 [ 370.294131][ T9275] ? ksys_write+0x275/0x2d0 [ 370.294159][ T9275] __x64_sys_bpf+0x7c/0x90 [ 370.294180][ T9275] do_syscall_64+0xf3/0x230 [ 370.294196][ T9275] ? clear_bhb_loop+0x45/0xa0 [ 370.294214][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.294228][ T9275] RIP: 0033:0x7f53f678d169 [ 370.294242][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.294256][ T9275] RSP: 002b:00007f53f75e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.294273][ T9275] RAX: ffffffffffffffda RBX: 00007f53f69a5fa0 RCX: 00007f53f678d169 [ 370.294284][ T9275] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 370.294303][ T9275] RBP: 00007f53f75e9090 R08: 0000000000000000 R09: 0000000000000000 [ 370.294313][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.294322][ T9275] R13: 0000000000000001 R14: 00007f53f69a5fa0 R15: 00007fff062be2b8 [ 370.294347][ T9275] [ 370.330948][ T9275] syz.1.936: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 370.630430][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: syz.1.936 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 370.630456][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.630466][ T9275] Call Trace: [ 370.630473][ T9275] [ 370.630480][ T9275] dump_stack_lvl+0x241/0x360 [ 370.630508][ T9275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.630528][ T9275] ? __pfx__printk+0x10/0x10 [ 370.630548][ T9275] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 370.630571][ T9275] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 370.630591][ T9275] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 370.630611][ T9275] warn_alloc+0x27c/0x410 [ 370.630633][ T9275] ? __pfx_warn_alloc+0x10/0x10 [ 370.630659][ T9275] ? __get_vm_area_node+0x280/0x2d0 [ 370.630688][ T9275] __vmalloc_node_range_noprof+0x36e/0x1390 [ 370.630711][ T9275] ? kstrtoull+0x1d3/0x2f0 [ 370.630730][ T9275] ? __pfx_kstrtoull+0x10/0x10 [ 370.630766][ T9275] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.630798][ T9275] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 370.630813][ T9275] __vmalloc_noprof+0x79/0x90 [ 370.630835][ T9275] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 370.630851][ T9275] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 370.630865][ T9275] ? bpf_prog_alloc+0x28/0x1b0 [ 370.630882][ T9275] bpf_prog_alloc+0x3a/0x1b0 [ 370.630899][ T9275] bpf_prog_load+0x7f4/0x2250 [ 370.630925][ T9275] ? __pfx_bpf_prog_load+0x10/0x10 [ 370.630961][ T9275] ? bpf_lsm_bpf+0x9/0x10 [ 370.630981][ T9275] __sys_bpf+0x5dd/0x8b0 [ 370.631005][ T9275] ? __pfx___sys_bpf+0x10/0x10 [ 370.631039][ T9275] ? ksys_write+0x275/0x2d0 [ 370.631070][ T9275] __x64_sys_bpf+0x7c/0x90 [ 370.631090][ T9275] do_syscall_64+0xf3/0x230 [ 370.631114][ T9275] ? clear_bhb_loop+0x45/0xa0 [ 370.631133][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.631149][ T9275] RIP: 0033:0x7f53f678d169 [ 370.631163][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.631175][ T9275] RSP: 002b:00007f53f75e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.631193][ T9275] RAX: ffffffffffffffda RBX: 00007f53f69a5fa0 RCX: 00007f53f678d169 [ 370.631204][ T9275] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 370.631213][ T9275] RBP: 00007f53f75e9090 R08: 0000000000000000 R09: 0000000000000000 [ 370.631222][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.631231][ T9275] R13: 0000000000000001 R14: 00007f53f69a5fa0 R15: 00007fff062be2b8 [ 370.631256][ T9275] [ 370.631349][ T9275] Mem-Info: [ 371.008810][ T9275] active_anon:346 inactive_anon:8846 isolated_anon:0 [ 371.008810][ T9275] active_file:14631 inactive_file:38298 isolated_file:0 [ 371.008810][ T9275] unevictable:768 dirty:145 writeback:0 [ 371.008810][ T9275] slab_reclaimable:10413 slab_unreclaimable:99125 [ 371.008810][ T9275] mapped:34059 shmem:5652 pagetables:894 [ 371.008810][ T9275] sec_pagetables:0 bounce:0 [ 371.008810][ T9275] kernel_misc_reclaimable:0 [ 371.008810][ T9275] free:1322308 free_pcp:298 free_cma:0 [ 371.166427][ T9275] Node 0 active_anon:1332kB inactive_anon:36936kB active_file:58540kB inactive_file:153104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138080kB dirty:580kB writeback:0kB shmem:22600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11116kB pagetables:3660kB sec_pagetables:0kB all_unreclaimable? no [ 371.480796][ T9275] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 371.591905][ T9275] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.621706][ T9275] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 371.694287][ T9275] Node 0 DMA32 free:1362116kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:8728kB inactive_anon:29700kB active_file:58268kB inactive_file:153052kB unevictable:1536kB writepending:580kB present:3129332kB managed:2549984kB mlocked:0kB bounce:0kB free_pcp:6700kB local_pcp:2212kB free_cma:0kB [ 371.751854][ T9275] lowmem_reserve[]: 0 0 0 0 0 [ 371.756580][ T9275] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:272kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 371.901463][ T9275] lowmem_reserve[]: 0 0 0 0 0 [ 371.999324][ T9275] Node 1 Normal free:3901092kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.040388][ T9275] lowmem_reserve[]: 0 0 0 0 0 [ 372.045177][ T9275] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 372.117835][ T9275] Node 0 DMA32: 1*4kB (E) 3*8kB (UME) 119*16kB (M) 216*32kB (UME) 294*64kB (M) 98*128kB (UME) 108*256kB (UM) 60*512kB (UM) 36*1024kB (UM) 12*2048kB (UME) 284*4096kB (ME) = 1323276kB [ 372.263026][ T9294] syz.0.941: attempt to access beyond end of device [ 372.263026][ T9294] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 372.283499][ T9275] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 372.393913][ T9275] Node 1 Normal: 3*4kB (UE) 5*8kB (UME) 19*16kB (UME) 20*32kB (UME) 93*64kB (UME) 27*128kB (UME) 18*256kB (UME) 12*512kB (UME) 3*1024kB (UM) 5*2048kB (UME) 944*4096kB (M) = 3901092kB [ 372.457375][ T9275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.480490][ T9275] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 372.512043][ T9275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.536133][ T9275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 372.589950][ T9275] 60096 total pagecache pages [ 372.616195][ T9275] 0 pages in swap cache [ 372.628545][ T9275] Free swap = 124812kB [ 372.644464][ T9275] Total swap = 124996kB [ 372.659724][ T9275] 2097051 pages RAM [ 372.680028][ T9275] 0 pages HighMem/MovableOnly [ 372.691538][ T9275] 427832 pages reserved [ 372.707741][ T9275] 0 pages cma reserved [ 373.296733][ T9303] netlink: 92 bytes leftover after parsing attributes in process `syz.4.943'. [ 374.268368][ T9309] SET target dimension over the limit! [ 375.322470][ T5902] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 375.456014][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.952'. [ 375.493374][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 375.503728][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.529074][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 375.564249][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.598694][ T5902] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 375.621901][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.630158][ T5902] usb 1-1: Product: syz [ 375.636103][ T5902] usb 1-1: Manufacturer: syz [ 375.640942][ T5902] usb 1-1: SerialNumber: syz [ 375.785488][ T5902] usb 1-1: config 0 descriptor?? [ 375.801231][ T5902] mcba_usb 1-1:0.0: Can't find endpoints [ 375.807587][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 375.978076][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.999691][ T5872] usb 2-1: config 1 has no interface number 0 [ 376.023975][ T5872] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.040671][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.067820][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.080679][ T5872] usb 2-1: too many endpoints for config 1 interface 1 altsetting 177: 105, using maximum allowed: 30 [ 376.091901][ T5872] usb 2-1: config 1 interface 1 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 376.110554][ T5872] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 139 [ 376.123017][ T5872] usb 2-1: config 1 interface 1 has no altsetting 2 [ 376.137678][ T5902] usb 1-1: USB disconnect, device number 18 [ 376.431515][ T9340] syz.3.956: attempt to access beyond end of device [ 376.431515][ T9340] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 376.804697][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.822436][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.836611][ T5872] usb 2-1: Product: syz [ 376.875415][ T5872] usb 2-1: Manufacturer: syz [ 376.896454][ T5872] usb 2-1: SerialNumber: syz [ 377.871299][ T9343] SET target dimension over the limit! [ 377.964361][ T9330] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.042229][ T9330] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.053660][ T5872] cdc_ncm 2-1:1.1: bind() failure [ 379.225903][ T9364] SET target dimension over the limit! [ 379.559135][ T9] usb 2-1: USB disconnect, device number 10 [ 385.768482][ T9384] SET target dimension over the limit! [ 387.527946][ T9404] SET target dimension over the limit! [ 388.284114][ T9410] [U] [ 388.287038][ T9410] [U] [ 388.289736][ T9410] [U] [ 388.292450][ T9410] [U] [ 388.418540][ T9410] [U] [ 388.421284][ T9410] [U] [ 388.423991][ T9410] [U] [ 388.426693][ T9410] [U] [ 388.515380][ T9410] [U] [ 388.518125][ T9410] [U] [ 388.520834][ T9410] [U] [ 388.523527][ T9410] [U] [ 388.542335][ T9412] FAULT_INJECTION: forcing a failure. [ 388.542335][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.556924][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.975'. [ 388.596188][ T9410] [U] [ 388.598949][ T9410] [U] [ 388.601654][ T9410] [U] [ 388.604352][ T9410] [U] [ 388.660954][ T9410] [U] [ 388.663706][ T9410] [U] [ 388.666403][ T9410] [U] [ 388.669082][ T9410] [U] [ 388.672032][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.4.976 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 388.672055][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.672065][ T9412] Call Trace: [ 388.672072][ T9412] [ 388.672079][ T9412] dump_stack_lvl+0x241/0x360 [ 388.672109][ T9412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.672131][ T9412] ? __pfx__printk+0x10/0x10 [ 388.672167][ T9412] should_fail_ex+0x424/0x570 [ 388.672195][ T9412] _copy_from_user+0x2d/0xb0 [ 388.672217][ T9412] core_sys_select+0x68d/0xab0 [ 388.672245][ T9412] ? __pfx_core_sys_select+0x10/0x10 [ 388.672262][ T9412] ? rcu_read_lock_any_held+0xbb/0x160 [ 388.672284][ T9412] ? vfs_write+0xb29/0xd10 [ 388.672326][ T9412] ? __pfx_set_user_sigmask+0x10/0x10 [ 388.672343][ T9412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.672359][ T9412] ? __fget_files+0x2a/0x420 [ 388.672387][ T9412] __se_sys_pselect6+0x356/0x3e0 [ 388.672410][ T9412] ? fput+0x9b/0xd0 [ 388.672433][ T9412] ? __pfx___se_sys_pselect6+0x10/0x10 [ 388.672471][ T9412] ? __x64_sys_pselect6+0x21/0xf0 [ 388.672494][ T9412] do_syscall_64+0xf3/0x230 [ 388.672510][ T9412] ? clear_bhb_loop+0x45/0xa0 [ 388.672530][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.672545][ T9412] RIP: 0033:0x7f9ec798d169 [ 388.672561][ T9412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.672575][ T9412] RSP: 002b:00007f9ec870f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 388.672593][ T9412] RAX: ffffffffffffffda RBX: 00007f9ec7ba6080 RCX: 00007f9ec798d169 [ 388.672605][ T9412] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000040 [ 388.672616][ T9412] RBP: 00007f9ec870f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.672627][ T9412] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 388.672637][ T9412] R13: 0000000000000000 R14: 00007f9ec7ba6080 R15: 00007fff89d0bc68 [ 388.672664][ T9412] [ 388.898505][ T9410] [U] [ 388.901259][ T9410] [U] [ 388.903963][ T9410] [U] [ 388.906666][ T9410] [U] [ 388.909857][ T9410] [U] [ 388.912548][ T9410] [U] [ 388.915214][ T9410] [U] [ 388.917880][ T9410] [U] [ 388.920877][ T9410] [U] [ 388.923570][ T9410] [U] [ 388.926236][ T9410] [U] [ 388.928903][ T9410] [U] [ 388.931764][ T9410] [U] [ 388.934442][ T9410] [U] [ 388.937105][ T9410] [U] [ 388.939770][ T9410] [U] [ 388.945816][ T9410] [U] [ 388.948521][ T9410] [U] [ 388.951189][ T9410] [U] [ 388.953856][ T9410] [U] [ 388.956922][ T9410] [U] [ 388.959619][ T9410] [U] [ 388.962287][ T9410] [U] [ 388.964954][ T9410] [U] [ 388.968009][ T9410] [U] [ 388.970703][ T9410] [U] [ 388.973372][ T9410] [U] [ 388.976041][ T9410] [U] [ 388.979185][ T9410] [U] [ 388.981881][ T9410] [U] [ 388.984589][ T9410] [U] [ 388.987287][ T9410] [U] [ 388.990552][ T9410] [U] [ 388.993257][ T9410] [U] [ 388.995963][ T9410] [U] [ 388.998636][ T9410] [U] [ 389.001979][ T9410] [U] [ 389.004710][ T9410] [U] [ 389.007389][ T9410] [U] [ 389.010057][ T9410] [U] [ 389.013043][ T9410] [U] [ 389.015767][ T9410] [U] [ 389.018441][ T9410] [U] [ 389.021204][ T9410] [U] [ 389.024278][ T9410] [U] [ 389.027030][ T9410] [U] [ 389.029715][ T9410] [U] [ 389.032388][ T9410] [U] [ 389.035432][ T9410] [U] [ 389.038112][ T9410] [U] [ 389.040811][ T9410] [U] [ 389.043505][ T9410] [U] [ 389.046560][ T9410] [U] [ 389.049266][ T9410] [U] [ 389.051948][ T9410] [U] [ 389.054620][ T9410] [U] [ 389.057586][ T9410] [U] [ 389.060269][ T9410] [U] [ 389.062956][ T9410] [U] [ 389.065630][ T9410] [U] [ 389.068631][ T9410] [U] [ 389.071324][ T9410] [U] [ 389.074000][ T9410] [U] [ 389.076674][ T9410] [U] [ 389.079652][ T9410] [U] [ 389.082332][ T9410] [U] [ 389.085007][ T9410] [U] [ 389.087692][ T9410] [U] [ 389.090834][ T9410] [U] [ 389.093556][ T9410] [U] [ 389.096248][ T9410] [U] [ 389.098929][ T9410] [U] [ 389.102337][ T9410] [U] [ 389.105052][ T9410] [U] [ 389.107737][ T9410] [U] [ 389.110408][ T9410] [U] [ 389.113690][ T9410] [U] [ 389.116434][ T9410] [U] [ 389.119130][ T9410] [U] [ 389.121802][ T9410] [U] [ 389.124784][ T9410] [U] [ 389.127467][ T9410] [U] [ 389.130138][ T9410] [U] [ 389.132807][ T9410] [U] [ 389.136237][ T9410] [U] [ 389.138945][ T9410] [U] [ 389.141645][ T9410] [U] [ 389.144346][ T9410] [U] [ 389.147953][ T9410] [U] [ 389.150678][ T9410] [U] [ 389.153384][ T9410] [U] [ 389.156085][ T9410] [U] [ 389.160247][ T9410] [U] [ 389.162945][ T9410] [U] [ 389.165614][ T9410] [U] [ 389.168282][ T9410] [U] [ 389.184511][ T9419] [U] [ 389.187233][ T9419] [U] [ 389.189905][ T9419] [U] [ 389.192575][ T9419] [U] [ 389.195291][ T9419] [U] [ 389.205232][ T9419] [U] [ 389.207975][ T9419] [U] [ 389.209675][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 389.210749][ T9419] [U] [ 389.222228][ T9419] [U] [ 389.269131][ T9419] [U] [ 389.271883][ T9419] [U] [ 389.274584][ T9419] [U] [ 389.277273][ T9419] [U] [ 389.311763][ T9419] [U] [ 389.314515][ T9419] [U] [ 389.317224][ T9419] [U] [ 389.319914][ T9419] [U] [ 389.379457][ T9419] [U] [ 389.382221][ T9419] [U] [ 389.384925][ T9419] [U] [ 389.387624][ T9419] [U] [ 389.397372][ T9419] [U] [ 389.400112][ T9419] [U] [ 389.402809][ T9419] [U] [ 389.405498][ T9419] [U] [ 389.408958][ T9419] [U] [ 389.411682][ T9419] [U] [ 389.414385][ T9419] [U] [ 389.417070][ T9419] [U] [ 389.420456][ T9419] [U] [ 389.423182][ T9419] [U] [ 389.425886][ T9419] [U] [ 389.428623][ T9419] [U] [ 389.432812][ T9419] [U] [ 389.435533][ T9419] [U] [ 389.438225][ T9419] [U] [ 389.440907][ T9419] [U] [ 389.450781][ T9419] [U] [ 389.453503][ T9419] [U] [ 389.456188][ T9419] [U] [ 389.458869][ T9419] [U] [ 389.467675][ T9419] [U] [ 389.470418][ T9419] [U] [ 389.473136][ T9419] [U] [ 389.475844][ T9419] [U] [ 389.479302][ T9419] [U] [ 389.482066][ T9419] [U] [ 389.484770][ T9419] [U] [ 389.487477][ T9419] [U] [ 389.500516][ T9419] [U] [ 389.647795][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 389.762363][ T5893] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 389.815422][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.926210][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 389.944407][ T5893] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 390.376130][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.389467][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 390.398993][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.403176][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.449762][ T5893] usb 2-1: config 0 descriptor?? [ 390.638421][ T9] usb 5-1: usb_control_msg returned -32 [ 390.644143][ T9] usbtmc 5-1:16.0: can't read capabilities [ 390.681334][ T9426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.695832][ T9426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.741271][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 391.206042][ T9446] syz.0.985: attempt to access beyond end of device [ 391.206042][ T9446] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 391.781063][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 391.791262][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 391.803154][ T5893] asix 2-1:0.0: probe with driver asix failed with error -32 [ 392.249749][ T9458] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 392.284753][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.303179][ T9458] batadv0: entered promiscuous mode [ 392.322074][ T9458] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 392.786884][ T5872] usb 5-1: USB disconnect, device number 9 [ 393.240664][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.247718][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.570741][ T5902] usb 2-1: USB disconnect, device number 11 [ 393.845448][ T9485] FAULT_INJECTION: forcing a failure. [ 393.845448][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 393.858226][ T9485] CPU: 0 UID: 0 PID: 9485 Comm: syz.4.1000 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 393.858241][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.858247][ T9485] Call Trace: [ 393.858251][ T9485] [ 393.858255][ T9485] dump_stack_lvl+0x241/0x360 [ 393.858274][ T9485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.858287][ T9485] ? __pfx__printk+0x10/0x10 [ 393.858302][ T9485] ? __pfx___might_resched+0x10/0x10 [ 393.858315][ T9485] should_fail_ex+0x424/0x570 [ 393.858332][ T9485] should_failslab+0xac/0x100 [ 393.858346][ T9485] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 393.858360][ T9485] ? __alloc_skb+0x1c2/0x480 [ 393.858375][ T9485] __alloc_skb+0x1c2/0x480 [ 393.858390][ T9485] ? __pfx___alloc_skb+0x10/0x10 [ 393.858403][ T9485] ? netlink_autobind+0xd6/0x2f0 [ 393.858414][ T9485] ? netlink_autobind+0x2b0/0x2f0 [ 393.858428][ T9485] netlink_sendmsg+0x638/0xcd0 [ 393.858445][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.858462][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.858472][ T9485] __sock_sendmsg+0x221/0x270 [ 393.858484][ T9485] ____sys_sendmsg+0x523/0x860 [ 393.858504][ T9485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.858517][ T9485] ? __fget_files+0x2a/0x420 [ 393.858532][ T9485] ? __fget_files+0x2a/0x420 [ 393.858549][ T9485] __sys_sendmsg+0x271/0x360 [ 393.858564][ T9485] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.858605][ T9485] ? do_syscall_64+0xb6/0x230 [ 393.858616][ T9485] do_syscall_64+0xf3/0x230 [ 393.858625][ T9485] ? clear_bhb_loop+0x45/0xa0 [ 393.858636][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.858645][ T9485] RIP: 0033:0x7f9ec798d169 [ 393.858656][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.858664][ T9485] RSP: 002b:00007f9ec8730038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.858675][ T9485] RAX: ffffffffffffffda RBX: 00007f9ec7ba5fa0 RCX: 00007f9ec798d169 [ 393.858682][ T9485] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 393.858689][ T9485] RBP: 00007f9ec8730090 R08: 0000000000000000 R09: 0000000000000000 [ 393.858694][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.858700][ T9485] R13: 0000000000000000 R14: 00007f9ec7ba5fa0 R15: 00007fff89d0bc68 [ 393.858717][ T9485] [ 394.089789][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.123334][ T9487] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1003'. [ 394.134212][ T9487] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 394.134212][ T9487] z,@qJ#"h/.W1ȱnNC"C<+`#k' [ 394.222706][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 395.339077][ T9513] FAULT_INJECTION: forcing a failure. [ 395.339077][ T9513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.352612][ T9513] CPU: 1 UID: 0 PID: 9513 Comm: syz.4.1006 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 395.352636][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.352646][ T9513] Call Trace: [ 395.352654][ T9513] [ 395.352661][ T9513] dump_stack_lvl+0x241/0x360 [ 395.352686][ T9513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.352698][ T9513] ? __pfx__printk+0x10/0x10 [ 395.352717][ T9513] should_fail_ex+0x424/0x570 [ 395.352735][ T9513] _copy_from_user+0x2d/0xb0 [ 395.352749][ T9513] copy_msghdr_from_user+0xb3/0x580 [ 395.352764][ T9513] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 395.352783][ T9513] do_recvmmsg+0x3bf/0xab0 [ 395.352803][ T9513] ? __pfx_do_recvmmsg+0x10/0x10 [ 395.352829][ T9513] ? finish_task_switch+0x1e5/0x870 [ 395.352842][ T9513] ? lockdep_hardirqs_on+0x9d/0x150 [ 395.352858][ T9513] ? rcu_is_watching+0x15/0xb0 [ 395.352870][ T9513] ? trace_sched_exit_tp+0x3c/0x120 [ 395.352883][ T9513] ? __schedule+0x1b51/0x51f0 [ 395.352912][ T9513] ? schedule+0x163/0x360 [ 395.352930][ T9513] __x64_sys_recvmmsg+0x1ab/0x260 [ 395.352945][ T9513] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 395.352962][ T9513] ? do_syscall_64+0xb6/0x230 [ 395.352973][ T9513] do_syscall_64+0xf3/0x230 [ 395.352981][ T9513] ? clear_bhb_loop+0x45/0xa0 [ 395.352993][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.353002][ T9513] RIP: 0033:0x7f9ec798d169 [ 395.353012][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.353020][ T9513] RSP: 002b:00007f9ec57f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 395.353031][ T9513] RAX: ffffffffffffffda RBX: 00007f9ec7ba6160 RCX: 00007f9ec798d169 [ 395.353038][ T9513] RDX: 00000000000005df RSI: 0000200000000b40 RDI: 0000000000000004 [ 395.353044][ T9513] RBP: 00007f9ec57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.353050][ T9513] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 395.353055][ T9513] R13: 0000000000000000 R14: 00007f9ec7ba6160 R15: 00007fff89d0bc68 [ 395.353070][ T9513] [ 395.587663][ T9511] netlink: 'syz.1.1008': attribute type 29 has an invalid length. [ 395.597863][ T9511] netlink: 'syz.1.1008': attribute type 29 has an invalid length. [ 395.607101][ T9511] netlink: 'syz.1.1008': attribute type 29 has an invalid length. [ 398.690526][ T9561] FAULT_INJECTION: forcing a failure. [ 398.690526][ T9561] name failslab, interval 1, probability 0, space 0, times 0 [ 398.928684][ T9561] CPU: 0 UID: 0 PID: 9561 Comm: syz.1.1017 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 398.928710][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.928719][ T9561] Call Trace: [ 398.928726][ T9561] [ 398.928733][ T9561] dump_stack_lvl+0x241/0x360 [ 398.928761][ T9561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.928782][ T9561] ? __pfx__printk+0x10/0x10 [ 398.928807][ T9561] ? __pfx___might_resched+0x10/0x10 [ 398.928832][ T9561] should_fail_ex+0x424/0x570 [ 398.928859][ T9561] should_failslab+0xac/0x100 [ 398.928883][ T9561] __kmalloc_noprof+0xdf/0x4d0 [ 398.928904][ T9561] ? tomoyo_encode+0x26f/0x540 [ 398.928924][ T9561] tomoyo_encode+0x26f/0x540 [ 398.928941][ T9561] ? __pfx_sockfs_dname+0x10/0x10 [ 398.928961][ T9561] tomoyo_realpath_from_path+0x59e/0x5e0 [ 398.928990][ T9561] tomoyo_path_number_perm+0x245/0x790 [ 398.929014][ T9561] ? tomoyo_path_number_perm+0x215/0x790 [ 398.929038][ T9561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 398.929065][ T9561] ? ksys_write+0x24e/0x2d0 [ 398.929091][ T9561] ? __lock_acquire+0xad5/0xd80 [ 398.929127][ T9561] ? __fget_files+0x2a/0x420 [ 398.929149][ T9561] ? __fget_files+0x2a/0x420 [ 398.929174][ T9561] ? __fget_files+0x2a/0x420 [ 398.929199][ T9561] security_file_ioctl+0xc6/0x2a0 [ 398.929222][ T9561] __se_sys_ioctl+0x46/0x160 [ 398.929254][ T9561] do_syscall_64+0xf3/0x230 [ 398.929271][ T9561] ? clear_bhb_loop+0x45/0xa0 [ 398.929291][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.929308][ T9561] RIP: 0033:0x7f53f678d169 [ 398.929323][ T9561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.929336][ T9561] RSP: 002b:00007f53f75e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.929355][ T9561] RAX: ffffffffffffffda RBX: 00007f53f69a5fa0 RCX: 00007f53f678d169 [ 398.929368][ T9561] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000005 [ 398.929379][ T9561] RBP: 00007f53f75e9090 R08: 0000000000000000 R09: 0000000000000000 [ 398.929389][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.929399][ T9561] R13: 0000000000000000 R14: 00007f53f69a5fa0 R15: 00007fff062be2b8 [ 398.929429][ T9561] [ 398.929448][ T9561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.371135][ T9578] trusted_key: syz.2.1018 sent an empty control message without MSG_MORE. [ 399.473309][ T9582] FAULT_INJECTION: forcing a failure. [ 399.473309][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 399.490164][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.3.1019 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 399.490189][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 399.490198][ T9582] Call Trace: [ 399.490204][ T9582] [ 399.490211][ T9582] dump_stack_lvl+0x241/0x360 [ 399.490253][ T9582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.490273][ T9582] ? __pfx__printk+0x10/0x10 [ 399.490299][ T9582] ? __pfx___might_resched+0x10/0x10 [ 399.490321][ T9582] should_fail_ex+0x424/0x570 [ 399.490349][ T9582] should_failslab+0xac/0x100 [ 399.490373][ T9582] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 399.490393][ T9582] ? __alloc_skb+0x1c2/0x480 [ 399.490419][ T9582] __alloc_skb+0x1c2/0x480 [ 399.490446][ T9582] ? __pfx___alloc_skb+0x10/0x10 [ 399.490467][ T9582] ? netlink_autobind+0xd6/0x2f0 [ 399.490484][ T9582] ? netlink_autobind+0x2b0/0x2f0 [ 399.490507][ T9582] netlink_sendmsg+0x638/0xcd0 [ 399.490538][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.490569][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.490586][ T9582] __sock_sendmsg+0x221/0x270 [ 399.490608][ T9582] ____sys_sendmsg+0x523/0x860 [ 399.490640][ T9582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.490660][ T9582] ? __fget_files+0x2a/0x420 [ 399.490684][ T9582] ? __fget_files+0x2a/0x420 [ 399.490714][ T9582] __sys_sendmsg+0x271/0x360 [ 399.490741][ T9582] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.490819][ T9582] ? do_syscall_64+0xb6/0x230 [ 399.490840][ T9582] do_syscall_64+0xf3/0x230 [ 399.490855][ T9582] ? clear_bhb_loop+0x45/0xa0 [ 399.490873][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.490886][ T9582] RIP: 0033:0x7fe8b5d8d169 [ 399.490902][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.490915][ T9582] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.490933][ T9582] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 399.490944][ T9582] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000012 [ 399.490955][ T9582] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.490965][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.490974][ T9582] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 399.491003][ T9582] [ 400.625741][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1026'. [ 402.241828][ T9618] lo speed is unknown, defaulting to 1000 [ 402.253245][ T9618] lo speed is unknown, defaulting to 1000 [ 402.304768][ T9618] lo speed is unknown, defaulting to 1000 [ 402.354238][ T9618] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 402.399942][ T9618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 402.513653][ T9618] lo speed is unknown, defaulting to 1000 [ 402.545062][ T9618] lo speed is unknown, defaulting to 1000 [ 402.560579][ T9618] lo speed is unknown, defaulting to 1000 [ 402.578330][ T9618] lo speed is unknown, defaulting to 1000 [ 402.589802][ T9618] lo speed is unknown, defaulting to 1000 [ 402.616547][ T30] audit: type=1326 audit(2000000677.114:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 402.679713][ T30] audit: type=1326 audit(2000000677.114:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 402.703012][ T9627] @: renamed from bond_slave_0 (while UP) [ 402.710956][ T30] audit: type=1326 audit(2000000677.114:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 402.815599][ T30] audit: type=1326 audit(2000000677.133:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 402.882709][ T30] audit: type=1326 audit(2000000677.133:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 403.029656][ T30] audit: type=1326 audit(2000000677.133:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 403.051455][ T30] audit: type=1326 audit(2000000677.133:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 403.097450][ T30] audit: type=1326 audit(2000000677.133:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 403.123760][ T30] audit: type=1326 audit(2000000677.133:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 403.523593][ T30] audit: type=1326 audit(2000000677.133:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.0.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6438d169 code=0x7ffc0000 [ 404.584971][ T9647] FAULT_INJECTION: forcing a failure. [ 404.584971][ T9647] name failslab, interval 1, probability 0, space 0, times 0 [ 404.602542][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.1.1041 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 404.602569][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.602580][ T9647] Call Trace: [ 404.602588][ T9647] [ 404.602594][ T9647] dump_stack_lvl+0x241/0x360 [ 404.602622][ T9647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.602643][ T9647] ? __pfx__printk+0x10/0x10 [ 404.602664][ T9647] ? __pfx___might_resched+0x10/0x10 [ 404.602685][ T9647] should_fail_ex+0x424/0x570 [ 404.602710][ T9647] should_failslab+0xac/0x100 [ 404.602733][ T9647] __kmalloc_noprof+0xdf/0x4d0 [ 404.602753][ T9647] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 404.602768][ T9647] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 404.602788][ T9647] tomoyo_realpath_from_path+0xcf/0x5e0 [ 404.602817][ T9647] tomoyo_path_number_perm+0x245/0x790 [ 404.602841][ T9647] ? tomoyo_path_number_perm+0x215/0x790 [ 404.602863][ T9647] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 404.602889][ T9647] ? ksys_write+0x24e/0x2d0 [ 404.602920][ T9647] ? __lock_acquire+0xad5/0xd80 [ 404.602952][ T9647] ? __fget_files+0x2a/0x420 [ 404.602979][ T9647] ? __fget_files+0x2a/0x420 [ 404.603004][ T9647] ? __fget_files+0x2a/0x420 [ 404.603031][ T9647] security_file_ioctl+0xc6/0x2a0 [ 404.603055][ T9647] __se_sys_ioctl+0x46/0x160 [ 404.603075][ T9647] do_syscall_64+0xf3/0x230 [ 404.603096][ T9647] ? clear_bhb_loop+0x45/0xa0 [ 404.603119][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.603135][ T9647] RIP: 0033:0x7f53f678d169 [ 404.603149][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.603162][ T9647] RSP: 002b:00007f53f75e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.603180][ T9647] RAX: ffffffffffffffda RBX: 00007f53f69a5fa0 RCX: 00007f53f678d169 [ 404.603193][ T9647] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 404.603203][ T9647] RBP: 00007f53f75e9090 R08: 0000000000000000 R09: 0000000000000000 [ 404.603213][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.603222][ T9647] R13: 0000000000000000 R14: 00007f53f69a5fa0 R15: 00007fff062be2b8 [ 404.603250][ T9647] [ 404.603263][ T9647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.010228][ T977] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 405.213287][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 405.220585][ T977] usb 5-1: config 0 has an invalid interface number: 219 but max is 1 [ 405.237614][ T977] usb 5-1: config 0 has an invalid interface number: 42 but max is 1 [ 405.266760][ T977] usb 5-1: config 0 has no interface number 0 [ 405.273043][ T977] usb 5-1: config 0 has no interface number 1 [ 405.295836][ T977] usb 5-1: config 0 interface 219 has no altsetting 0 [ 405.325318][ T977] usb 5-1: config 0 interface 42 has no altsetting 0 [ 405.349295][ T977] usb 5-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=a4.1e [ 405.384300][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.392344][ T977] usb 5-1: Product: syz [ 405.437849][ T977] usb 5-1: Manufacturer: syz [ 405.442530][ T977] usb 5-1: SerialNumber: syz [ 405.455428][ T9664] tipc: Enabling of bearer rejected, failed to enable media [ 405.673636][ T977] usb 5-1: config 0 descriptor?? [ 406.739993][ T9681] lo speed is unknown, defaulting to 1000 [ 409.098366][ T9709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.580607][ T9710] lo speed is unknown, defaulting to 1000 [ 409.824529][ T977] usb 5-1: USB disconnect, device number 10 [ 412.209057][ T9753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.458819][ T9770] FAULT_INJECTION: forcing a failure. [ 413.458819][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 413.509251][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.0.1074 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 413.509278][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.509288][ T9770] Call Trace: [ 413.509295][ T9770] [ 413.509302][ T9770] dump_stack_lvl+0x241/0x360 [ 413.509331][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.509352][ T9770] ? __pfx__printk+0x10/0x10 [ 413.509377][ T9770] ? __pfx___might_resched+0x10/0x10 [ 413.509401][ T9770] should_fail_ex+0x424/0x570 [ 413.509431][ T9770] should_failslab+0xac/0x100 [ 413.509454][ T9770] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 413.509477][ T9770] ? __alloc_skb+0x1c2/0x480 [ 413.509503][ T9770] __alloc_skb+0x1c2/0x480 [ 413.509529][ T9770] ? __pfx___alloc_skb+0x10/0x10 [ 413.509552][ T9770] ? netlink_autobind+0xd6/0x2f0 [ 413.509570][ T9770] ? netlink_autobind+0x2b0/0x2f0 [ 413.509593][ T9770] netlink_sendmsg+0x638/0xcd0 [ 413.509629][ T9770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.509663][ T9770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.509679][ T9770] __sock_sendmsg+0x221/0x270 [ 413.509702][ T9770] ____sys_sendmsg+0x523/0x860 [ 413.509733][ T9770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.509753][ T9770] ? __fget_files+0x2a/0x420 [ 413.509777][ T9770] ? __fget_files+0x2a/0x420 [ 413.509807][ T9770] __sys_sendmsg+0x271/0x360 [ 413.509835][ T9770] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.509919][ T9770] ? do_syscall_64+0xb6/0x230 [ 413.509938][ T9770] do_syscall_64+0xf3/0x230 [ 413.509954][ T9770] ? clear_bhb_loop+0x45/0xa0 [ 413.509974][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.509989][ T9770] RIP: 0033:0x7f2a6438d169 [ 413.510005][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.510019][ T9770] RSP: 002b:00007f2a6516c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.510036][ T9770] RAX: ffffffffffffffda RBX: 00007f2a645a6160 RCX: 00007f2a6438d169 [ 413.510048][ T9770] RDX: 000000002400c014 RSI: 0000200000000440 RDI: 0000000000000006 [ 413.510059][ T9770] RBP: 00007f2a6516c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.510069][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.510079][ T9770] R13: 0000000000000000 R14: 00007f2a645a6160 R15: 00007ffeeb8ea188 [ 413.510108][ T9770] [ 415.533517][ T9795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.694679][ T9804] tipc: Cannot configure node identity twice [ 417.817492][ T9824] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1093'. [ 418.905835][ T9839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.366854][ T9851] FAULT_INJECTION: forcing a failure. [ 419.366854][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 419.410498][ T9851] CPU: 1 UID: 0 PID: 9851 Comm: syz.3.1104 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 419.410525][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.410535][ T9851] Call Trace: [ 419.410542][ T9851] [ 419.410550][ T9851] dump_stack_lvl+0x241/0x360 [ 419.410577][ T9851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.410599][ T9851] ? __pfx__printk+0x10/0x10 [ 419.410623][ T9851] ? __pfx___might_resched+0x10/0x10 [ 419.410646][ T9851] should_fail_ex+0x424/0x570 [ 419.410675][ T9851] should_failslab+0xac/0x100 [ 419.410699][ T9851] __kmalloc_noprof+0xdf/0x4d0 [ 419.410720][ T9851] ? bpf_test_init+0xc2/0x170 [ 419.410742][ T9851] bpf_test_init+0xc2/0x170 [ 419.410763][ T9851] bpf_prog_test_run_xdp+0x492/0x1200 [ 419.410798][ T9851] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 419.410819][ T9851] ? __fget_files+0x2a/0x420 [ 419.410844][ T9851] ? __fget_files+0x2a/0x420 [ 419.410870][ T9851] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 419.410891][ T9851] bpf_prog_test_run+0x2e4/0x360 [ 419.410912][ T9851] __sys_bpf+0x4ee/0x8b0 [ 419.410937][ T9851] ? __pfx___sys_bpf+0x10/0x10 [ 419.410973][ T9851] ? ksys_write+0x275/0x2d0 [ 419.411004][ T9851] __x64_sys_bpf+0x7c/0x90 [ 419.411026][ T9851] do_syscall_64+0xf3/0x230 [ 419.411043][ T9851] ? clear_bhb_loop+0x45/0xa0 [ 419.411062][ T9851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.411077][ T9851] RIP: 0033:0x7fe8b5d8d169 [ 419.411092][ T9851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.411106][ T9851] RSP: 002b:00007fe8b6ba6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.411125][ T9851] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8d169 [ 419.411137][ T9851] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 419.411148][ T9851] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.411158][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.411169][ T9851] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 419.411197][ T9851] [ 422.676952][ T9880] team0: Device gtp0 is of different type [ 423.017294][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1113'. [ 423.096600][ T9885] netlink: 'syz.1.1113': attribute type 9 has an invalid length. [ 424.665818][ T9901] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1119'. [ 424.836056][ T9906] ptrace attach of "./syz-executor exec"[5826] was attempted by ""[9906] [ 426.048157][ T7345] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 426.239444][ T9917] SET target dimension over the limit! [ 426.343268][ T977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 426.569644][ T7345] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 426.590406][ T7345] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 426.681427][ T7345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.751187][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 426.965444][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 427.024906][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 427.107070][ T7345] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 427.139843][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.193675][ T7345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.223688][ T977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.266286][ T7345] usb 4-1: Product: syz [ 427.277593][ T7345] usb 4-1: Manufacturer: syz [ 427.286262][ T7345] usb 4-1: SerialNumber: syz [ 427.291030][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.301369][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.311325][ T7345] usb 4-1: config 0 descriptor?? [ 427.397082][ T9920] syzkaller0: entered promiscuous mode [ 427.406450][ T9920] syzkaller0: entered allmulticast mode [ 427.568656][ T977] usb 5-1: GET_CAPABILITIES returned 0 [ 427.576169][ T977] usbtmc 5-1:16.0: can't read capabilities [ 427.858869][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 427.870793][ T9] usb 4-1: USB disconnect, device number 18 [ 427.886006][ T9912] usbtmc 5-1:16.0: Unable to send data, error -71 [ 428.768792][ T9939] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[9939] [ 430.607139][ T9960] SET target dimension over the limit! [ 430.824318][ T7345] usb 5-1: USB disconnect, device number 11 [ 433.600116][ T9981] 9pnet_fd: Insufficient options for proto=fd [ 435.570660][ T9994] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1150'. [ 435.902841][T10013] SET target dimension over the limit! [ 435.933703][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 436.042821][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 436.069866][T10018] 9pnet_fd: Insufficient options for proto=fd [ 436.280498][ T5872] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 436.373594][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 436.440585][ T5872] usb 2-1: device descriptor read/64, error -71 [ 436.448964][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 436.739924][ T5872] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 436.953751][ T5872] usb 2-1: device descriptor read/64, error -71 [ 437.963041][ T5872] usb usb2-port1: attempt power cycle [ 438.168993][T10034] FAULT_INJECTION: forcing a failure. [ 438.168993][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.220506][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.3.1163 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 438.220534][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.220545][T10034] Call Trace: [ 438.220552][T10034] [ 438.220560][T10034] dump_stack_lvl+0x241/0x360 [ 438.220599][T10034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.220621][T10034] ? __pfx__printk+0x10/0x10 [ 438.220653][T10034] should_fail_ex+0x424/0x570 [ 438.220685][T10034] _copy_to_user+0x31/0xb0 [ 438.220710][T10034] simple_read_from_buffer+0xc4/0x170 [ 438.220736][T10034] proc_fail_nth_read+0x1ef/0x260 [ 438.220764][T10034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.220790][T10034] ? rw_verify_area+0x246/0x630 [ 438.220807][T10034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.220830][T10034] vfs_read+0x21f/0xb90 [ 438.220852][T10034] ? __pfx___mutex_lock+0x10/0x10 [ 438.220870][T10034] ? __pfx_vfs_read+0x10/0x10 [ 438.220890][T10034] ? __fget_files+0x2a/0x420 [ 438.220914][T10034] ? __fget_files+0x39d/0x420 [ 438.220933][T10034] ? __fget_files+0x2a/0x420 [ 438.220965][T10034] ksys_read+0x19d/0x2d0 [ 438.220984][T10034] ? __pfx_ksys_read+0x10/0x10 [ 438.221007][T10034] ? do_syscall_64+0xb6/0x230 [ 438.221026][T10034] do_syscall_64+0xf3/0x230 [ 438.221042][T10034] ? clear_bhb_loop+0x45/0xa0 [ 438.221062][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.221078][T10034] RIP: 0033:0x7fe8b5d8bb7c [ 438.221094][T10034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 438.221108][T10034] RSP: 002b:00007fe8b6ba6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.221126][T10034] RAX: ffffffffffffffda RBX: 00007fe8b5fa5fa0 RCX: 00007fe8b5d8bb7c [ 438.221138][T10034] RDX: 000000000000000f RSI: 00007fe8b6ba60a0 RDI: 0000000000000005 [ 438.221149][T10034] RBP: 00007fe8b6ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.221159][T10034] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 438.221168][T10034] R13: 0000000000000000 R14: 00007fe8b5fa5fa0 R15: 00007ffd9c7ff548 [ 438.221197][T10034] [ 439.145768][ T5872] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 439.369924][ T5872] usb 2-1: device not accepting address 14, error -71 [ 439.579006][T10047] veth1_macvtap: left promiscuous mode [ 441.532804][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 442.384353][T10072] FAULT_INJECTION: forcing a failure. [ 442.384353][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.429696][T10072] CPU: 1 UID: 0 PID: 10072 Comm: syz.4.1173 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 442.429722][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 442.429733][T10072] Call Trace: [ 442.429740][T10072] [ 442.429748][T10072] dump_stack_lvl+0x241/0x360 [ 442.429785][T10072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.429806][T10072] ? __pfx__printk+0x10/0x10 [ 442.429841][T10072] should_fail_ex+0x424/0x570 [ 442.429870][T10072] _copy_from_user+0x2d/0xb0 [ 442.429893][T10072] copy_msghdr_from_user+0xb3/0x580 [ 442.429919][T10072] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 442.429935][T10072] ? __fget_files+0x2a/0x420 [ 442.429960][T10072] ? __fget_files+0x2a/0x420 [ 442.429991][T10072] __sys_sendmmsg+0x361/0x7b0 [ 442.430026][T10072] ? __pfx___sys_sendmmsg+0x10/0x10 [ 442.430084][T10072] ? rcu_read_lock_any_held+0xbb/0x160 [ 442.430104][T10072] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 442.430127][T10072] ? vfs_write+0xb29/0xd10 [ 442.430155][T10072] ? ksys_write+0x24e/0x2d0 [ 442.430175][T10072] ? __mutex_unlock_slowpath+0x229/0x800 [ 442.430223][T10072] ? ksys_write+0x275/0x2d0 [ 442.430252][T10072] __x64_sys_sendmmsg+0xa0/0xb0 [ 442.430282][T10072] do_syscall_64+0xf3/0x230 [ 442.430298][T10072] ? clear_bhb_loop+0x45/0xa0 [ 442.430318][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.430334][T10072] RIP: 0033:0x7f9ec798d169 [ 442.430350][T10072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.430364][T10072] RSP: 002b:00007f9ec8730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 442.430382][T10072] RAX: ffffffffffffffda RBX: 00007f9ec7ba5fa0 RCX: 00007f9ec798d169 [ 442.430395][T10072] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 442.430406][T10072] RBP: 00007f9ec8730090 R08: 0000000000000000 R09: 0000000000000000 [ 442.430417][T10072] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 442.430427][T10072] R13: 0000000000000000 R14: 00007f9ec7ba5fa0 R15: 00007fff89d0bc68 [ 442.430455][T10072] [ 442.652117][T10074] loop6: detected capacity change from 0 to 524287999 [ 446.349777][T10100] SET target dimension over the limit! [ 447.734049][T10116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1185'. [ 448.107405][T10124] loop6: detected capacity change from 0 to 524287999 [ 450.735097][T10138] percpu: allocation failed, size=4096 align=4096 atomic=0, failed to allocate new chunk [ 450.745295][T10138] CPU: 0 UID: 0 PID: 10138 Comm: syz.1.1192 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 450.745320][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.745332][T10138] Call Trace: [ 450.745341][T10138] [ 450.745350][T10138] dump_stack_lvl+0x241/0x360 [ 450.745381][T10138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.745403][T10138] ? __pfx__printk+0x10/0x10 [ 450.745427][T10138] ? pcpu_create_chunk+0x907/0xbd0 [ 450.745458][T10138] pcpu_alloc_noprof+0x1294/0x1760 [ 450.745482][T10138] ? lockdep_hardirqs_on+0x9d/0x150 [ 450.745519][T10138] xt_percpu_counter_alloc+0x150/0x1f0 [ 450.745549][T10138] translate_table+0x1338/0x2390 [ 450.745566][T10138] ? __x64_sys_setsockopt+0x1ee/0x280 [ 450.745588][T10138] ? do_syscall_64+0xf3/0x230 [ 450.745603][T10138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.745659][T10138] ? __pfx_translate_table+0x10/0x10 [ 450.745708][T10138] ? copy_from_sockptr_offset+0x60/0xb0 [ 450.745730][T10138] do_ipt_set_ctl+0xe44/0x1260 [ 450.745756][T10138] ? __pfx___mutex_trylock_common+0x10/0x10 [ 450.745779][T10138] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 450.745817][T10138] ? __mutex_unlock_slowpath+0x229/0x800 [ 450.745845][T10138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.745867][T10138] ? __pfx___mutex_lock+0x10/0x10 [ 450.745896][T10138] nf_setsockopt+0x295/0x2c0 [ 450.745919][T10138] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 450.745942][T10138] smc_setsockopt+0x25c/0xd50 [ 450.745973][T10138] ? __pfx_smc_setsockopt+0x10/0x10 [ 450.745995][T10138] ? __lock_acquire+0xad5/0xd80 [ 450.746020][T10138] ? __pfx_smc_setsockopt+0x10/0x10 [ 450.746041][T10138] do_sock_setsockopt+0x3b1/0x710 [ 450.746072][T10138] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 450.746092][T10138] ? __fget_files+0x2a/0x420 [ 450.746120][T10138] ? __fget_files+0x39d/0x420 [ 450.746140][T10138] ? __fget_files+0x2a/0x420 [ 450.746172][T10138] __x64_sys_setsockopt+0x1ee/0x280 [ 450.746203][T10138] do_syscall_64+0xf3/0x230 [ 450.746220][T10138] ? clear_bhb_loop+0x45/0xa0 [ 450.746240][T10138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.746258][T10138] RIP: 0033:0x7f53f678d169 [ 450.746275][T10138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.746290][T10138] RSP: 002b:00007f53f75a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.746309][T10138] RAX: ffffffffffffffda RBX: 00007f53f69a6160 RCX: 00007f53f678d169 [ 450.746322][T10138] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000d [ 450.746333][T10138] RBP: 00007f53f680e2a0 R08: 0000000000000270 R09: 0000000000000000 [ 450.746345][T10138] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 450.746356][T10138] R13: 0000000000000000 R14: 00007f53f69a6160 R15: 00007fff062be2b8 [ 450.746387][T10138] [ 452.295495][T10154] FAULT_INJECTION: forcing a failure. [ 452.295495][T10154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.308780][T10154] CPU: 0 UID: 0 PID: 10154 Comm: syz.3.1199 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 452.308803][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.308813][T10154] Call Trace: [ 452.308820][T10154] [ 452.308827][T10154] dump_stack_lvl+0x241/0x360 [ 452.308855][T10154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.308877][T10154] ? __pfx__printk+0x10/0x10 [ 452.308910][T10154] should_fail_ex+0x424/0x570 [ 452.308940][T10154] _copy_from_user+0x2d/0xb0 [ 452.308961][T10154] memdup_user+0x5e/0xd0 [ 452.308985][T10154] strndup_user+0x68/0xd0 [ 452.309008][T10154] __se_sys_fsopen+0x3f/0x2c0 [ 452.309028][T10154] do_syscall_64+0xf3/0x230 [ 452.309045][T10154] ? clear_bhb_loop+0x45/0xa0 [ 452.309066][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.309082][T10154] RIP: 0033:0x7fe8b5d8d169 [ 452.309098][T10154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.309112][T10154] RSP: 002b:00007fe8b6b64038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 452.309130][T10154] RAX: ffffffffffffffda RBX: 00007fe8b5fa6160 RCX: 00007fe8b5d8d169 [ 452.309144][T10154] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000003c0 [ 452.309154][T10154] RBP: 00007fe8b6b64090 R08: 0000000000000000 R09: 0000000000000000 [ 452.309164][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.309174][T10154] R13: 0000000000000000 R14: 00007fe8b5fa6160 R15: 00007ffd9c7ff548 [ 452.309203][T10154] [ 454.013729][T10158] SET target dimension over the limit! [ 454.865437][T10164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1201'. [ 456.112609][T10177] loop6: detected capacity change from 0 to 524287999 [ 457.065883][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1211'. [ 458.261465][T10189] input: syz1 as /devices/virtual/input/input10 [ 458.269452][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 458.377300][T10207] SET target dimension over the limit! [ 458.915586][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.921917][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.969871][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 459.381749][T10211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1218'. [ 459.425043][T10213] FAULT_INJECTION: forcing a failure. [ 459.425043][T10213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.465069][T10213] CPU: 0 UID: 0 PID: 10213 Comm: syz.0.1217 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 459.465096][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.465106][T10213] Call Trace: [ 459.465114][T10213] [ 459.465121][T10213] dump_stack_lvl+0x241/0x360 [ 459.465148][T10213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.465161][T10213] ? __pfx__printk+0x10/0x10 [ 459.465181][T10213] should_fail_ex+0x424/0x570 [ 459.465199][T10213] _copy_from_user+0x2d/0xb0 [ 459.465212][T10213] ucma_destroy_id+0xc9/0x2f0 [ 459.465227][T10213] ? __pfx_ucma_destroy_id+0x10/0x10 [ 459.465246][T10213] ? __pfx_ucma_destroy_id+0x10/0x10 [ 459.465256][T10213] ucma_write+0x2db/0x430 [ 459.465271][T10213] ? __pfx_ucma_write+0x10/0x10 [ 459.465282][T10213] ? bpf_lsm_file_permission+0x9/0x10 [ 459.465293][T10213] ? rw_verify_area+0x246/0x630 [ 459.465302][T10213] ? __pfx_ucma_write+0x10/0x10 [ 459.465314][T10213] vfs_write+0x2bc/0xd10 [ 459.465330][T10213] ? __pfx_vfs_write+0x10/0x10 [ 459.465340][T10213] ? __fget_files+0x2a/0x420 [ 459.465353][T10213] ? __fget_files+0x2a/0x420 [ 459.465366][T10213] ? __fget_files+0x39d/0x420 [ 459.465377][T10213] ? __fget_files+0x2a/0x420 [ 459.465394][T10213] ksys_write+0x19d/0x2d0 [ 459.465404][T10213] ? __pfx_ksys_write+0x10/0x10 [ 459.465417][T10213] ? do_syscall_64+0xb6/0x230 [ 459.465428][T10213] do_syscall_64+0xf3/0x230 [ 459.465436][T10213] ? clear_bhb_loop+0x45/0xa0 [ 459.465448][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.465457][T10213] RIP: 0033:0x7f2a6438d169 [ 459.465467][T10213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.465475][T10213] RSP: 002b:00007f2a651ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.465486][T10213] RAX: ffffffffffffffda RBX: 00007f2a645a5fa0 RCX: 00007f2a6438d169 [ 459.465493][T10213] RDX: 0000000000000018 RSI: 0000200000000180 RDI: 0000000000000003 [ 459.465499][T10213] RBP: 00007f2a651ae090 R08: 0000000000000000 R09: 0000000000000000 [ 459.465505][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.465511][T10213] R13: 0000000000000000 R14: 00007f2a645a5fa0 R15: 00007ffeeb8ea188 [ 459.465526][T10213] [ 460.505217][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1220'. [ 460.788749][T10226] SET target dimension over the limit! [ 464.483201][T10235] loop6: detected capacity change from 0 to 524287999 [ 468.110428][T10278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1237'. [ 469.463842][ T977] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 469.653832][ T977] usb 5-1: device descriptor read/64, error -71 [ 469.806089][ T5837] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 469.934419][T10304] ------------[ cut here ]------------ [ 469.940359][T10304] WARNING: CPU: 0 PID: 10304 at ./include/linux/memcontrol.h:361 folio_memcg+0x1a6/0x310 [ 469.950468][T10304] Modules linked in: [ 469.954629][T10304] CPU: 0 UID: 0 PID: 10304 Comm: syz.0.1245 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 469.966454][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.976536][T10304] RIP: 0010:folio_memcg+0x1a6/0x310 [ 469.981809][T10304] Code: 42 80 3c 28 00 74 08 4c 89 ff e8 15 c1 1c 00 4d 8b 3f 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 db 52 b6 ff 90 <0f> 0b 90 eb c6 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ff fe ff ff [ 470.001612][T10304] RSP: 0018:ffffc9001a66f178 EFLAGS: 00010287 [ 470.007703][T10304] RAX: ffffffff820d1995 RBX: 0000000000000000 RCX: 0000000000080000 [ 470.015750][T10304] RDX: ffffc90004f72000 RSI: 000000000000d8d0 RDI: 000000000000d8d1 [ 470.023834][T10304] RBP: 0000000000000000 R08: ffffffff820d1958 R09: 1ffffd400010de88 [ 470.031970][T10304] R10: dffffc0000000000 R11: fffff9400010de89 R12: ffffea000086f470 [ 470.040062][T10304] R13: dffffc0000000000 R14: ffffea000086f440 R15: ffff888033f85780 [ 470.048209][T10304] FS: 00007f2a651ae6c0(0000) GS:ffff888124fe5000(0000) knlGS:0000000000000000 [ 470.057218][T10304] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.063850][T10304] CR2: 0000000000000000 CR3: 000000004fe34000 CR4: 00000000003526f0 [ 470.071836][T10304] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.079875][T10304] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 470.087930][T10304] Call Trace: [ 470.091233][T10304] [ 470.094191][T10304] workingset_activation+0x123/0x6b0 [ 470.099600][T10304] ? folio_mark_accessed+0x711/0xa40 [ 470.104936][T10304] folio_mark_accessed+0x73e/0xa40 [ 470.110197][T10304] ? folio_mark_accessed+0x2d2/0xa40 [ 470.115526][T10304] kvm_release_page_clean+0x9b/0xe0 [ 470.120826][T10304] kvm_tdp_page_fault+0x304/0x3a0 [ 470.125973][T10304] kvm_mmu_do_page_fault+0x579/0xb50 [ 470.131375][T10304] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 470.137274][T10304] ? vmx_vcpu_run+0x16cf/0x2780 [ 470.142153][T10304] kvm_mmu_page_fault+0x2e5/0xc70 [ 470.147202][T10304] ? schedule+0x163/0x360 [ 470.151632][T10304] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 470.157197][T10304] ? rcu_is_watching+0x15/0xb0 [ 470.162028][T10304] ? handle_ept_violation+0x35b/0x690 [ 470.167420][T10304] ? __pfx_handle_ept_violation+0x10/0x10 [ 470.173199][T10304] vmx_handle_exit+0x1076/0x1b20 [ 470.178163][T10304] ? vcpu_run+0x4cbf/0x7ad0 [ 470.182728][T10304] vcpu_run+0x5ecb/0x7ad0 [ 470.187101][T10304] ? vcpu_run+0x4cbf/0x7ad0 [ 470.191779][T10304] ? __pfx_vcpu_run+0x10/0x10 [ 470.196496][T10304] ? __srcu_check_read_flavor+0x5a/0x150 [ 470.202281][T10304] kvm_arch_vcpu_ioctl_run+0x1047/0x1910 [ 470.207962][T10304] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1910 [ 470.213748][T10304] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 470.219756][T10304] ? __pfx___mutex_trylock_common+0x10/0x10 [ 470.225740][T10304] ? rcu_is_watching+0x15/0xb0 [ 470.230520][T10304] ? look_up_lock_class+0x7b/0x170 [ 470.235704][T10304] ? register_lock_class+0x54/0x330 [ 470.240928][T10304] ? __lock_acquire+0xad5/0xd80 [ 470.245830][T10304] ? do_raw_write_lock+0x14a/0x4f0 [ 470.250985][T10304] kvm_vcpu_ioctl+0xa24/0x1030 [ 470.255804][T10304] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 470.261029][T10304] ? __lock_acquire+0xad5/0xd80 [ 470.262511][ T977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 470.265981][T10304] ? __asan_memset+0x23/0x50 [ 470.266026][T10304] ? smack_file_ioctl+0x361/0x3b0 [ 470.283389][T10304] ? __pfx_smack_file_ioctl+0x10/0x10 [ 470.288905][T10304] ? __fget_files+0x2a/0x420 [ 470.293582][T10304] ? __fget_files+0x2a/0x420 [ 470.298289][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 470.301068][ T5837] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.303457][T10304] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 470.316766][T10304] __se_sys_ioctl+0xf1/0x160 [ 470.321426][ T5837] usb 2-1: config 0 has no interface number 0 [ 470.321475][ T5837] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.327507][T10304] do_syscall_64+0xf3/0x230 [ 470.327535][T10304] ? clear_bhb_loop+0x45/0xa0 [ 470.348142][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.354139][T10304] RIP: 0033:0x7f2a6438d169 [ 470.358617][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.361691][ T5837] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.378387][T10304] RSP: 002b:00007f2a651ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.378421][T10304] RAX: ffffffffffffffda RBX: 00007f2a645a5fa0 RCX: 00007f2a6438d169 [ 470.378441][T10304] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 470.378472][T10304] RBP: 00007f2a6440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 470.378485][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.378497][T10304] R13: 0000000000000000 R14: 00007f2a645a5fa0 R15: 00007ffeeb8ea188 [ 470.378527][T10304] [ 470.378550][T10304] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 470.378564][T10304] CPU: 0 UID: 0 PID: 10304 Comm: syz.0.1245 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 470.378585][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.378597][T10304] Call Trace: [ 470.378604][T10304] [ 470.378612][T10304] dump_stack_lvl+0x241/0x360 [ 470.378640][T10304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.378664][T10304] ? __pfx__printk+0x10/0x10 [ 470.378693][T10304] ? vscnprintf+0x5d/0x90 [ 470.378718][T10304] panic+0x349/0x880 [ 470.378740][T10304] ? __warn+0x174/0x4d0 [ 470.378762][T10304] ? __pfx_panic+0x10/0x10 [ 470.378803][T10304] __warn+0x344/0x4d0 [ 470.378822][T10304] ? folio_memcg+0x1a6/0x310 [ 470.378857][T10304] report_bug+0x2b3/0x500 [ 470.378880][T10304] ? folio_memcg+0x1a6/0x310 [ 470.378903][T10304] ? folio_memcg+0x1a6/0x310 [ 470.378926][T10304] ? folio_memcg+0x1a8/0x310 [ 470.378947][T10304] handle_bug+0x89/0x170 [ 470.378966][T10304] exc_invalid_op+0x1a/0x50 [ 470.378984][T10304] asm_exc_invalid_op+0x1a/0x20 [ 470.379001][T10304] RIP: 0010:folio_memcg+0x1a6/0x310 [ 470.379025][T10304] Code: 42 80 3c 28 00 74 08 4c 89 ff e8 15 c1 1c 00 4d 8b 3f 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 db 52 b6 ff 90 <0f> 0b 90 eb c6 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ff fe ff ff [ 470.379040][T10304] RSP: 0018:ffffc9001a66f178 EFLAGS: 00010287 [ 470.379057][T10304] RAX: ffffffff820d1995 RBX: 0000000000000000 RCX: 0000000000080000 [ 470.379069][T10304] RDX: ffffc90004f72000 RSI: 000000000000d8d0 RDI: 000000000000d8d1 [ 470.379082][T10304] RBP: 0000000000000000 R08: ffffffff820d1958 R09: 1ffffd400010de88 [ 470.379095][T10304] R10: dffffc0000000000 R11: fffff9400010de89 R12: ffffea000086f470 [ 470.379109][T10304] R13: dffffc0000000000 R14: ffffea000086f440 R15: ffff888033f85780 [ 470.379130][T10304] ? folio_memcg+0x168/0x310 [ 470.379150][T10304] ? folio_memcg+0x1a5/0x310 [ 470.379178][T10304] ? folio_memcg+0x1a5/0x310 [ 470.379203][T10304] workingset_activation+0x123/0x6b0 [ 470.379224][T10304] ? folio_mark_accessed+0x711/0xa40 [ 470.379247][T10304] folio_mark_accessed+0x73e/0xa40 [ 470.379267][T10304] ? folio_mark_accessed+0x2d2/0xa40 [ 470.379291][T10304] kvm_release_page_clean+0x9b/0xe0 [ 470.379314][T10304] kvm_tdp_page_fault+0x304/0x3a0 [ 470.379343][T10304] kvm_mmu_do_page_fault+0x579/0xb50 [ 470.379381][T10304] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 470.379417][T10304] ? vmx_vcpu_run+0x16cf/0x2780 [ 470.379443][T10304] kvm_mmu_page_fault+0x2e5/0xc70 [ 470.379466][T10304] ? schedule+0x163/0x360 [ 470.379498][T10304] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 470.379522][T10304] ? rcu_is_watching+0x15/0xb0 [ 470.379543][T10304] ? handle_ept_violation+0x35b/0x690 [ 470.379566][T10304] ? __pfx_handle_ept_violation+0x10/0x10 [ 470.379592][T10304] vmx_handle_exit+0x1076/0x1b20 [ 470.379624][T10304] ? vcpu_run+0x4cbf/0x7ad0 [ 470.379646][T10304] vcpu_run+0x5ecb/0x7ad0 [ 470.379679][T10304] ? vcpu_run+0x4cbf/0x7ad0 [ 470.379756][T10304] ? __pfx_vcpu_run+0x10/0x10 [ 470.379797][T10304] ? __srcu_check_read_flavor+0x5a/0x150 [ 470.379821][T10304] kvm_arch_vcpu_ioctl_run+0x1047/0x1910 [ 470.379865][T10304] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1910 [ 470.379888][T10304] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 470.379912][T10304] ? __pfx___mutex_trylock_common+0x10/0x10 [ 470.379939][T10304] ? rcu_is_watching+0x15/0xb0 [ 470.379959][T10304] ? look_up_lock_class+0x7b/0x170 [ 470.379986][T10304] ? register_lock_class+0x54/0x330 [ 470.380017][T10304] ? __lock_acquire+0xad5/0xd80 [ 470.380039][T10304] ? do_raw_write_lock+0x14a/0x4f0 [ 470.380082][T10304] kvm_vcpu_ioctl+0xa24/0x1030 [ 470.380112][T10304] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 470.380132][T10304] ? __lock_acquire+0xad5/0xd80 [ 470.380152][T10304] ? __asan_memset+0x23/0x50 [ 470.380170][T10304] ? smack_file_ioctl+0x361/0x3b0 [ 470.380194][T10304] ? __pfx_smack_file_ioctl+0x10/0x10 [ 470.380222][T10304] ? __fget_files+0x2a/0x420 [ 470.380249][T10304] ? __fget_files+0x2a/0x420 [ 470.380277][T10304] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 470.380301][T10304] __se_sys_ioctl+0xf1/0x160 [ 470.380323][T10304] do_syscall_64+0xf3/0x230 [ 470.380340][T10304] ? clear_bhb_loop+0x45/0xa0 [ 470.380362][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.380379][T10304] RIP: 0033:0x7f2a6438d169 [ 470.380396][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.380411][T10304] RSP: 002b:00007f2a651ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.380429][T10304] RAX: ffffffffffffffda RBX: 00007f2a645a5fa0 RCX: 00007f2a6438d169 [ 470.380443][T10304] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 470.380454][T10304] RBP: 00007f2a6440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 470.380466][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.380476][T10304] R13: 0000000000000000 R14: 00007f2a645a5fa0 R15: 00007ffeeb8ea188 [ 470.380506][T10304] [ 470.388573][T10304] Kernel Offset: disabled