last executing test programs: 14.816622347s ago: executing program 3 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x7, 0x200, 0x7ff, 0x2260, 0x1, 0x73d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) pwrite64(r0, &(0x7f0000000380)="6f0232ef877584c41e0d86f7725ab85e97ae3689303f48bd0a06ff7b242b557b2c5b8a4dc585b18c6d4af408451060ce48e77c289057fe01c26d8b3f3773566eb226458052556b319c07cbac9114ee50e23cdc671479750d49d12449d6fa7e8542e96fbb564aff8b963373", 0x6b, 0xfffffffffffeffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, 0x0, &(0x7f0000000500)) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0xb, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) 14.816084865s ago: executing program 4 (id=949): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x50) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8804) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 13.123729156s ago: executing program 4 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) userfaultfd(0x801) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x488003, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x980, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000640), 0xffffffff, 0x2801) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x4, 0x8, 0x3015, 0x5, 0x4, 0x8, 0x0, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7, 0x1, 0x100, 0x8293, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x3, 0x8}]}}}}}) 12.952782488s ago: executing program 3 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000940)=[{&(0x7f0000000700)="5b9c", 0x2}], 0x1, 0x5, 0x80, 0x3fffff) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x1000, 0x20002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) io_uring_enter(r1, 0x3a16, 0x7843, 0x3a, &(0x7f00000001c0)={[0x7]}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x405, 0x4) ioperm(0x1, 0x2, 0x8a29) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001080)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r3 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r3, &(0x7f0000000180)="100000001200050f0c1000000049b23e", 0x10, 0x20014094, 0x0, 0xffffff8b) r4 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000040)=""/50, &(0x7f00000000c0)=0x32) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x2) 11.123946731s ago: executing program 4 (id=957): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) (fail_nth: 6) 11.033080868s ago: executing program 3 (id=958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x7, 0x200, 0x7ff, 0x2260, 0x1, 0x73d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) pwrite64(r0, &(0x7f0000000380)="6f0232ef877584c41e0d86f7725ab85e97ae3689303f48bd0a06ff7b242b557b2c5b8a4dc585b18c6d4af408451060ce48e77c289057fe01c26d8b3f3773566eb226458052556b319c07cbac9114ee50e23cdc671479750d49d12449d6fa7e8542e96fbb564aff8b963373", 0x6b, 0xfffffffffffeffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, 0x0, &(0x7f0000000500)) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0xb, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) 10.962898633s ago: executing program 1 (id=959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/133, 0x85}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/5, 0x5}, {&(0x7f00000005c0)=""/201, 0xc9}], 0x5, &(0x7f00000009c0)=""/246, 0xf6}, 0x8}], 0x1, 0x1000000000fe, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) 9.853448426s ago: executing program 1 (id=960): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140c00000000000000001400020002000000e700000100000000000000000d0001007564703a73797a"], 0x54}}, 0x0) 9.097019709s ago: executing program 4 (id=963): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/71, &(0x7f0000000080)=0x47) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f0352177fa94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x6a76) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @ioapic={0xdddd1000, 0x6, 0x10001, 0xf, 0x0, [{0xc, 0x0, 0xb, '\x00', 0x8}, {0xf, 0x5, 0xfc, '\x00', 0x5}, {0x5, 0xab, 0x5, '\x00', 0xc}, {0xa8, 0xc0, 0x7, '\x00', 0x1}, {0x0, 0xec, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x1e, '\x00', 0x7}, {0x40, 0x4, 0xd, '\x00', 0x5}, {0x80, 0x9, 0x6, '\x00', 0x4}, {0x60, 0x3, 0x7f, '\x00', 0x6}, {0x80, 0x1, 0x7, '\x00', 0x1}, {0x8, 0x2f, 0xa3, '\x00', 0x2}, {0x6, 0xfe, 0x10, '\x00', 0x5}, {0x5, 0x4, 0x80, '\x00', 0x5}, {0x40, 0x6, 0x0, '\x00', 0xfd}, {0x1, 0xfc, 0x6, '\x00', 0x6}, {0x81, 0x6, 0x10}, {0x7, 0x2, 0x0, '\x00', 0x9}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x7, 0x40, 0x8, '\x00', 0xd}, {0x2, 0x50, 0x9, '\x00', 0x4}, {0xc, 0xf, 0xd5, '\x00', 0xb}, {0x2, 0x4c, 0x3, '\x00', 0x2}, {0x4, 0xc0, 0x7, '\x00', 0x6}, {0x6, 0xf7, 0x0, '\x00', 0xe}]}}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00), 0x200, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000280)={0x0, 0xc70}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x8, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 8.372914766s ago: executing program 3 (id=964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x68, r1, 0x5eae78d9c54e9d3f, 0x1000000, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e7d9e838196f61c9b54c9c6b8bd5d48"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x68}}, 0x0) 7.550546677s ago: executing program 2 (id=965): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdf6, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) syz_open_dev$cec(0x0, 0x0, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"c895babaa91420afb4d0e4b9516ec90e360f6c2f23b2bbec89c2e49c0b364f1c"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4658}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.505269403s ago: executing program 1 (id=966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_secret(0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc048aeca, &(0x7f0000000200)) 7.21312294s ago: executing program 3 (id=967): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x19fff}], 0x1) 6.401658303s ago: executing program 2 (id=969): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10, 0x103) getdents64(r1, &(0x7f0000001f80)=""/4108, 0x100c) 6.237203903s ago: executing program 1 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000100)=0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b800000008", 0x10, 0xfffffffffffffffb) sendmsg$NL80211_CMD_SET_BEACON(r7, 0x0, 0x4011) dup3(0xffffffffffffffff, r5, 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000000010000c0001400000000000000003080005400000000114000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 5.655827782s ago: executing program 2 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbb"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r3, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_complete(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000000)=[0xbe32, 0x8], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) 4.617193114s ago: executing program 1 (id=973): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008c8f7b1", @ANYRES32=r10, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) 4.0206953s ago: executing program 0 (id=974): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x41565559}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000009400)={0x0, 0x0, 0x0}, &(0x7f0000009440)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001800)="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", 0x2000, &(0x7f00000095c0)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0xffffd974, 0x20000, 0x431, 0xe0, 0x6, 0x5, 0x0, 0x0, 0x40, 0x7fffffff}}, &(0x7f0000000400)={0x18, 0x0, 0x4, {0x7}}, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x7, {0x2}}, &(0x7f0000000480)={0x18, 0xfffffffffffffffe, 0x8, {0x101}}, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x1f4, {0xd}}, &(0x7f0000000500)={0x28, 0x0, 0x27, {{0x8000000000000000}}}, &(0x7f0000000540)={0x60, 0x0, 0x8, {{0x2, 0x7, 0x31, 0x1fd, 0xffff, 0xffffff01, 0x7ff, 0x2}}}, &(0x7f00000005c0)={0x18, 0x0, 0x3fffc, {0x200}}, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000000080000030000000000000000"], &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001740)={0x78, 0xfffffffffffffff5, 0x40, {0x7, 0x4, 0x0, {0x4, 0xfffffffffffffff8, 0xc14, 0x8, 0x1000, 0x8, 0x4, 0x52d2, 0x0, 0x4000, 0x6, 0x0, 0xee01, 0xdf, 0x1}}}, &(0x7f0000004880)={0x90, 0xfffffffffffffffe, 0x4, {0x6, 0x2, 0xe24, 0x1, 0x2, 0x88c, {0x3, 0xffffffff, 0x8, 0x3, 0x1, 0x2aab7e3c, 0x7fff, 0x8000, 0x3, 0x4000, 0x10, 0x0, 0x0, 0x80000000, 0x9}}}, &(0x7f0000001680)=ANY=[@ANYBLOB="50000000000000c640bda700f800000000000000010000000000000005000000000000000200000001000000fe400000f2ff00000500000000ff00d38d8b000000030000000000000007000200030000002d2c282427273a0024a2e8990b28d840be7b2e9281f068e9dc342cd3a77e6f9d9807a0a6c84edf7ca38365d044fc5dbb73863019babdc1aafab04990caba043be5c9df83060000001825094a01875e613e758de6b4bbcc7018f7c8da1c51b11a73ede6e5a13bcde6d6310380cff48b"], &(0x7f0000003800)=ANY=[@ANYBLOB="6804000000000000fffffeffffffffff010000000000000003000000000000000008000000000000000100000000000000000020050000000100000000000000ffffffffffffffff07000000000000000600000000000000430600000000000007000000000000001d1ffd50018000000000000000a0000002000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0d0000008100000000000000030000000000000005000000000000000700000080030000293c7d402f21240006000000000000000200000000000000ff010000000000000100008000000000400000000104000002000000000000000900000000000000010001000000000008000000000000006a00000000000000000000000000000005000000000000000200000000400000ff070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000009000000000000000000000000000000050000000000000002000000ff0700005c28000000000000010000000000000003000000000000000300000000000000040000000000000008000000000200000200000000000000020000000000000003000000000000000600000000000000332a00000000000003000000000000000700000008000000060000000010000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff03000008000000000000000606000000000000880b000000020000000000000500000001000000000000000001000000090000000000000008000000d90000000600000000000000f42b0000000000000700000000000000070000090000000000000009000000fc000000090000000010000004000000385ab1a4a8cda64d52eb80f40b5d8afdf200"/148, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0600000001000000000000000300000000000000f8ffffffffffffff03000000050000002a5d8700000000000100000000000000020000000000000005000000000000000400000000000000090000000400000006000000000000000500000000000000030000000000000004000000000000000104000000000000f9000000000000000300000004000000010000000080000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0180000005000000000000000600000000000000000000000000000001000000dd2f67552b0000000000000003000000000000000000000000000000a46400000000000043f30000000000000000000000000000010000000000000001010000000000000900000000000000010000000000000000000000000000000200000000000000050000000e0000000200000000c0000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2514000001000000000000000000000000000000000000007f00000003000000ff070000232f27000000000005000000000000000000000000000000fdffffffffffffff0000000000000000030000000d0000000300000000000000faffffffffffffff080000000000000009000000000000000700000000000000090000000000000007000000ff0000000600"/152, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000001000000000000000600000000000000050000000000000004000000030000002e252c2600000000"], &(0x7f0000009300)={0xa0, 0xffffffffffffffda, 0x3, {{0x1, 0x3, 0x2, 0x46, 0x80, 0x0, {0x6, 0x3, 0x7, 0x8, 0x4080000, 0x8b, 0x8000, 0x9, 0x9, 0x4000, 0x2, 0xee00, 0x0, 0xe15, 0xfffffffd}}, {0x0, 0x8}}}, &(0x7f00000093c0)={0x20, 0x0, 0x1, {0x10000, 0x0, 0xf1, 0x7}}, &(0x7f0000009480)={0x130, 0x0, 0xffffffff80000000, {0xffffffffc2b7fac9, 0x5, 0x0, '\x00', {0x2, 0x6, 0xffff, 0x1, 0x0, r3, 0xc000, '\x00', 0x7fffffffffffffff, 0x8, 0x0, 0x3, {0x1, 0x8}, {0x8, 0x9}, {0x9, 0x9a6f}, {0xfffffffffffffffa, 0x2}, 0x3, 0x7, 0xcab, 0x2a28}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x20, 0x4004, @fd_index=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xa2001, 0x0) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x38bc80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1062, 0x800, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=ANY=[], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x110f, &(0x7f0000000140)={0x0, 0x19c9, 0x4, 0x3, 0x371}, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x10}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) 3.717226478s ago: executing program 2 (id=975): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) getsockopt$sock_timeval(r0, 0x1, 0x4c, &(0x7f0000000180), &(0x7f0000000300)=0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_add_watch(r6, &(0x7f0000000000)='./file1\x00', 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xfe) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000001880)=[{{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/50, 0x32}, {&(0x7f0000001640)=""/10, 0xa}], 0x3, &(0x7f00000016c0)=""/68, 0x44}, 0x58}, {{&(0x7f0000001740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/83, 0x53}], 0x1}, 0x6}], 0x2, 0x40012040, &(0x7f0000001940)={r8, r9+60000000}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) execveat$binfmt(r7, 0x0, &(0x7f0000000180)={[&(0x7f0000000080)='#.{.$', &(0x7f00000000c0)='.-&}?:([{[\x00', &(0x7f0000000140)='sit0\x00']}, &(0x7f00000003c0)={[&(0x7f0000000280)='sit0\x00', &(0x7f00000002c0)='sit0\x00', &(0x7f0000000300)='{$\x00', &(0x7f0000000340)='!\x00', &(0x7f0000000380)='sit0\x00']}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r11, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 3.662286056s ago: executing program 0 (id=976): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2600a}}, 0x20}}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x7902f2364505de9f, @value}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x23, "4376bf8285f3599ec23f39ebd116dd06175c69becfbc1c9de06166171496c855383000"}}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) 2.985297971s ago: executing program 0 (id=977): syz_open_procfs(0x0, &(0x7f000009de40)='limits\x00') r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYRESHEX=r5, @ANYBLOB=',\x00']) 2.821950251s ago: executing program 0 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3e6cd9f9f05066643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24003b84, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 2.722226084s ago: executing program 4 (id=979): socket$packet(0x11, 0x2, 0x300) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$radio(0x0, 0x2, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00', 0x12, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1a, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0c01000027000100001b6f4a6a5c5a72721e010100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r4, r4, 0x2) 1.409176425s ago: executing program 3 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_secret(0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r4, 0xc048aeca, &(0x7f0000000200)) 1.405339752s ago: executing program 0 (id=981): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(0x0, 0x0, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000067c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 903.890752ms ago: executing program 2 (id=982): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10, 0x103) getdents64(r1, &(0x7f0000001f80)=""/4108, 0x100c) 700.270379ms ago: executing program 1 (id=983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000100)=0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b800000008", 0x10, 0xfffffffffffffffb) sendmsg$NL80211_CMD_SET_BEACON(r7, 0x0, 0x4011) dup3(0xffffffffffffffff, r5, 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000000010000c0001400000000000000003080005400000000114000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 647.434864ms ago: executing program 0 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff32, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000090601020000000000000000030000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c001580080001407fdb000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 591.212144ms ago: executing program 4 (id=985): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) getsockopt$sock_timeval(r0, 0x1, 0x4c, &(0x7f0000000180), &(0x7f0000000300)=0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, 0x0, 0x10000a0) inotify_add_watch(r7, &(0x7f0000000000)='./file1\x00', 0x90) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xfe) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000001880)=[{{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/50, 0x32}, {&(0x7f0000001640)=""/10, 0xa}], 0x3}, 0x58}], 0x1, 0x40012040, &(0x7f0000001940)={r9, r10+60000000}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) execveat$binfmt(r8, 0x0, &(0x7f0000000180), &(0x7f00000003c0)={[&(0x7f0000000280)='sit0\x00', &(0x7f00000002c0)='sit0\x00', &(0x7f0000000300)='{$\x00', &(0x7f0000000340)='!\x00', &(0x7f0000000380)='sit0\x00']}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r12, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 0s ago: executing program 2 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r6, &(0x7f00000001c0)="027fffb373622164", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x6, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x228c, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x13, 0xe}, {0x0, 0x4}}, [@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x10001, 0x4}, {0x9, 0x5, 0x44}, 0x62, 0x2, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}]}}, @f_rsvp={{0x9}, {0x10b0, 0x2, [@TCA_RSVP_POLICE={0x10ac, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x5, 0x6, 0x0, 0x2, 0x25, 0x7, 0xb, 0x1, 0x7f, 0x8000, 0x0, 0x439, 0xe, 0x401, 0x0, 0xff, 0x1, 0xa, 0x1000, 0x3ff, 0x53d, 0x6f53, 0x3, 0x6, 0x4b64, 0x8, 0x2, 0x2, 0x101, 0x865fda0, 0xc, 0x1, 0x0, 0x3, 0x7, 0x800000, 0xe, 0x401, 0x6, 0x6, 0x6, 0x26, 0x0, 0x1, 0x800, 0x8, 0xd, 0x7, 0x546a, 0x6, 0x3, 0x1000, 0x7, 0x1, 0x8000, 0x3da, 0x3, 0x8, 0x1, 0x3, 0x200, 0x5, 0x1, 0x59, 0x8, 0x7, 0x6, 0x38, 0x8, 0x6, 0x10, 0x9, 0x4caf, 0x2, 0x5, 0x5, 0x4, 0x40e4, 0x9, 0x8, 0xe, 0x95db, 0x79, 0x2, 0x3, 0x7, 0x3, 0x2, 0x0, 0x0, 0x1, 0x6, 0x8000, 0x1, 0xfffffffd, 0x6, 0x20, 0x5, 0x0, 0x8, 0x3d, 0x7fffffff, 0xfffffffd, 0x9, 0xd7d3, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x7992, 0x7f, 0x81, 0x2, 0x0, 0x7, 0x6, 0x5, 0xc92, 0x4, 0x5, 0x0, 0x6, 0x5, 0x9, 0x3, 0x9ec3, 0x4, 0x2, 0x8, 0xfffff1a9, 0xffff2ec8, 0x10, 0x9, 0x2, 0x1, 0x0, 0xfffffff8, 0x80, 0x3, 0x1, 0x5f, 0xf, 0xfffffc19, 0x2, 0x8, 0x63, 0x4, 0x400, 0xffff77fa, 0x40, 0x3, 0xb, 0x1, 0x7, 0xccc, 0x3, 0x9, 0x5, 0x5, 0x0, 0xff000000, 0x7, 0x1ff, 0x5, 0x401, 0x1, 0xfffffffa, 0x0, 0x40, 0x0, 0x2, 0x8, 0xffffffff, 0x4, 0x10000, 0x6, 0xffff5b99, 0x2, 0x400, 0x8000, 0xd, 0x1, 0xfd37, 0xa14a, 0x4e, 0x401, 0x2, 0x1, 0xc, 0x8001, 0x6, 0x10001, 0x1, 0xffffffff, 0x3, 0x5, 0x6, 0x8, 0x0, 0x8, 0x4, 0x4, 0x3, 0xcb, 0x6, 0x7, 0x9, 0x9, 0x7, 0x4, 0x1, 0x80000001, 0xf, 0x10, 0x800, 0x3, 0x6, 0x0, 0x60e, 0x8001, 0x9, 0x8b, 0x5, 0x9a31188, 0x0, 0x1, 0x8000, 0x7f, 0x0, 0x6, 0x9, 0x1, 0x6, 0x7, 0x1, 0x9, 0x100, 0xdbe5, 0xb2c, 0x3, 0x82, 0x401, 0xffff, 0x72f9d8a5, 0x66b1, 0x81, 0x6, 0xfffffff8, 0x101, 0xb, 0x5e7f, 0x7fff, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x3, 0xdc06, 0x80000001, 0x98, 0x5, 0x401, 0x4, 0x7, 0x7f, 0x77, 0xb, 0x2, 0x6, 0x2000000, 0x0, 0xeaf79617, 0x4, 0x3, 0x82c, 0x200, 0x8, 0x6, 0x2741, 0x1ff, 0x8000, 0x8, 0x3, 0x8, 0xfc5b, 0x5, 0x400, 0x5, 0xfffffff8, 0x1, 0x7ff, 0x4, 0x9, 0x6, 0x26b, 0x0, 0x5, 0x9, 0x1, 0x8, 0xfffffff7, 0x75, 0x1, 0x7e, 0x100, 0x1, 0xfffffffa, 0x33384a9, 0x4a, 0x6, 0x6, 0x495, 0xffffff2d, 0xfffffffb, 0x7, 0x4, 0xe0000000, 0x1, 0x28, 0x8, 0xfa20, 0x5, 0x1, 0x8, 0x1, 0x4, 0x4, 0x5, 0x80, 0x0, 0x1, 0x2, 0x2, 0x81, 0xeff5, 0xc6fa, 0x7, 0xf53, 0x6, 0x0, 0x3, 0x6, 0x2, 0x0, 0x81, 0x80, 0x0, 0x5, 0xff, 0xffe4, 0x17, 0x0, 0x6, 0x2, 0x1, 0x7861, 0x80, 0x5, 0x2, 0x5, 0x4bf5091a, 0x4280, 0x7, 0x245e7d86, 0x5, 0x8, 0x0, 0x3, 0x40, 0x2, 0x5, 0x3, 0x7, 0x8, 0x7, 0x5, 0x2, 0x1, 0x8, 0x8, 0x8, 0x6, 0x0, 0x4, 0x8001, 0x1, 0x80000000, 0x8, 0x7fff, 0x2, 0x196, 0x9, 0x3, 0x7fffffff, 0xffffffff, 0xaf9b, 0x5, 0xcb, 0x3, 0x0, 0x5, 0x3, 0xfffffffa, 0x6, 0x6, 0xd, 0x3, 0xd, 0x6, 0x3, 0x0, 0x800, 0x8, 0xc3, 0xe6f, 0x3, 0x80, 0x101, 0x0, 0x26400000, 0x5, 0x5, 0x7, 0x2, 0x6, 0x9, 0x8, 0x8001, 0x2, 0x0, 0x1, 0x2, 0x1000, 0x483, 0x3, 0x41, 0x5, 0x0, 0x7, 0x1, 0x101, 0x8000, 0xd88, 0x9, 0x0, 0x6, 0xfffffff4, 0x1ff, 0x0, 0x6, 0x2, 0xff, 0x6, 0xfffffffa, 0xfffffff8, 0x3ff, 0x3, 0x5, 0x6, 0x2, 0x8, 0xd, 0x59b, 0x3, 0x40a4, 0x4, 0x7, 0x8, 0x2, 0xb, 0x3, 0x1, 0x9153, 0x8, 0xe, 0x40, 0x1, 0x8, 0x401, 0x7, 0x5, 0x81d6, 0x8, 0xfff, 0x2, 0x3, 0x4, 0x13a, 0xfff, 0xf3, 0xa, 0x9, 0x0, 0x3, 0x3, 0x2, 0x9, 0x3, 0xd9c, 0x6, 0x68, 0x80000000, 0x800, 0x8, 0x2, 0x4, 0x0, 0x6ba0, 0x7, 0x2, 0xf219]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xdd0}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe9, 0x5, 0x7ff, 0x1, 0x10001, {0xd, 0x1, 0x42d, 0x3, 0xfb0a, 0x100}, {0x3, 0x2, 0x4, 0x8000, 0x1ff, 0xffff1bb2}, 0x2, 0xfffffffd, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0xfff, 0x1, 0x8, {0x7, 0x0, 0x5, 0x7, 0x8001, 0x5}, {0x6, 0x1, 0x81, 0x1, 0x2, 0x7f}, 0xb, 0x43, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x50, 0x1, 0x7f, 0x0, 0xff, 0x58, 0x4, 0x0, 0x6, 0x2, 0xc67f, 0x4, 0xc31e, 0xc1, 0x37, 0x8000, 0x1ed, 0x192, 0x4, 0x3d9b, 0x6, 0xd, 0x4, 0x1c, 0xf239, 0x5, 0xd2, 0x3, 0x50e6, 0xfff, 0x1d1c7941, 0x6, 0x7ff, 0x40000000, 0x7f, 0x3, 0x7fff, 0x3, 0x4, 0x8001, 0x4f, 0x9, 0x5, 0x6, 0x242be141, 0x9, 0x6, 0x0, 0xd, 0x1a7c, 0x7, 0x8, 0xd39, 0x4, 0x6, 0x8, 0x9, 0x6, 0x7, 0x0, 0x3ff, 0x4, 0x5c56, 0x7, 0x4, 0x6, 0x2, 0x6, 0x4, 0x3, 0x7, 0x5, 0x3, 0x7fff, 0xf, 0x9, 0xcd, 0x3, 0x1, 0x0, 0x4, 0x5, 0x6d2a, 0xe882, 0x2, 0x448, 0x1000, 0x7, 0x5250, 0xc0000000, 0x9, 0xb, 0x2, 0x4, 0x6, 0x2, 0xe440, 0x4, 0xe, 0x7ff, 0x8, 0x4, 0xffff5298, 0x5, 0x8, 0x2, 0x6, 0x5, 0xfffffffe, 0x6, 0xb, 0xff, 0x8, 0x80000001, 0x8, 0x6, 0x400, 0x0, 0xffffff7f, 0x9, 0x4, 0x6, 0xaf, 0xf, 0x0, 0x0, 0x401, 0x4, 0x8b6, 0x8, 0x7, 0x2, 0x6c, 0x9, 0x81, 0x61d, 0x10, 0x3, 0x6, 0xe, 0x5c, 0x5, 0x8, 0x7fffffff, 0xa0000000, 0x0, 0x5, 0x8, 0x7, 0xc, 0x5d5d, 0x6, 0x5, 0x7, 0x0, 0x1, 0x6, 0x65, 0x935b, 0x4, 0x5, 0x1, 0x6dc, 0x7ff, 0x1000, 0x0, 0x97, 0x5, 0x10, 0xcc6, 0x5ccbe222, 0x5, 0x3, 0x7fff, 0x8, 0xfff, 0x4, 0x9, 0x1000, 0x6, 0x9, 0x4, 0x101, 0x662, 0xffff, 0x8, 0x80, 0x9, 0x1, 0x8, 0x4a, 0x6, 0x9, 0x800, 0x1, 0x7, 0x1, 0x410, 0xc, 0xcc5, 0x5e, 0x6, 0x3, 0x2, 0x8, 0xf, 0x3, 0x401, 0x11e, 0xfffff475, 0xf767, 0x8000, 0xe, 0xa9f9, 0x5, 0xc96, 0xffffff80, 0x3, 0x8, 0xa0, 0xab, 0x100, 0x4, 0x5, 0x0, 0x2, 0x6, 0x2, 0xfffffff7, 0x6, 0x9, 0x8, 0x6, 0x7, 0xf8, 0x9, 0x4, 0x6, 0x10, 0xfffffffd, 0x3, 0x80000000, 0x4, 0xffffad4d, 0x6, 0xf, 0xfffffff9, 0x3, 0x8, 0x7, 0x5, 0x6865, 0x9, 0x10001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x9d, 0x7, 0xd, 0x9, 0x2, 0x40, 0xf65, 0x4, 0xfff, 0x5, 0x8, 0x81, 0x9, 0x0, 0x3, 0x9, 0x82, 0x0, 0x1, 0x3ff, 0x40, 0x9, 0x39b, 0x5, 0x32e, 0x81, 0x10, 0x9, 0x403e, 0x9, 0x4, 0xfffffff7, 0x8, 0xe0, 0x0, 0x3, 0xfffffffb, 0xbaef, 0x1, 0x9fc, 0x400, 0x5, 0xffffffff, 0x6, 0x5, 0xa, 0x6, 0x0, 0x2947, 0x1, 0x4c4, 0x4, 0x5, 0x0, 0x2cc5927d, 0x6349, 0x80000000, 0xc6, 0x7fffffff, 0xcb0, 0x2, 0x3, 0xff, 0x0, 0x7, 0x4, 0x4, 0x7f, 0x6, 0x9, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x55, 0x1000, 0x9, 0x5, 0x1, 0x0, 0x79, 0x0, 0x5, 0x96c, 0xb, 0x9, 0x10, 0x7, 0x2, 0x1, 0x71, 0x9, 0x6, 0x1, 0x83b, 0x8, 0x2, 0x40, 0x30a, 0x3, 0x6a0, 0xfffffffd, 0x2, 0x982b, 0x5d, 0x2, 0x8, 0x7, 0x0, 0x9, 0x12, 0xfffffffd, 0x1, 0x9, 0x2, 0xd29, 0x1, 0x1000, 0x0, 0x1ff, 0xd0, 0xf48, 0x2, 0x100, 0x0, 0x7, 0x9, 0xfffff801, 0x4, 0xe, 0x4, 0x9, 0xfffffffb, 0x7fff, 0x2, 0x2, 0x3, 0x9, 0x0, 0x3, 0x7, 0x1, 0x58, 0x3, 0x5cac, 0x7, 0x7, 0x7, 0x9, 0x9, 0x4, 0xa2, 0x4, 0x5, 0x3, 0x7, 0x7, 0x1, 0x4, 0x2, 0x200, 0x8000, 0x7ff, 0xd8a, 0x101, 0x6, 0x9, 0x7, 0x9, 0x1, 0x3, 0x200, 0xda7, 0x9, 0x8, 0xfffffc00, 0x100, 0x9, 0x8, 0x1ff, 0x10000, 0x2, 0xa, 0xfff, 0x5, 0x1, 0x6, 0x1, 0x0, 0x7f, 0x7, 0x3ff, 0x0, 0x6a40, 0x9, 0x3, 0x8, 0xfffffff9, 0x0, 0x613c, 0x1, 0xcc56, 0x6, 0x2, 0xaf63, 0xd7fd, 0x6, 0xc04, 0x5, 0x5, 0x1, 0x9, 0x7a945623, 0xc1f3, 0x7, 0x9, 0x1, 0x80000001, 0x7, 0x3e84af95, 0xffffff85, 0x3, 0x4, 0x0, 0x7fffffff, 0x7, 0x2, 0x9588, 0xff, 0x0, 0x4, 0x0, 0x4, 0xfffff801, 0x5, 0x8, 0xabb7, 0x1, 0x4, 0xe1b, 0x91, 0x400, 0x6f0, 0x56, 0x4, 0x5, 0x4, 0x9, 0x10001, 0xffff7fff, 0x4, 0x5, 0x7fff]}]}]}}, @f_rsvp={{0x9}, {0x1168, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x6, 0x4}, {0x2, 0x10001, 0x4}, 0x11, 0x5, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_RSVP_POLICE={0x1034, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x0, 0x5, 0x7, 0x53, 0x10000, 0x1, 0x4e, 0x400, 0x2, 0x0, 0xc8, 0x16, 0xfffffffe, 0x2, 0x8, 0x3, 0x92, 0x0, 0x8, 0xd, 0x4, 0x4, 0x7, 0x401, 0x0, 0x3, 0x10, 0x4dfd9979, 0x7f, 0x7f, 0xfffffff9, 0x10, 0x81, 0x9, 0x3ff, 0x2, 0x7, 0x7, 0x0, 0x7, 0x8, 0x1, 0x3b, 0x5, 0xc30, 0x9a7, 0x88, 0x5, 0x7, 0x8, 0x1, 0x3, 0x4, 0x9, 0x0, 0x0, 0x7, 0x6, 0x7c6f, 0x1000, 0x1, 0x3, 0x7, 0x5, 0x9, 0x5, 0x2, 0x2, 0x3, 0xffffffff, 0x400, 0x2, 0x0, 0x5, 0xac, 0x9, 0x9, 0x2, 0x3ff, 0x37, 0x9, 0x9, 0xd, 0xfffff9e1, 0x10, 0x5, 0x6, 0x8, 0x0, 0x100, 0x2, 0x3, 0x7fffffff, 0xaa, 0x8, 0x10001, 0x2, 0x6, 0x964, 0x3000000, 0x7, 0xdfe, 0x21, 0xffff, 0x6, 0x7, 0x1000, 0x3, 0x0, 0x4, 0x7143719b, 0x9, 0x3, 0xfffeffff, 0x0, 0x2, 0x6, 0xfffffffc, 0x5, 0x4052, 0x1, 0x8, 0x3, 0x80000001, 0x4, 0x3, 0xfd9, 0x81, 0x80, 0x8, 0xfffff001, 0x3, 0x101, 0x4, 0xffff, 0x1, 0x7, 0x10000, 0x4, 0x3, 0x1, 0x3, 0x50d0, 0xfffffffb, 0x2, 0xf05, 0x7, 0x4, 0x8, 0x4, 0x1, 0x8, 0x5, 0x8, 0x1, 0x140, 0xddaa, 0x9, 0x12, 0xfffffff4, 0x0, 0x4, 0xfffffffe, 0xffffffff, 0x0, 0x1, 0x0, 0x7, 0x3, 0x9, 0x5bb7, 0x9, 0x8, 0x6, 0x7f, 0xfffffff0, 0x6, 0x4, 0x10000, 0x7, 0xe70, 0xe, 0xc, 0x4, 0x51, 0x0, 0xa, 0x6, 0xa3d4, 0x6, 0xe01f, 0x1, 0xfffff7fc, 0xb, 0x4, 0x5, 0x1, 0x4, 0x6, 0x7, 0xad0b, 0xc, 0x0, 0xd5, 0xd, 0x7fffffff, 0x1, 0xfffffff7, 0x4, 0x2, 0x3, 0x4, 0x80000001, 0x1, 0x1, 0x3, 0x54, 0x7, 0x2, 0x8, 0xd, 0x9, 0xe6, 0x6, 0x6, 0x5, 0x0, 0xa, 0x0, 0x7fff, 0x5, 0xa, 0x1, 0x40, 0xffffffff, 0x4, 0x1e3c, 0x1, 0x2, 0x4, 0x3, 0x1, 0x3, 0x6, 0x0, 0x3, 0x7, 0x4, 0x3, 0x7ff, 0x5, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0xded, 0x2, 0x7f, 0xff, 0x80000001, 0x2, 0x7, 0x2, 0x6e86a4bc, 0x2, 0x80000001, 0x8, 0x0, 0x2, 0x7, 0xffffffff, 0x65, 0x5, 0x7, 0x7, 0xff000000, 0x4, 0x21, 0x6, 0x1, 0x7cb7, 0x7fff, 0x1ff, 0x9, 0xffff43e0, 0x101, 0x5, 0x0, 0x5, 0x8edb, 0x2, 0x1, 0x0, 0x6, 0x0, 0x2, 0x7, 0xae1, 0x101, 0x4, 0x4, 0x3, 0x8001, 0x401, 0x3, 0x2, 0x2, 0x401, 0xfffffffa, 0xc, 0x10, 0xfffffeff, 0x1, 0xf, 0x5, 0xe70, 0x7, 0x80000000, 0xffffffff, 0x3, 0xe2cd, 0x2d3, 0x9, 0x4, 0x200, 0x4, 0x10001, 0x1, 0x7, 0x2eee, 0x3, 0x8, 0xfff, 0x80000001, 0x9, 0x1000, 0x8, 0x336, 0xff8, 0x6, 0x4, 0x10001, 0x80000, 0x1, 0xc, 0x3, 0x3, 0xffffffff, 0xc, 0x6, 0x401, 0x5, 0x5, 0x7, 0x69a, 0x2, 0x6, 0x0, 0xfff, 0x6, 0x4, 0x2, 0x8, 0x4, 0x10000, 0x3, 0x401, 0xc, 0x10, 0x174, 0x9, 0xe0000, 0x9, 0x10, 0x8, 0x5, 0x4, 0x80000000, 0x81, 0xfffffffb, 0x3, 0x52db, 0x9, 0x6, 0x6, 0x80, 0xfffffff8, 0x7, 0x9, 0x10000, 0x8, 0x7, 0xe, 0x80000001, 0x5, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2, 0xf, 0x1000, 0x0, 0x2, 0x200, 0x47c3, 0x2, 0x9, 0x6e58, 0x9, 0x7, 0x9, 0x8, 0x2, 0xfffffffd, 0x791, 0x9, 0x4, 0x1, 0x1, 0xb544, 0x65, 0x8, 0x7, 0x8, 0x3, 0x7, 0x1, 0x7fffffff, 0x0, 0x1b099bbc, 0x100, 0x8, 0xfff, 0x2, 0x80, 0x9, 0x7fffffff, 0x6, 0x2, 0x5, 0x4, 0x10001, 0xfffffffe, 0xc82, 0x3, 0x9, 0x7, 0xc0000000, 0x9, 0x6, 0x88, 0x8, 0x3, 0x67d2d9b9, 0x9, 0x5, 0x0, 0x4, 0x3, 0xcbb, 0x8, 0x5, 0x4, 0x4, 0x0, 0xfffffff2, 0x2, 0x8000, 0xf21, 0x7, 0x2, 0xc43, 0x1, 0x1ff000, 0x2, 0x4, 0x75e, 0x800, 0x7e8, 0x1, 0x8, 0x2, 0x80, 0x0, 0x998, 0xe3b8, 0x4, 0x7, 0xfffffffd, 0x40, 0x9, 0x0, 0xc, 0x3f63, 0xfffffbff, 0x4, 0x9, 0xd, 0xfffffffe, 0x1, 0x7, 0x6, 0x50, 0xed82, 0x4, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xf18, 0x2, 0x10001, 0x5, 0x6, 0x0, 0x9, 0x81, 0x8, 0x9, 0x5, 0x1, 0x100, 0x9, 0x401, 0x7, 0x4, 0x200, 0x4, 0x3, 0x1d, 0x8, 0xfffffff7, 0x3, 0x7ff, 0xffffffff, 0x800, 0xffff, 0xfec7, 0x3, 0x0, 0x7, 0x80, 0xff, 0x6, 0x1ff, 0xfff, 0x5, 0x0, 0xd04, 0x3, 0xd, 0x7a800000, 0x4, 0x8, 0x8, 0x5, 0x2, 0xffffda79, 0x400, 0x4ad, 0x6, 0xb, 0x2, 0x0, 0x0, 0xfffff44a, 0x4, 0x100, 0x4, 0x4, 0x4, 0x800, 0x81, 0x8, 0xffff, 0x1, 0x1, 0xffff, 0x6, 0x0, 0x80000001, 0x4ccf, 0x0, 0x7, 0x8, 0x4, 0x9, 0x9, 0x99c, 0x6, 0x9f, 0xffffffff, 0x5, 0x2, 0xc, 0x200, 0xaa2, 0xe, 0x8, 0x2, 0x3ff, 0x2, 0x7fff, 0x10, 0x7fffffff, 0x8, 0xc9, 0x3, 0x7, 0x4, 0x4, 0x9, 0x3, 0x0, 0xfffffffc, 0xff, 0x7, 0x101, 0x8656, 0x5, 0x0, 0x5, 0xfffffde1, 0xfffffffb, 0xfa6f, 0x7, 0x401, 0x1, 0x4, 0x0, 0x5, 0x4, 0x2, 0x7ff, 0x9, 0x9, 0x9, 0x25, 0x3, 0xb, 0xffffffb7, 0x0, 0x358, 0x9, 0x80000000, 0x7, 0x9, 0x8e8, 0x5, 0x1, 0x4, 0x3, 0x7, 0x0, 0xd, 0x7, 0x7, 0x9, 0x2, 0x7, 0x2, 0x8, 0x63c7, 0x6, 0x4, 0x5, 0x5, 0x1b5, 0x8a3e, 0x7, 0x3, 0xff, 0x8, 0x8, 0x0, 0x3, 0x7c7, 0x4, 0xffffffff, 0x3, 0x7, 0x52f, 0x3ff, 0xffff, 0x1, 0x3, 0x1, 0xf, 0x0, 0x981c, 0x5, 0x1, 0xffffffff, 0x4, 0x5, 0x5, 0x942, 0x0, 0x8, 0x5dd, 0x59ec1447, 0xff, 0xd, 0x6, 0x1, 0x4, 0x0, 0x3, 0x7ff, 0xb7ae, 0x7, 0x5, 0xdb1, 0x8, 0x1, 0x7, 0x8000000, 0x5, 0x4, 0x7ff, 0x2, 0x80000000, 0x80000000, 0x3000000, 0x4800000, 0x4, 0x7fffffff, 0x6, 0xfff, 0xa2a, 0x0, 0xc, 0xffffffff, 0x6, 0xd, 0xee0, 0x2, 0xfff, 0x9b, 0xfffffff9, 0xc00000, 0x4, 0x800, 0x3, 0x401, 0x3, 0xd, 0x4, 0x8, 0x0, 0x7, 0x6, 0x2, 0x2e6, 0x8, 0x3251, 0x80000000, 0x4, 0x934, 0x1000, 0x9, 0x3, 0xa, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x4dd, 0x6, 0x1, 0x9, 0x4, 0xb1, 0x3, 0xa9, 0x0, 0xf6d, 0x6, 0x5, 0xfff, 0x8001, 0x7, 0xd, 0x4, 0x7, 0x5, 0x7, 0x10001, 0x1ff, 0x0, 0x9, 0x5, 0x1, 0x6, 0x5, 0x9, 0xd, 0x9, 0x3, 0x3, 0x80000000, 0xffffffff, 0x9, 0x2, 0x0, 0x6, 0x5, 0xa63, 0x8, 0x0, 0x10001, 0x3, 0x7fffffff, 0x8, 0x4, 0x4, 0x47, 0x3, 0x4, 0xbb, 0x2, 0x2, 0x4, 0xfffffffc, 0x9, 0x40, 0x3, 0x9, 0x4, 0x7, 0xe4b, 0xe, 0x0, 0x0, 0x7ff, 0x1, 0x7, 0x5, 0x2, 0x1, 0x6, 0x7fffffff, 0xb0, 0x7, 0x4, 0x7, 0x6000, 0x5, 0x8000, 0x8, 0x8, 0x4b, 0x5, 0x5, 0xd1, 0xffffffff, 0x5, 0x8, 0xa, 0x7fff, 0x1ff, 0x8, 0x0, 0x3f16, 0x50000, 0x1, 0x97, 0x5, 0x5, 0x7, 0x1, 0x7f, 0x2, 0xfffffffc, 0x16, 0x0, 0x120000, 0x1, 0x5, 0x80000001, 0x10001, 0x10, 0x4, 0x2, 0xfffffff7, 0x5, 0x6, 0xcd, 0x1, 0x104a, 0x0, 0x0, 0x8ca8, 0x80000000, 0x3, 0x400, 0xffffffff, 0xe, 0x8, 0x25303537, 0x1, 0xc6, 0x8, 0xc3, 0x8, 0x7, 0x6, 0x6, 0x5, 0x80000001, 0x1000, 0xb, 0xfffff800, 0x59, 0x7ff, 0x3d61, 0x316, 0x0, 0x7, 0x100, 0x5, 0x6, 0x4, 0x6, 0x1, 0xa, 0x9, 0x1e2, 0x0, 0x2, 0x4, 0x77, 0x10000, 0x1, 0x9, 0x6b8, 0x5, 0x9, 0x0, 0x6, 0x3, 0xa3, 0x8, 0x6, 0x4, 0xd, 0x1, 0x0, 0x80000001, 0x9, 0xffffffff, 0x6, 0x7, 0x1, 0x59a, 0x400, 0x25, 0x1, 0x400, 0x3, 0x6, 0x8, 0x0, 0x3, 0x5, 0xffffffff, 0x3, 0x6, 0x5, 0x0, 0x9, 0xb68d, 0xf5e, 0x400, 0x7, 0x80000001, 0x47, 0xffff8000, 0x9, 0x8, 0x10001, 0x3, 0x1ff, 0x1, 0xc, 0x3, 0x1, 0x5, 0x4, 0x7, 0x7, 0x5, 0xfffffffb, 0x9, 0x7f, 0xb, 0x2, 0xffffffff, 0x6, 0x6, 0xffffffff, 0x2, 0x9, 0xfe6, 0x1000, 0x3, 0x8, 0x3, 0x5, 0x5, 0x6, 0x2, 0xd, 0xd9, 0x5, 0x2, 0x80000001, 0x6, 0x5, 0x9, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_RSVP_POLICE={0xf8, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd3c5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x6, 0xfffffffe, 0x8, 0x1, {0x38, 0x1, 0x6, 0x7, 0xe40, 0x7}, {0x6, 0x1, 0x1e6d, 0x1, 0xff, 0x5}, 0x7, 0x812, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x79c4, 0x0, 0x3, 0x1, 0x2, {0x8, 0x1, 0x8, 0x4, 0x2, 0xf390}, {0x0, 0x1, 0xf, 0x3, 0x1ff, 0x400}, 0x2, 0xfffffffb, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x8001, 0x5, 0x7, {0x5, 0x1, 0xffff, 0x6, 0x2, 0x9}, {0x17, 0x2, 0x6, 0x81, 0x4, 0x9}, 0x1, 0x7, 0x3}}]}]}}]}, 0x228c}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) r7 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') socket$inet_icmp(0x2, 0x2, 0x1) dup3(0xffffffffffffffff, r2, 0x80000) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) kernel console output (not intermixed with test programs): 3][ T7997] do_execveat_common+0x1b3/0x6a0 [ 298.703453][ T7997] __x64_sys_execve+0x94/0xb0 [ 298.703481][ T7997] do_syscall_64+0xfa/0x3b0 [ 298.703500][ T7997] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.703533][ T7997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.703555][ T7997] ? clear_bhb_loop+0x60/0xb0 [ 298.703582][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.703605][ T7997] RIP: 0033:0x7f60c558e929 [ 298.703624][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.703644][ T7997] RSP: 002b:00007f60c63d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 298.703672][ T7997] RAX: ffffffffffffffda RBX: 00007f60c57b5fa0 RCX: 00007f60c558e929 [ 298.703688][ T7997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 298.703703][ T7997] RBP: 00007f60c63d1090 R08: 0000000000000000 R09: 0000000000000000 [ 298.703716][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.703730][ T7997] R13: 0000000000000000 R14: 00007f60c57b5fa0 R15: 00007ffdfa877e68 [ 298.703764][ T7997] [ 299.013105][ C1] sd 0:0:1:0: [sda] tag#3076 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 299.023646][ C1] sd 0:0:1:0: [sda] tag#3076 CDB: Read(6) 08 00 9f d1 fe de [ 299.056318][ T8002] block nbd0: not configured, cannot reconfigure [ 299.159763][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 299.179791][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 299.312510][ T5905] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 299.418148][ T7995] ceph: No mds server is up or the cluster is laggy [ 299.489013][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 299.499144][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.524724][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 299.558412][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 299.716914][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 299.893680][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.146311][ T5905] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 300.192399][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.213241][ T5905] usb 1-1: Product: syz [ 300.218048][ T5905] usb 1-1: Manufacturer: syz [ 300.225628][ T5905] usb 1-1: SerialNumber: syz [ 300.252610][ T5905] usb 1-1: config 0 descriptor?? [ 300.254662][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.533'. [ 300.288692][ T5905] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 300.316667][ T5905] imon 1-1:0.0: unable to initialize intf0, err -90 [ 300.502201][ T8002] dummy0: entered allmulticast mode [ 300.989618][ T5905] imon:imon_probe: failed to initialize context! [ 300.996212][ T5905] imon 1-1:0.0: unable to register, err -19 [ 301.246609][ C1] sd 0:0:1:0: [sda] tag#3077 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 301.257158][ C1] sd 0:0:1:0: [sda] tag#3077 CDB: Read(6) 08 00 9f d1 fe de [ 301.272522][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 301.358610][ T8042] tmpfs: Bad value for 'mpol' [ 301.453796][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 301.473491][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 301.505513][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.529590][ T10] usb 3-1: Product: syz [ 301.538491][ T10] usb 3-1: Manufacturer: syz [ 301.545714][ T10] usb 3-1: SerialNumber: syz [ 301.563261][ T10] usb 3-1: config 0 descriptor?? [ 301.577783][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 301.755191][ T5928] usb 1-1: USB disconnect, device number 19 [ 301.963562][ T8039] netlink: 'syz.1.537': attribute type 2 has an invalid length. [ 302.103592][ T8054] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 302.103592][ T8054] program syz.0.543 not setting count and/or reply_len properly [ 302.542616][ T10] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 302.552236][ T10] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 302.612931][ T10] usb 3-1: USB disconnect, device number 17 [ 302.852287][ T5928] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 303.755936][ T5928] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 303.802538][ T5928] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.811593][ T5928] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.873820][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.894426][ T5928] usb 1-1: config 0 descriptor?? [ 304.137528][ T5928] usb 1-1: string descriptor 0 read error: -71 [ 304.174076][ T5928] usb 1-1: USB disconnect, device number 20 [ 305.125525][ C1] sd 0:0:1:0: [sda] tag#3134 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 305.136080][ C1] sd 0:0:1:0: [sda] tag#3134 CDB: Read(6) 08 00 9f d1 fe de [ 305.302969][ T8088] netlink: 'syz.1.552': attribute type 8 has an invalid length. [ 305.620519][ T8092] macvlan2: entered promiscuous mode [ 305.814350][ T8095] block nbd4: not configured, cannot reconfigure [ 307.012139][ T5928] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 307.053511][ T8102] overlayfs: upper fs does not support file handles, falling back to index=off. [ 307.065894][ T8105] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 307.080065][ T8106] FAULT_INJECTION: forcing a failure. [ 307.080065][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 307.113223][ T8105] netlink: 'syz.3.558': attribute type 11 has an invalid length. [ 307.126497][ T8106] CPU: 1 UID: 0 PID: 8106 Comm: syz.1.556 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 307.126528][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.126554][ T8106] Call Trace: [ 307.126567][ T8106] [ 307.126576][ T8106] dump_stack_lvl+0x189/0x250 [ 307.126615][ T8106] ? __pfx____ratelimit+0x10/0x10 [ 307.126648][ T8106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.126681][ T8106] ? __pfx__printk+0x10/0x10 [ 307.126710][ T8106] ? __pfx___might_resched+0x10/0x10 [ 307.126742][ T8106] ? fs_reclaim_acquire+0x7d/0x100 [ 307.126778][ T8106] should_fail_ex+0x414/0x560 [ 307.126811][ T8106] should_failslab+0xa8/0x100 [ 307.126842][ T8106] __kmalloc_cache_noprof+0x70/0x3d0 [ 307.126869][ T8106] ? rtnl_newlink+0xed/0x1c70 [ 307.126889][ T8106] ? kasan_save_free_info+0x46/0x50 [ 307.126928][ T8106] rtnl_newlink+0xed/0x1c70 [ 307.126949][ T8106] ? netlink_sendmsg+0x805/0xb30 [ 307.126974][ T8106] ? __sock_sendmsg+0x219/0x270 [ 307.127005][ T8106] ? ____sys_sendmsg+0x505/0x830 [ 307.127037][ T8106] ? ___sys_sendmsg+0x21f/0x2a0 [ 307.127062][ T8106] ? __x64_sys_sendmsg+0x19b/0x260 [ 307.127087][ T8106] ? do_syscall_64+0xfa/0x3b0 [ 307.127106][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.127137][ T8106] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.127186][ T8106] ? kasan_quarantine_put+0xdd/0x220 [ 307.127210][ T8106] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.127249][ T8106] ? nlmon_xmit+0xb0/0x100 [ 307.127279][ T8106] ? kmem_cache_free+0x18f/0x400 [ 307.127314][ T8106] ? __local_bh_enable_ip+0x12d/0x1c0 [ 307.127345][ T8106] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.127379][ T8106] ? __local_bh_enable_ip+0x12d/0x1c0 [ 307.127409][ T8106] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 307.127444][ T8106] ? __dev_queue_xmit+0x27e/0x3a70 [ 307.127475][ T8106] ? __dev_queue_xmit+0x27e/0x3a70 [ 307.127503][ T8106] ? __dev_queue_xmit+0x27e/0x3a70 [ 307.127535][ T8106] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 307.127577][ T8106] ? __lock_acquire+0xab9/0xd20 [ 307.127634][ T8106] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.127656][ T8106] rtnetlink_rcv_msg+0x7cc/0xb70 [ 307.127683][ T8106] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 307.127704][ T8106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.127725][ T8106] ? ref_tracker_free+0x63a/0x7d0 [ 307.127753][ T8106] ? __copy_skb_header+0xa7/0x550 [ 307.127784][ T8106] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.127813][ T8106] ? __skb_clone+0x63/0x7a0 [ 307.127850][ T8106] netlink_rcv_skb+0x208/0x470 [ 307.127877][ T8106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.127902][ T8106] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.127942][ T8106] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.127967][ T8106] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.127999][ T8106] netlink_unicast+0x75b/0x8d0 [ 307.128041][ T8106] netlink_sendmsg+0x805/0xb30 [ 307.128078][ T8106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.128114][ T8106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.128140][ T8106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.128167][ T8106] __sock_sendmsg+0x219/0x270 [ 307.128204][ T8106] ____sys_sendmsg+0x505/0x830 [ 307.128238][ T8106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.128275][ T8106] ? import_iovec+0x74/0xa0 [ 307.128302][ T8106] ___sys_sendmsg+0x21f/0x2a0 [ 307.128333][ T8106] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.128402][ T8106] ? __fget_files+0x2a/0x420 [ 307.128430][ T8106] ? __fget_files+0x3a0/0x420 [ 307.128471][ T8106] __x64_sys_sendmsg+0x19b/0x260 [ 307.128507][ T8106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.128547][ T8106] ? __pfx_ksys_write+0x10/0x10 [ 307.128569][ T8106] ? rcu_is_watching+0x15/0xb0 [ 307.128607][ T8106] ? do_syscall_64+0xbe/0x3b0 [ 307.128632][ T8106] do_syscall_64+0xfa/0x3b0 [ 307.128651][ T8106] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.128682][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.128704][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 307.128730][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.128751][ T8106] RIP: 0033:0x7f0fbed8e929 [ 307.128771][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.128790][ T8106] RSP: 002b:00007f0fbfc4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.128814][ T8106] RAX: ffffffffffffffda RBX: 00007f0fbefb5fa0 RCX: 00007f0fbed8e929 [ 307.128830][ T8106] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 307.128844][ T8106] RBP: 00007f0fbfc4b090 R08: 0000000000000000 R09: 0000000000000000 [ 307.128858][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.128871][ T8106] R13: 0000000000000000 R14: 00007f0fbefb5fa0 R15: 00007ffd35756de8 [ 307.128905][ T8106] [ 307.142245][ T8105] netlink: 224 bytes leftover after parsing attributes in process `syz.3.558'. [ 307.454888][ T8110] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 307.485896][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 307.631732][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.642641][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 307.736007][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.212202][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 308.222024][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.283882][ T5928] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 308.300469][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.548839][ T5928] usb 5-1: Product: syz [ 308.554964][ T5928] usb 5-1: Manufacturer: syz [ 308.560905][ T5928] usb 5-1: SerialNumber: syz [ 308.979780][ T5928] usb 5-1: config 0 descriptor?? [ 308.992032][ T5928] usb 5-1: can't set config #0, error -71 [ 309.005776][ T5928] usb 5-1: USB disconnect, device number 20 [ 309.117843][ C1] sd 0:0:1:0: [sda] tag#3077 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 309.128385][ C1] sd 0:0:1:0: [sda] tag#3077 CDB: Read(6) 08 00 9f d1 fe de [ 309.561780][ T8125] team_slave_0: entered promiscuous mode [ 309.569050][ T8125] team_slave_1: entered promiscuous mode [ 309.610206][ T8125] vlan2: entered promiscuous mode [ 309.615680][ T8125] team0: entered promiscuous mode [ 309.919346][ T8142] FAULT_INJECTION: forcing a failure. [ 309.919346][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 310.032230][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.3.568 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 310.032264][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.032280][ T8142] Call Trace: [ 310.032289][ T8142] [ 310.032298][ T8142] dump_stack_lvl+0x189/0x250 [ 310.032336][ T8142] ? __pfx____ratelimit+0x10/0x10 [ 310.032369][ T8142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.032401][ T8142] ? __pfx__printk+0x10/0x10 [ 310.032429][ T8142] ? __pfx___might_resched+0x10/0x10 [ 310.032459][ T8142] ? fs_reclaim_acquire+0x7d/0x100 [ 310.032494][ T8142] should_fail_ex+0x414/0x560 [ 310.032527][ T8142] ? traverse+0xd9/0x570 [ 310.032547][ T8142] should_failslab+0xa8/0x100 [ 310.032595][ T8142] __kvmalloc_node_noprof+0x161/0x5f0 [ 310.032624][ T8142] ? traverse+0xd9/0x570 [ 310.032653][ T8142] traverse+0xd9/0x570 [ 310.032675][ T8142] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 310.032721][ T8142] seq_read_iter+0xcfe/0xe10 [ 310.032751][ T8142] ? set_page_refcounted+0x76/0x160 [ 310.032795][ T8142] proc_reg_read_iter+0x1b4/0x280 [ 310.032821][ T8142] copy_splice_read+0x54f/0x9b0 [ 310.032868][ T8142] ? __pfx_copy_splice_read+0x10/0x10 [ 310.032893][ T8142] ? look_up_lock_class+0x74/0x170 [ 310.032929][ T8142] ? register_lock_class+0x51/0x320 [ 310.032972][ T8142] ? alloc_pipe_info+0x374/0x4d0 [ 310.033002][ T8142] ? __pfx_copy_splice_read+0x10/0x10 [ 310.033027][ T8142] splice_direct_to_actor+0x4a9/0xcc0 [ 310.033079][ T8142] ? __pfx_direct_splice_actor+0x10/0x10 [ 310.033116][ T8142] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 310.033157][ T8142] do_splice_direct+0x181/0x270 [ 310.033189][ T8142] ? __pfx_do_splice_direct+0x10/0x10 [ 310.033219][ T8142] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 310.033258][ T8142] ? rw_verify_area+0x258/0x650 [ 310.033287][ T8142] do_sendfile+0x4da/0x7e0 [ 310.033330][ T8142] ? __pfx_do_sendfile+0x10/0x10 [ 310.033379][ T8142] __se_sys_sendfile64+0xd9/0x190 [ 310.033413][ T8142] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 310.033442][ T8142] ? rcu_is_watching+0x15/0xb0 [ 310.033481][ T8142] ? do_syscall_64+0xbe/0x3b0 [ 310.033506][ T8142] do_syscall_64+0xfa/0x3b0 [ 310.033525][ T8142] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.033557][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.033579][ T8142] ? clear_bhb_loop+0x60/0xb0 [ 310.033606][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.033628][ T8142] RIP: 0033:0x7f60c558e929 [ 310.033648][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.033667][ T8142] RSP: 002b:00007f60c63d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 310.033690][ T8142] RAX: ffffffffffffffda RBX: 00007f60c57b5fa0 RCX: 00007f60c558e929 [ 310.033707][ T8142] RDX: 0000200000002080 RSI: 0000000000000003 RDI: 0000000000000004 [ 310.033721][ T8142] RBP: 00007f60c63d1090 R08: 0000000000000000 R09: 0000000000000000 [ 310.033734][ T8142] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001 [ 310.033748][ T8142] R13: 0000000000000000 R14: 00007f60c57b5fa0 R15: 00007ffdfa877e68 [ 310.033783][ T8142] [ 310.719569][ T8148] FAULT_INJECTION: forcing a failure. [ 310.719569][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 310.762582][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.2.570 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 310.762614][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.762628][ T8148] Call Trace: [ 310.762636][ T8148] [ 310.762646][ T8148] dump_stack_lvl+0x189/0x250 [ 310.762682][ T8148] ? __pfx____ratelimit+0x10/0x10 [ 310.762716][ T8148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.762748][ T8148] ? __pfx__printk+0x10/0x10 [ 310.762773][ T8148] ? __pfx___might_resched+0x10/0x10 [ 310.762805][ T8148] ? fs_reclaim_acquire+0x7d/0x100 [ 310.762842][ T8148] should_fail_ex+0x414/0x560 [ 310.762875][ T8148] should_failslab+0xa8/0x100 [ 310.762906][ T8148] __kmalloc_noprof+0xcb/0x4f0 [ 310.762929][ T8148] ? __pfx_smack_key_permission+0x10/0x10 [ 310.762960][ T8148] ? user_preparse+0x9e/0x160 [ 310.762986][ T8148] user_preparse+0x9e/0x160 [ 310.763009][ T8148] __key_create_or_update+0x370/0xa30 [ 310.763041][ T8148] ? __pfx___key_create_or_update+0x10/0x10 [ 310.763093][ T8148] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 310.763138][ T8148] key_create_or_update+0x42/0x60 [ 310.763164][ T8148] __se_sys_add_key+0x329/0x400 [ 310.763195][ T8148] ? __pfx___se_sys_add_key+0x10/0x10 [ 310.763233][ T8148] ? do_syscall_64+0xbe/0x3b0 [ 310.763251][ T8148] ? __x64_sys_add_key+0x20/0xc0 [ 310.763280][ T8148] do_syscall_64+0xfa/0x3b0 [ 310.763298][ T8148] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.763330][ T8148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.763352][ T8148] ? clear_bhb_loop+0x60/0xb0 [ 310.763379][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.763400][ T8148] RIP: 0033:0x7f3f68f8e929 [ 310.763420][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.763439][ T8148] RSP: 002b:00007f3f69d62038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 310.763463][ T8148] RAX: ffffffffffffffda RBX: 00007f3f691b5fa0 RCX: 00007f3f68f8e929 [ 310.763479][ T8148] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000200000000440 [ 310.763495][ T8148] RBP: 00007f3f69d62090 R08: fffffffffffffffe R09: 0000000000000000 [ 310.763509][ T8148] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 310.763523][ T8148] R13: 0000000000000000 R14: 00007f3f691b5fa0 R15: 00007fff4c3eecf8 [ 310.763557][ T8148] [ 311.003965][ T5905] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 311.036473][ T8152] FAULT_INJECTION: forcing a failure. [ 311.036473][ T8152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.078526][ T8152] CPU: 1 UID: 0 PID: 8152 Comm: syz.0.573 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 311.078560][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.078574][ T8152] Call Trace: [ 311.078583][ T8152] [ 311.078592][ T8152] dump_stack_lvl+0x189/0x250 [ 311.078630][ T8152] ? __pfx____ratelimit+0x10/0x10 [ 311.078665][ T8152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.078697][ T8152] ? __pfx__printk+0x10/0x10 [ 311.078719][ T8152] ? __might_fault+0xb0/0x130 [ 311.078758][ T8152] should_fail_ex+0x414/0x560 [ 311.078799][ T8152] _copy_from_user+0x2d/0xb0 [ 311.078822][ T8152] ___sys_sendmsg+0x158/0x2a0 [ 311.078864][ T8152] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.078926][ T8152] ? __fget_files+0x2a/0x420 [ 311.078952][ T8152] ? __fget_files+0x3a0/0x420 [ 311.078988][ T8152] __x64_sys_sendmsg+0x19b/0x260 [ 311.079017][ T8152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.079052][ T8152] ? __pfx_ksys_write+0x10/0x10 [ 311.079073][ T8152] ? rcu_is_watching+0x15/0xb0 [ 311.079107][ T8152] ? do_syscall_64+0xbe/0x3b0 [ 311.079129][ T8152] do_syscall_64+0xfa/0x3b0 [ 311.079147][ T8152] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.079176][ T8152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.079196][ T8152] ? clear_bhb_loop+0x60/0xb0 [ 311.079220][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.079240][ T8152] RIP: 0033:0x7fb7be98e929 [ 311.079257][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.079274][ T8152] RSP: 002b:00007fb7bf7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.079296][ T8152] RAX: ffffffffffffffda RBX: 00007fb7bebb5fa0 RCX: 00007fb7be98e929 [ 311.079310][ T8152] RDX: 0000000020000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 311.079324][ T8152] RBP: 00007fb7bf7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 311.079336][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.079348][ T8152] R13: 0000000000000000 R14: 00007fb7bebb5fa0 R15: 00007ffccb6b7898 [ 311.079378][ T8152] [ 311.482267][ T5897] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 311.738555][ T8159] block nbd2: not configured, cannot reconfigure [ 312.027977][ T5897] usb 5-1: device descriptor read/64, error -71 [ 312.037243][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.046963][ T5905] usb 4-1: config 7 has an invalid interface number: 83 but max is 0 [ 312.055180][ T5905] usb 4-1: config 7 has no interface number 0 [ 312.061334][ T5905] usb 4-1: config 7 interface 83 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0 [ 312.072253][ T5905] usb 4-1: No eUSB2 isoc ep 7 companion for config 7 interface 83 altsetting 254 [ 312.081413][ T5905] usb 4-1: config 7 interface 83 has no altsetting 0 [ 312.093317][ T5905] usb 4-1: string descriptor 0 read error: -22 [ 312.099664][ T5905] usb 4-1: New USB device found, idVendor=19d2, idProduct=0145, bcdDevice=44.f5 [ 312.110841][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.162342][ T5898] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 312.187335][ T5905] option 4-1:7.83: GSM modem (1-port) converter detected [ 312.272281][ T5897] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 312.352413][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 312.363823][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.867111][ T8165] batman_adv: batadv0: Adding interface: dummy0 [ 312.873576][ T8165] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.899449][ T8165] batman_adv: batadv0: Interface activated: dummy0 [ 312.955436][ T8165] batadv0: mtu less than device minimum [ 312.962794][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.974818][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.986521][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.998183][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.009848][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.021511][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.033195][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.044847][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.056487][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.122674][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 313.134508][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 313.201184][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.242272][ T5897] usb 5-1: device descriptor read/64, error -71 [ 313.273503][ T5898] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 313.286997][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.298884][ T5898] usb 3-1: Product: syz [ 313.313467][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.324508][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.333979][ T5898] usb 3-1: Manufacturer: syz [ 313.345722][ T8171] netlink: 'syz.1.579': attribute type 4 has an invalid length. [ 313.362244][ T8171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.579'. [ 313.371796][ T5897] usb usb5-port1: attempt power cycle [ 313.388361][ T5898] usb 3-1: SerialNumber: syz [ 313.554483][ T5898] usb 3-1: config 0 descriptor?? [ 313.603634][ T5898] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32 [ 313.656811][ T8175] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 313.792621][ T5897] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 313.854707][ T5897] usb 5-1: device descriptor read/8, error -71 [ 314.364098][ T30] audit: type=1800 audit(2000000031.970:58): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.571" name="bus" dev="ramfs" ino=15755 res=0 errno=0 [ 314.496134][ T5905] usb 4-1: USB disconnect, device number 16 [ 314.599301][ T5905] option 4-1:7.83: device disconnected [ 314.631440][ T8186] FAULT_INJECTION: forcing a failure. [ 314.631440][ T8186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.736685][ T8186] CPU: 1 UID: 0 PID: 8186 Comm: syz.1.582 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 314.736726][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.736740][ T8186] Call Trace: [ 314.736749][ T8186] [ 314.736762][ T8186] dump_stack_lvl+0x189/0x250 [ 314.736799][ T8186] ? __pfx____ratelimit+0x10/0x10 [ 314.736832][ T8186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.736865][ T8186] ? __pfx__printk+0x10/0x10 [ 314.736887][ T8186] ? __might_fault+0xb0/0x130 [ 314.736925][ T8186] should_fail_ex+0x414/0x560 [ 314.736957][ T8186] _copy_from_user+0x2d/0xb0 [ 314.736980][ T8186] __sys_bind+0x199/0x3e0 [ 314.737017][ T8186] ? __pfx___sys_bind+0x10/0x10 [ 314.737051][ T8186] ? __pfx_ksys_write+0x10/0x10 [ 314.737073][ T8186] ? rcu_is_watching+0x15/0xb0 [ 314.737113][ T8186] __x64_sys_bind+0x7a/0x90 [ 314.737136][ T8186] do_syscall_64+0xfa/0x3b0 [ 314.737154][ T8186] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.737196][ T8186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.737225][ T8186] ? clear_bhb_loop+0x60/0xb0 [ 314.737251][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.737271][ T8186] RIP: 0033:0x7f0fbed8e929 [ 314.737290][ T8186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.737309][ T8186] RSP: 002b:00007f0fbfc4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 314.737331][ T8186] RAX: ffffffffffffffda RBX: 00007f0fbefb5fa0 RCX: 00007f0fbed8e929 [ 314.737347][ T8186] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 314.737361][ T8186] RBP: 00007f0fbfc4b090 R08: 0000000000000000 R09: 0000000000000000 [ 314.737373][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.737385][ T8186] R13: 0000000000000000 R14: 00007f0fbefb5fa0 R15: 00007ffd35756de8 [ 314.737412][ T8186] [ 315.164482][ T5898] imon:send_packet: packet tx failed (-71) [ 315.187264][ T5898] imon 3-1:0.0: panel buttons/knobs setup failed [ 315.261494][ T8194] input: syz1 as /devices/virtual/input/input34 [ 315.272579][ T8194] input: failed to attach handler leds to device input34, error: -6 [ 315.556927][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 315.653770][ T8202] FAULT_INJECTION: forcing a failure. [ 315.653770][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.736998][ T5898] rc_core: IR keymap rc-imon-pad not found [ 315.768423][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.1.585 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 315.768456][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.768469][ T8202] Call Trace: [ 315.768477][ T8202] [ 315.768488][ T8202] dump_stack_lvl+0x189/0x250 [ 315.768526][ T8202] ? __pfx____ratelimit+0x10/0x10 [ 315.768560][ T8202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.768593][ T8202] ? __pfx__printk+0x10/0x10 [ 315.768630][ T8202] should_fail_ex+0x414/0x560 [ 315.768665][ T8202] _copy_to_user+0x31/0xb0 [ 315.768690][ T8202] simple_read_from_buffer+0xe1/0x170 [ 315.768724][ T8202] proc_fail_nth_read+0x1df/0x250 [ 315.768758][ T8202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.768797][ T8202] ? rw_verify_area+0x258/0x650 [ 315.768822][ T8202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.768855][ T8202] vfs_read+0x200/0x980 [ 315.768886][ T8202] ? __pfx___mutex_lock+0x10/0x10 [ 315.768906][ T8202] ? __pfx_vfs_read+0x10/0x10 [ 315.768932][ T8202] ? __fget_files+0x2a/0x420 [ 315.768967][ T8202] ? __fget_files+0x3a0/0x420 [ 315.768995][ T8202] ? __fget_files+0x2a/0x420 [ 315.769035][ T8202] ksys_read+0x145/0x250 [ 315.769063][ T8202] ? __pfx_ksys_read+0x10/0x10 [ 315.769084][ T8202] ? rcu_is_watching+0x15/0xb0 [ 315.769123][ T8202] ? do_syscall_64+0xbe/0x3b0 [ 315.769149][ T8202] do_syscall_64+0xfa/0x3b0 [ 315.769167][ T8202] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.769199][ T8202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.769220][ T8202] ? clear_bhb_loop+0x60/0xb0 [ 315.769247][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.769268][ T8202] RIP: 0033:0x7f0fbed8d33c [ 315.769287][ T8202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 315.769307][ T8202] RSP: 002b:00007f0fbfc2a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.769330][ T8202] RAX: ffffffffffffffda RBX: 00007f0fbefb6080 RCX: 00007f0fbed8d33c [ 315.769346][ T8202] RDX: 000000000000000f RSI: 00007f0fbfc2a0a0 RDI: 0000000000000008 [ 315.769365][ T8202] RBP: 00007f0fbfc2a090 R08: 0000000000000000 R09: 0000000000000000 [ 315.769377][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.769388][ T8202] R13: 0000000000000000 R14: 00007f0fbefb6080 R15: 00007ffd35756de8 [ 315.769418][ T8202] [ 315.782032][ T5898] Registered IR keymap rc-empty [ 316.237890][ T5898] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 316.342231][ T5898] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 316.391251][ T5898] imon:send_packet: packet tx failed (-71) [ 316.452295][ T5898] imon 3-1:0.0: remote input dev register failed [ 316.502661][ T5898] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 317.215724][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.319116][ T5898] imon 3-1:0.0: unable to initialize intf0, err 0 [ 317.359050][ T5898] imon:imon_probe: failed to initialize context! [ 317.387131][ T5898] imon 3-1:0.0: unable to register, err -19 [ 317.438127][ T5898] usb 3-1: USB disconnect, device number 18 [ 318.899894][ T8223] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 318.899894][ T8223] program syz.4.591 not setting count and/or reply_len properly [ 318.972579][ T8225] netlink: 87 bytes leftover after parsing attributes in process `syz.3.592'. [ 319.626851][ T30] audit: type=1326 audit(2000000036.950:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 319.705598][ T30] audit: type=1326 audit(2000000036.950:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 319.793126][ T30] audit: type=1326 audit(2000000036.970:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 319.882183][ T30] audit: type=1326 audit(2000000036.970:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 319.975989][ T30] audit: type=1326 audit(2000000036.970:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 320.028238][ T30] audit: type=1326 audit(2000000036.980:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 320.114323][ T30] audit: type=1326 audit(2000000037.210:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 320.172337][ T30] audit: type=1326 audit(2000000037.270:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3021d8e929 code=0x7ffc0000 [ 320.229396][ T30] audit: type=1326 audit(2000000037.590:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.3.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60c558e929 code=0x0 [ 320.522835][ T8242] block nbd1: not configured, cannot reconfigure [ 320.689751][ T8246] trusted_key: encrypted_key: insufficient parameters specified [ 320.736807][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 322.346234][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 322.572420][ T8235] net_ratelimit: 10 callbacks suppressed [ 322.572444][ T8235] sctp: failed to load transform for md5: -4 [ 322.602189][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 322.617921][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.662124][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 322.733407][ T8260] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 322.735369][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.741744][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.760777][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.809899][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.179651][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 323.313847][ T8264] fuse: Bad value for 'fd' [ 323.544102][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.580544][ T10] usb 2-1: Product: syz [ 323.597517][ T10] usb 2-1: Manufacturer: syz [ 323.614072][ T10] usb 2-1: config 0 descriptor?? [ 323.636616][ T10] usb 2-1: can't set config #0, error -71 [ 323.662800][ T10] usb 2-1: USB disconnect, device number 18 [ 325.037326][ T8272] input: syz1 as /devices/virtual/input/input35 [ 325.043861][ T8272] input: failed to attach handler leds to device input35, error: -6 [ 325.222926][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 325.536672][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 326.222460][ T5898] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 326.398487][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.410913][ T5898] usb 2-1: config 0 has no interface number 0 [ 326.441477][ T5898] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 326.465245][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.509372][ T5898] usb 2-1: config 0 descriptor?? [ 326.552553][ T5898] usb 2-1: selecting invalid altsetting 1 [ 326.560643][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 326.573193][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 326.905715][ T8288] pimreg3: entered allmulticast mode [ 326.932466][ T5898] DVB: Unable to find symbol cx22700_attach() [ 327.116690][ T5898] DVB: Unable to find symbol tda10046_attach() [ 327.137045][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 327.351386][ T5898] usb 2-1: USB disconnect, device number 19 [ 328.306974][ T8300] netlink: 'syz.2.610': attribute type 4 has an invalid length. [ 328.327966][ T8300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.610'. [ 329.089344][ T8306] block nbd1: not configured, cannot reconfigure [ 329.384599][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 329.568811][ T8313] netlink: 'syz.2.613': attribute type 10 has an invalid length. [ 329.587416][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.595812][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.643028][ T8318] fuse: Bad value for 'fd' [ 329.676885][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.682219][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 329.684215][ T8313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.696539][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.703742][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.812271][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.909716][ T8313] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 329.957600][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 330.030590][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.277733][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.745844][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 330.942957][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.955647][ T10] usb 2-1: Product: syz [ 330.971664][ T10] usb 2-1: Manufacturer: syz [ 330.985393][ T10] usb 2-1: SerialNumber: syz [ 331.316700][ T10] usb 2-1: config 0 descriptor?? [ 331.391539][ T10] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 332.093561][ T8339] input: syz1 as /devices/virtual/input/input38 [ 332.159412][ T8339] input: failed to attach handler leds to device input38, error: -6 [ 332.320809][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 332.724238][ T10] imon:send_packet: packet tx failed (-71) [ 332.962207][ T10] imon 2-1:0.0: panel buttons/knobs setup failed [ 333.030947][ T8343] input: syz1 as /devices/virtual/input/input39 [ 333.106389][ T8343] input: failed to attach handler leds to device input39, error: -6 [ 333.130661][ T8346] nfs4: Unknown parameter 'afs' [ 333.228558][ T8346] netlink: 332 bytes leftover after parsing attributes in process `syz.0.623'. [ 334.167459][ T8346] netlink: 104 bytes leftover after parsing attributes in process `syz.0.623'. [ 334.192855][ T10] rc_core: IR keymap rc-imon-pad not found [ 334.198919][ T10] Registered IR keymap rc-empty [ 334.247663][ T10] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 334.608400][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'. [ 334.972487][ T8346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.623'. [ 335.167884][ T10] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 335.352456][ T10] imon:send_packet: packet tx failed (-71) [ 335.372337][ T10] imon 2-1:0.0: remote input dev register failed [ 335.642472][ T10] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 336.219991][ T10] imon 2-1:0.0: unable to initialize intf0, err 0 [ 336.231862][ T10] imon:imon_probe: failed to initialize context! [ 336.342190][ T8367] netlink: 'syz.1.624': attribute type 3 has an invalid length. [ 336.784746][ T10] imon 2-1:0.0: unable to register, err -19 [ 336.802414][ T10] usb 2-1: USB disconnect, device number 20 [ 336.958077][ T3504] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 337.083851][ T8371] netlink: 44 bytes leftover after parsing attributes in process `syz.2.627'. [ 337.116102][ T8371] FAULT_INJECTION: forcing a failure. [ 337.116102][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 337.166088][ T3504] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 337.176237][ T3504] usb 4-1: config 0 has no interface number 0 [ 337.192248][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.2.627 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 337.192281][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.192294][ T8371] Call Trace: [ 337.192304][ T8371] [ 337.192313][ T8371] dump_stack_lvl+0x189/0x250 [ 337.192352][ T8371] ? __pfx____ratelimit+0x10/0x10 [ 337.192384][ T8371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.192417][ T8371] ? __pfx__printk+0x10/0x10 [ 337.192444][ T8371] ? __pfx___might_resched+0x10/0x10 [ 337.192474][ T8371] ? fs_reclaim_acquire+0x7d/0x100 [ 337.192509][ T8371] should_fail_ex+0x414/0x560 [ 337.192542][ T8371] should_failslab+0xa8/0x100 [ 337.192572][ T8371] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 337.192598][ T8371] ? __alloc_skb+0x112/0x2d0 [ 337.192627][ T8371] __alloc_skb+0x112/0x2d0 [ 337.192656][ T8371] netlink_ack+0x146/0xa50 [ 337.192677][ T8371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.192699][ T8371] ? ref_tracker_free+0x63a/0x7d0 [ 337.192725][ T8371] ? __copy_skb_header+0xa7/0x550 [ 337.192755][ T8371] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.192784][ T8371] ? __skb_clone+0x63/0x7a0 [ 337.192820][ T8371] netlink_rcv_skb+0x28c/0x470 [ 337.192847][ T8371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.192871][ T8371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.192910][ T8371] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.192941][ T8371] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.192973][ T8371] netlink_unicast+0x75b/0x8d0 [ 337.193008][ T8371] netlink_sendmsg+0x805/0xb30 [ 337.193043][ T8371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.193078][ T8371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.193104][ T8371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.193131][ T8371] __sock_sendmsg+0x219/0x270 [ 337.193169][ T8371] ____sys_sendmsg+0x52d/0x830 [ 337.193202][ T8371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.193240][ T8371] ? import_iovec+0x74/0xa0 [ 337.193266][ T8371] ___sys_sendmsg+0x21f/0x2a0 [ 337.193296][ T8371] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.193363][ T8371] ? __fget_files+0x2a/0x420 [ 337.193390][ T8371] ? __fget_files+0x3a0/0x420 [ 337.193431][ T8371] __sys_sendmmsg+0x227/0x430 [ 337.193464][ T8371] ? __pfx___sys_sendmmsg+0x10/0x10 [ 337.193489][ T8371] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 337.193552][ T8371] ? ksys_write+0x22a/0x250 [ 337.193579][ T8371] ? __pfx_ksys_write+0x10/0x10 [ 337.193600][ T8371] ? rcu_is_watching+0x15/0xb0 [ 337.193639][ T8371] __x64_sys_sendmmsg+0xa0/0xc0 [ 337.193670][ T8371] do_syscall_64+0xfa/0x3b0 [ 337.193689][ T8371] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.193720][ T8371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.193742][ T8371] ? clear_bhb_loop+0x60/0xb0 [ 337.193768][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.193789][ T8371] RIP: 0033:0x7f3f68f8e929 [ 337.193808][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.193827][ T8371] RSP: 002b:00007f3f69d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 337.193850][ T8371] RAX: ffffffffffffffda RBX: 00007f3f691b5fa0 RCX: 00007f3f68f8e929 [ 337.193866][ T8371] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003 [ 337.193881][ T8371] RBP: 00007f3f69d62090 R08: 0000000000000000 R09: 0000000000000000 [ 337.193894][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.193907][ T8371] R13: 0000000000000000 R14: 00007f3f691b5fa0 R15: 00007fff4c3eecf8 [ 337.193945][ T8371] [ 337.196988][ T3504] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.313170][ T3504] usb 4-1: config 0 interface 235 has no altsetting 0 [ 338.339192][ T3504] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 338.348466][ T3504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.367096][ T3504] usb 4-1: Product: syz [ 338.427507][ T8385] hub 8-0:1.0: USB hub found [ 338.434184][ T8385] hub 8-0:1.0: 1 port detected [ 339.326674][ T3504] usb 4-1: Manufacturer: syz [ 339.331333][ T3504] usb 4-1: SerialNumber: syz [ 339.339909][ T3504] usb 4-1: config 0 descriptor?? [ 339.351023][ T3504] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 339.359195][ T3504] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 339.367152][ T3504] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 339.975928][ T3504] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 339.990017][ T3504] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 339.998021][ T3504] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 340.050632][ T3504] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 340.129077][ T10] usb 4-1: USB disconnect, device number 17 [ 340.174883][ T8389] input: syz1 as /devices/virtual/input/input40 [ 340.183896][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 340.224908][ T10] keyspan 4-1:0.235: device disconnected [ 340.302380][ T8389] input: failed to attach handler leds to device input40, error: -6 [ 340.437984][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.633'. [ 341.523022][ T5831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 341.569500][ T5831] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.927370][ T8411] input: syz1 as /devices/virtual/input/input41 [ 341.950104][ T8411] input: failed to attach handler leds to device input41, error: -6 [ 342.897182][ T8404] hid-generic 0000:0000:0000.0003: pid 8404 passed too large report [ 343.362270][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 344.105483][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 344.272181][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 344.288795][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 344.326252][ T24] usb 4-1: config 0 has no interfaces? [ 344.379705][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 344.410714][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.415463][ T10] usb 1-1: device descriptor read/all, error -71 [ 344.439226][ T24] usb 4-1: Manufacturer: syz [ 344.462869][ T24] usb 4-1: config 0 descriptor?? [ 345.502392][ T24] usb 4-1: USB disconnect, device number 18 [ 345.512666][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 348.916745][ T8477] FAULT_INJECTION: forcing a failure. [ 348.916745][ T8477] name failslab, interval 1, probability 0, space 0, times 0 [ 348.978484][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.4.658 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 348.978517][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.978531][ T8477] Call Trace: [ 348.978539][ T8477] [ 348.978549][ T8477] dump_stack_lvl+0x189/0x250 [ 348.978586][ T8477] ? __pfx____ratelimit+0x10/0x10 [ 348.978621][ T8477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.978653][ T8477] ? __pfx__printk+0x10/0x10 [ 348.978681][ T8477] ? __pfx___might_resched+0x10/0x10 [ 348.978716][ T8477] should_fail_ex+0x414/0x560 [ 348.978749][ T8477] should_failslab+0xa8/0x100 [ 348.978779][ T8477] kmem_cache_alloc_noprof+0x73/0x3c0 [ 348.978804][ T8477] ? ptlock_alloc+0x20/0x70 [ 348.978832][ T8477] ptlock_alloc+0x20/0x70 [ 348.978856][ T8477] pte_alloc_one+0x7d/0x170 [ 348.978889][ T8477] __pte_alloc+0x25/0x1a0 [ 348.978925][ T8477] __handle_mm_fault+0x4b8a/0x5620 [ 348.978971][ T8477] ? __pfx___handle_mm_fault+0x10/0x10 [ 348.979025][ T8477] ? find_vma+0xe7/0x160 [ 348.979049][ T8477] ? __pfx_find_vma+0x10/0x10 [ 348.979075][ T8477] handle_mm_fault+0x2d5/0x7f0 [ 348.979112][ T8477] do_user_addr_fault+0x764/0x1390 [ 348.979155][ T8477] exc_page_fault+0x76/0xf0 [ 348.979190][ T8477] asm_exc_page_fault+0x26/0x30 [ 348.979211][ T8477] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 348.979236][ T8477] Code: f6 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf f6 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 348.979255][ T8477] RSP: 0018:ffffc90003557ad8 EFLAGS: 00050202 [ 348.979275][ T8477] RAX: 00007ffffffff001 RBX: 0000000000000060 RCX: 0000000000000060 [ 348.979289][ T8477] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: ffffc90003557bd0 [ 348.979305][ T8477] RBP: ffffc90003557d38 R08: ffffc90003557c2f R09: 1ffff920006aaf85 [ 348.979321][ T8477] R10: dffffc0000000000 R11: fffff520006aaf86 R12: dffffc0000000000 [ 348.979337][ T8477] R13: 0000200000000a40 R14: ffffc90003557bd0 R15: 0000200000000a40 [ 348.979372][ T8477] _copy_from_user+0x7a/0xb0 [ 348.979396][ T8477] do_ipt_set_ctl+0x696/0xcd0 [ 348.979428][ T8477] ? rcu_is_watching+0x15/0xb0 [ 348.979460][ T8477] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 348.979508][ T8477] ? __pfx___mutex_lock+0x10/0x10 [ 348.979529][ T8477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.979586][ T8477] nf_setsockopt+0x26f/0x290 [ 348.979616][ T8477] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 348.979642][ T8477] do_sock_setsockopt+0x257/0x3e0 [ 348.979673][ T8477] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 348.979703][ T8477] ? ksys_write+0x1e1/0x250 [ 348.979737][ T8477] __x64_sys_setsockopt+0x18b/0x220 [ 348.979771][ T8477] do_syscall_64+0xfa/0x3b0 [ 348.979789][ T8477] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.979821][ T8477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.979843][ T8477] ? clear_bhb_loop+0x60/0xb0 [ 348.979870][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.979891][ T8477] RIP: 0033:0x7f3021d8e929 [ 348.979910][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.979929][ T8477] RSP: 002b:00007f3022bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.979949][ T8477] RAX: ffffffffffffffda RBX: 00007f3021fb5fa0 RCX: 00007f3021d8e929 [ 348.979966][ T8477] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 348.979986][ T8477] RBP: 00007f3022bfa090 R08: 0000000000000280 R09: 0000000000000000 [ 348.980000][ T8477] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001 [ 348.980014][ T8477] R13: 0000000000000000 R14: 00007f3021fb5fa0 R15: 00007ffcee58bb38 [ 348.980048][ T8477] [ 349.340550][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.228968][ T8489] input: syz1 as /devices/virtual/input/input42 [ 351.320838][ T8489] input: failed to attach handler leds to device input42, error: -6 [ 351.345428][ T8493] FAULT_INJECTION: forcing a failure. [ 351.345428][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 351.358329][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: syz.3.664 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 351.358360][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.358373][ T8493] Call Trace: [ 351.358382][ T8493] [ 351.358390][ T8493] dump_stack_lvl+0x189/0x250 [ 351.358427][ T8493] ? __pfx____ratelimit+0x10/0x10 [ 351.358461][ T8493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.358492][ T8493] ? __pfx__printk+0x10/0x10 [ 351.358516][ T8493] ? __pfx___might_resched+0x10/0x10 [ 351.358547][ T8493] ? fs_reclaim_acquire+0x7d/0x100 [ 351.358580][ T8493] should_fail_ex+0x414/0x560 [ 351.358613][ T8493] should_failslab+0xa8/0x100 [ 351.358643][ T8493] __kmalloc_noprof+0xcb/0x4f0 [ 351.358666][ T8493] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 351.358695][ T8493] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 351.358737][ T8493] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 351.358778][ T8493] genl_family_rcv_msg_doit+0xb8/0x300 [ 351.358827][ T8493] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.358864][ T8493] ? rcu_is_watching+0x15/0xb0 [ 351.358896][ T8493] ? cap_capable+0x11f/0x460 [ 351.358924][ T8493] ? safesetid_security_capable+0xa9/0x1a0 [ 351.358955][ T8493] ? bpf_lsm_capable+0x9/0x20 [ 351.358986][ T8493] ? security_capable+0x7e/0x2e0 [ 351.359024][ T8493] genl_rcv_msg+0x60e/0x790 [ 351.359065][ T8493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.359094][ T8493] ? ref_tracker_free+0x63a/0x7d0 [ 351.359120][ T8493] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 351.359148][ T8493] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 351.359168][ T8493] ? __pfx_nl80211_post_doit+0x10/0x10 [ 351.359199][ T8493] ? __pfx_ref_tracker_free+0x10/0x10 [ 351.359240][ T8493] netlink_rcv_skb+0x208/0x470 [ 351.359265][ T8493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.359297][ T8493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.359347][ T8493] ? down_read+0x1ad/0x2e0 [ 351.359373][ T8493] genl_rcv+0x28/0x40 [ 351.359400][ T8493] netlink_unicast+0x75b/0x8d0 [ 351.359436][ T8493] netlink_sendmsg+0x805/0xb30 [ 351.359472][ T8493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.359508][ T8493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.359534][ T8493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.359562][ T8493] __sock_sendmsg+0x219/0x270 [ 351.359601][ T8493] ____sys_sendmsg+0x505/0x830 [ 351.359636][ T8493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.359675][ T8493] ? import_iovec+0x74/0xa0 [ 351.359701][ T8493] ___sys_sendmsg+0x21f/0x2a0 [ 351.359732][ T8493] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.359815][ T8493] ? __fget_files+0x2a/0x420 [ 351.359841][ T8493] ? __fget_files+0x3a0/0x420 [ 351.359880][ T8493] __x64_sys_sendmsg+0x19b/0x260 [ 351.359911][ T8493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.359951][ T8493] ? __pfx_ksys_write+0x10/0x10 [ 351.359972][ T8493] ? rcu_is_watching+0x15/0xb0 [ 351.360009][ T8493] ? do_syscall_64+0xbe/0x3b0 [ 351.360033][ T8493] do_syscall_64+0xfa/0x3b0 [ 351.360052][ T8493] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.360084][ T8493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.360107][ T8493] ? clear_bhb_loop+0x60/0xb0 [ 351.360134][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.360156][ T8493] RIP: 0033:0x7f60c558e929 [ 351.360176][ T8493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.360196][ T8493] RSP: 002b:00007f60c63d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.360220][ T8493] RAX: ffffffffffffffda RBX: 00007f60c57b5fa0 RCX: 00007f60c558e929 [ 351.360236][ T8493] RDX: 0000000000040080 RSI: 0000200000000140 RDI: 0000000000000003 [ 351.360251][ T8493] RBP: 00007f60c63d1090 R08: 0000000000000000 R09: 0000000000000000 [ 351.360265][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.360278][ T8493] R13: 0000000000000000 R14: 00007f60c57b5fa0 R15: 00007ffdfa877e68 [ 351.360313][ T8493] [ 353.180326][ T8509] input: syz1 as /devices/virtual/input/input43 [ 353.189936][ T8510] input: syz1 as /devices/virtual/input/input44 [ 353.213449][ T8509] input: failed to attach handler leds to device input43, error: -6 [ 353.233995][ T8510] input: failed to attach handler leds to device input44, error: -6 [ 353.428139][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 353.456139][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 354.967646][ C1] sd 0:0:1:0: [sda] tag#3103 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 354.978122][ C1] sd 0:0:1:0: [sda] tag#3103 CDB: Read(6) 08 00 9f d1 fe de [ 357.647860][ T8540] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 357.659378][ T8540] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 357.743606][ T8541] mmap: syz.1.675 (8541) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 358.511575][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 358.692235][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 358.721538][ T24] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 358.938336][ T24] usb 5-1: config 127 has no interface number 1 [ 358.965101][ T24] usb 5-1: config 127 interface 171 has no altsetting 0 [ 359.544396][ T24] usb 5-1: config 127 interface 0 has no altsetting 0 [ 359.671096][ T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 359.692641][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.701114][ T24] usb 5-1: Product: syz [ 360.222371][ T24] usb 5-1: Manufacturer: syz [ 360.227418][ T24] usb 5-1: SerialNumber: syz [ 360.812340][ T24] usb 5-1: can't set config #127, error -71 [ 360.841019][ T24] usb 5-1: USB disconnect, device number 25 [ 361.503897][ C1] sd 0:0:1:0: [sda] tag#3112 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 361.518430][ C1] sd 0:0:1:0: [sda] tag#3112 CDB: Read(6) 08 00 9f d1 fe de [ 361.801551][ T8569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.681'. [ 361.813647][ T8569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.681'. [ 364.618607][ T8591] netlink: 'syz.2.690': attribute type 21 has an invalid length. [ 364.627801][ T8591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.690'. [ 365.773844][ T8596] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 365.807740][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.815105][ T8596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.822863][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.830166][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.382500][ T8588] fuse: Bad value for 'fd' [ 366.398194][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.405542][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.625074][ T8612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 371.272815][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.699'. [ 371.281913][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.699'. [ 375.993114][ T8647] input: syz1 as /devices/virtual/input/input45 [ 375.999478][ T8647] input: failed to attach handler leds to device input45, error: -6 [ 376.143913][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.703'. [ 376.336676][ T8645] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 376.455931][ T8652] fuse: Bad value for 'fd' [ 376.637206][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.644645][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.541637][ T8643] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 377.827212][ T8666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.708'. [ 378.659464][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.769444][ T8698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.713'. [ 380.778832][ T8698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.713'. [ 381.956672][ T30] audit: type=1326 audit(2000000099.570:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8686 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f68f8e929 code=0x7fc00000 [ 384.179154][ T8713] netlink: 'syz.4.717': attribute type 10 has an invalid length. [ 384.207071][ T8713] bridge0: left allmulticast mode [ 384.224209][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.231477][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.239141][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.246401][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.299198][ T8731] fuse: Bad value for 'fd' [ 384.348670][ T8713] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 386.556031][ T8752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.725'. [ 386.565114][ T8752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.725'. [ 386.723537][ T8730] netlink: 'syz.0.722': attribute type 2 has an invalid length. [ 387.689203][ T8762] FAULT_INJECTION: forcing a failure. [ 387.689203][ T8762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.728136][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.4.728 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 387.728170][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.728184][ T8762] Call Trace: [ 387.728193][ T8762] [ 387.728202][ T8762] dump_stack_lvl+0x189/0x250 [ 387.728242][ T8762] ? __pfx____ratelimit+0x10/0x10 [ 387.728275][ T8762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.728307][ T8762] ? __pfx__printk+0x10/0x10 [ 387.728330][ T8762] ? __might_fault+0xb0/0x130 [ 387.728368][ T8762] should_fail_ex+0x414/0x560 [ 387.728401][ T8762] _copy_from_user+0x2d/0xb0 [ 387.728425][ T8762] memdup_user+0x5e/0xd0 [ 387.728459][ T8762] strndup_user+0x68/0xd0 [ 387.728493][ T8762] __se_sys_fsconfig+0x4ce/0x8d0 [ 387.728521][ T8762] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 387.728553][ T8762] ? ksys_write+0x22a/0x250 [ 387.728581][ T8762] ? __pfx_ksys_write+0x10/0x10 [ 387.728602][ T8762] ? rcu_is_watching+0x15/0xb0 [ 387.728633][ T8762] ? do_syscall_64+0xbe/0x3b0 [ 387.728652][ T8762] ? __x64_sys_fsconfig+0x20/0xc0 [ 387.728689][ T8762] do_syscall_64+0xfa/0x3b0 [ 387.728707][ T8762] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.728739][ T8762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.728761][ T8762] ? clear_bhb_loop+0x60/0xb0 [ 387.728787][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.728809][ T8762] RIP: 0033:0x7f3021d8e929 [ 387.728828][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.728857][ T8762] RSP: 002b:00007f3022bfa038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 387.728881][ T8762] RAX: ffffffffffffffda RBX: 00007f3021fb5fa0 RCX: 00007f3021d8e929 [ 387.728898][ T8762] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 387.728911][ T8762] RBP: 00007f3022bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 387.728926][ T8762] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 387.728939][ T8762] R13: 0000000000000000 R14: 00007f3021fb5fa0 R15: 00007ffcee58bb38 [ 387.728973][ T8762] [ 388.864272][ T8771] syz.4.732 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 389.800428][ T8783] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 389.809188][ T8783] fuse: Bad value for 'fd' [ 390.042242][ T5831] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 390.461676][ T8795] netlink: 'syz.1.738': attribute type 3 has an invalid length. [ 391.324175][ T5831] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.332515][ T5831] usb 5-1: config 0 has no interface number 0 [ 391.338687][ T5831] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 391.347868][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.364321][ T5831] usb 5-1: config 0 descriptor?? [ 391.380654][ T5831] usb 5-1: selecting invalid altsetting 1 [ 391.798919][ T5831] dvb_ttusb_budget: ttusb_init_controller: error [ 391.807959][ T5831] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 391.924763][ T8797] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 392.035706][ T8782] pimreg3: entered allmulticast mode [ 392.088142][ T5831] DVB: Unable to find symbol cx22700_attach() [ 393.617317][ T5831] DVB: Unable to find symbol tda10046_attach() [ 393.643652][ T5831] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 393.712307][ T5831] usb 5-1: USB disconnect, device number 26 [ 394.078675][ T8817] input: syz1 as /devices/virtual/input/input46 [ 394.119489][ T8817] input: failed to attach handler leds to device input46, error: -6 [ 395.367519][ T8827] netlink: 'syz.4.747': attribute type 10 has an invalid length. [ 395.418035][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.425381][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.452747][ T8828] fuse: Bad value for 'fd' [ 395.957734][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'. [ 395.966997][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'. [ 396.802165][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 396.899679][ T8840] Bluetooth: MGMT ver 1.23 [ 397.032284][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 397.874327][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 397.944685][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.964241][ T10] usb 1-1: config 0 descriptor?? [ 398.108963][ T8852] netlink: 168 bytes leftover after parsing attributes in process `syz.2.756'. [ 398.242272][ T24] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 398.629545][ T5831] kernel write not supported for file /457/attr/exec (pid: 5831 comm: kworker/0:3) [ 398.973470][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.981545][ T24] usb 5-1: config 0 has no interface number 0 [ 399.069021][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 399.070443][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 399.102322][ T10] asix 1-1:0.0: probe with driver asix failed with error -61 [ 399.145747][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.334458][ T24] usb 5-1: config 0 descriptor?? [ 399.509231][ T24] usb 5-1: selecting invalid altsetting 1 [ 399.586094][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 399.662916][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 399.727000][ T8861] input: syz1 as /devices/virtual/input/input47 [ 399.784633][ T8861] input: failed to attach handler leds to device input47, error: -6 [ 399.896584][ T24] DVB: Unable to find symbol cx22700_attach() [ 399.982474][ T24] DVB: Unable to find symbol tda10046_attach() [ 399.988707][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 400.063292][ C1] sd 0:0:1:0: [sda] tag#3081 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 400.071491][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.758'. [ 400.073912][ C1] sd 0:0:1:0: [sda] tag#3081 CDB: Read(6) 08 00 9f d1 fe de [ 400.133213][ T24] usb 5-1: USB disconnect, device number 27 [ 400.182222][ T5905] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 400.354103][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 400.378235][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 400.431543][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 400.479838][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 400.503405][ T24] usb 1-1: USB disconnect, device number 23 [ 400.509799][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 400.610725][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 400.813368][ T5905] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 401.242656][ T8875] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 401.254160][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.307934][ T5905] usb 4-1: Product: syz [ 401.316162][ T5905] usb 4-1: Manufacturer: syz [ 401.320821][ T5905] usb 4-1: SerialNumber: syz [ 401.347237][ T5905] usb 4-1: config 0 descriptor?? [ 401.537116][ T8885] FAULT_INJECTION: forcing a failure. [ 401.537116][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 401.556909][ T8886] tipc: Started in network mode [ 401.570621][ T8886] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 401.574886][ T8885] CPU: 0 UID: 0 PID: 8885 Comm: syz.0.766 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 401.574922][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.574938][ T8885] Call Trace: [ 401.574948][ T8885] [ 401.574958][ T8885] dump_stack_lvl+0x189/0x250 [ 401.575002][ T8885] ? __pfx____ratelimit+0x10/0x10 [ 401.575041][ T8885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.575077][ T8885] ? __pfx__printk+0x10/0x10 [ 401.575106][ T8885] ? __pfx___might_resched+0x10/0x10 [ 401.575142][ T8885] ? fs_reclaim_acquire+0x7d/0x100 [ 401.575183][ T8885] should_fail_ex+0x414/0x560 [ 401.575221][ T8885] should_failslab+0xa8/0x100 [ 401.575255][ T8885] __kmalloc_noprof+0xcb/0x4f0 [ 401.575284][ T8885] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 401.575317][ T8885] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 401.575362][ T8885] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 401.575409][ T8885] genl_family_rcv_msg_doit+0xb8/0x300 [ 401.575454][ T8885] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 401.575494][ T8885] ? rcu_is_watching+0x15/0xb0 [ 401.575531][ T8885] ? cap_capable+0x11f/0x460 [ 401.575561][ T8885] ? safesetid_security_capable+0xa9/0x1a0 [ 401.575603][ T8885] ? bpf_lsm_capable+0x9/0x20 [ 401.575639][ T8885] ? security_capable+0x7e/0x2e0 [ 401.575684][ T8885] genl_rcv_msg+0x60e/0x790 [ 401.575729][ T8885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.575762][ T8885] ? ref_tracker_free+0x63a/0x7d0 [ 401.575794][ T8885] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 401.575834][ T8885] ? __pfx_ref_tracker_free+0x10/0x10 [ 401.575879][ T8885] netlink_rcv_skb+0x208/0x470 [ 401.575910][ T8885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.575947][ T8885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.575997][ T8885] ? down_read+0x1ad/0x2e0 [ 401.576026][ T8885] genl_rcv+0x28/0x40 [ 401.576059][ T8885] netlink_unicast+0x75b/0x8d0 [ 401.576098][ T8885] netlink_sendmsg+0x805/0xb30 [ 401.576140][ T8885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.576179][ T8885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.576208][ T8885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.576240][ T8885] __sock_sendmsg+0x219/0x270 [ 401.576281][ T8885] ____sys_sendmsg+0x505/0x830 [ 401.576322][ T8885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.576363][ T8885] ? import_iovec+0x74/0xa0 [ 401.576394][ T8885] ___sys_sendmsg+0x21f/0x2a0 [ 401.576429][ T8885] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.576508][ T8885] ? __fget_files+0x2a/0x420 [ 401.576540][ T8885] ? __fget_files+0x3a0/0x420 [ 401.576583][ T8885] __x64_sys_sendmsg+0x19b/0x260 [ 401.576625][ T8885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.576670][ T8885] ? __pfx_ksys_write+0x10/0x10 [ 401.576695][ T8885] ? rcu_is_watching+0x15/0xb0 [ 401.576736][ T8885] ? do_syscall_64+0xbe/0x3b0 [ 401.576762][ T8885] do_syscall_64+0xfa/0x3b0 [ 401.576784][ T8885] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.576819][ T8885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.576842][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 401.576872][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.576895][ T8885] RIP: 0033:0x7fb7be98e929 [ 401.576917][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.576936][ T8885] RSP: 002b:00007fb7bf7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.576963][ T8885] RAX: ffffffffffffffda RBX: 00007fb7bebb5fa0 RCX: 00007fb7be98e929 [ 401.576979][ T8885] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 401.576996][ T8885] RBP: 00007fb7bf7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 401.577010][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.577025][ T8885] R13: 0000000000000000 R14: 00007fb7bebb5fa0 R15: 00007ffccb6b7898 [ 401.577062][ T8885] [ 401.961366][ T8886] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 401.970898][ T8886] tipc: Enabled bearer , priority 10 [ 401.998076][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 402.775018][ T8900] input: syz1 as /devices/virtual/input/input49 [ 402.797496][ T8900] input: failed to attach handler leds to device input49, error: -6 [ 402.977619][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 402.991978][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.003073][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.024036][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.038365][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.054390][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.068586][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.083656][ T24] tipc: Node number set to 1 [ 403.101603][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.163984][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.209692][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.257987][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.300382][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.339974][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.387792][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.419979][ C1] sd 0:0:1:0: [sda] tag#3091 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 403.430544][ C1] sd 0:0:1:0: [sda] tag#3091 CDB: Read(6) 08 00 9f d1 fe de [ 403.441515][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.537875][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.567769][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.603102][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 403.609429][ T5905] input input48: Timeout waiting for response from device. [ 403.766290][ T5905] usb 4-1: USB disconnect, device number 19 [ 404.633725][ T24] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 404.742187][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 404.761945][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 404.962406][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.970476][ T24] usb 3-1: config 0 has no interface number 0 [ 404.976762][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 404.985909][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.007374][ T24] usb 3-1: config 0 descriptor?? [ 405.033187][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 405.085038][ T24] usb 3-1: selecting invalid altsetting 1 [ 405.123328][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 405.131794][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 405.759200][ T8917] ceph: No mds server is up or the cluster is laggy [ 405.778998][ T8913] pimreg3: entered allmulticast mode [ 405.873392][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 405.879568][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 405.888184][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 406.731978][ T24] DVB: Unable to find symbol cx22700_attach() [ 406.862479][ T24] DVB: Unable to find symbol tda10046_attach() [ 406.888204][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 406.920000][ T24] usb 3-1: USB disconnect, device number 20 [ 408.182283][ C1] sd 0:0:1:0: [sda] tag#3103 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 408.193385][ C1] sd 0:0:1:0: [sda] tag#3103 CDB: Read(6) 08 00 9f d1 fe de [ 408.219308][ T8951] input: syz1 as /devices/virtual/input/input50 [ 408.268332][ T8951] input: failed to attach handler leds to device input50, error: -6 [ 408.455008][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.782'. [ 408.665158][ T8957] random: crng reseeded on system resumption [ 409.968227][ T8965] input: syz1 as /devices/virtual/input/input51 [ 409.974871][ T8965] input: failed to attach handler leds to device input51, error: -6 [ 412.336302][ T8971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 414.009089][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 414.743092][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 414.782232][ T8982] ceph: No mds server is up or the cluster is laggy [ 414.789466][ T8992] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 415.430361][ T9004] netlink: 'syz.2.794': attribute type 3 has an invalid length. [ 416.165858][ T9006] nfs4: Unknown parameter 'afs' [ 416.477904][ T9014] netlink: 452 bytes leftover after parsing attributes in process `syz.3.798'. [ 416.722264][ T5898] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 416.791055][ T9018] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 416.801640][ T9018] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 417.516620][ T5898] usb 3-1: device descriptor read/64, error -71 [ 417.700776][ T9024] netlink: 'syz.3.800': attribute type 4 has an invalid length. [ 417.742237][ T9024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.800'. [ 417.792095][ T5898] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 417.972797][ T5898] usb 3-1: device descriptor read/64, error -71 [ 418.086984][ T5898] usb usb3-port1: attempt power cycle [ 418.462485][ T5898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 418.771756][ T5898] usb 3-1: device descriptor read/8, error -71 [ 419.063666][ T5898] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 419.103098][ T5898] usb 3-1: device descriptor read/8, error -71 [ 419.378908][ T5898] usb usb3-port1: unable to enumerate USB device [ 419.720466][ T9051] netlink: 'syz.3.807': attribute type 3 has an invalid length. [ 419.822784][ T9046] Cannot find add_set index 0 as target [ 419.833409][ T9046] loop7: detected capacity change from 0 to 6 [ 419.842633][ T9046] Dev loop7: unable to read RDB block 6 [ 419.849081][ T9046] loop7: unable to read partition table [ 419.860058][ T9046] loop7: partition table beyond EOD, truncated [ 419.868094][ T9046] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.209639][ T9073] FAULT_INJECTION: forcing a failure. [ 422.209639][ T9073] name failslab, interval 1, probability 0, space 0, times 0 [ 422.223074][ T9073] CPU: 1 UID: 0 PID: 9073 Comm: syz.2.815 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 422.223104][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.223118][ T9073] Call Trace: [ 422.223127][ T9073] [ 422.223136][ T9073] dump_stack_lvl+0x189/0x250 [ 422.223173][ T9073] ? __pfx____ratelimit+0x10/0x10 [ 422.223206][ T9073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.223238][ T9073] ? __pfx__printk+0x10/0x10 [ 422.223274][ T9073] should_fail_ex+0x414/0x560 [ 422.223307][ T9073] should_failslab+0xa8/0x100 [ 422.223342][ T9073] kmem_cache_alloc_noprof+0x73/0x3c0 [ 422.223366][ T9073] ? xfrm_state_alloc+0x24/0x2f0 [ 422.223404][ T9073] xfrm_state_alloc+0x24/0x2f0 [ 422.223439][ T9073] __find_acq_core+0x8a7/0x1c00 [ 422.223466][ T9073] ? xfrm_find_acq+0x4b/0xa0 [ 422.223490][ T9073] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.223511][ T9073] ? __local_bh_enable_ip+0x12d/0x1c0 [ 422.223552][ T9073] xfrm_find_acq+0x78/0xa0 [ 422.223586][ T9073] pfkey_getspi+0x65f/0xee0 [ 422.223628][ T9073] pfkey_sendmsg+0xbfe/0x1090 [ 422.223670][ T9073] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 422.223727][ T9073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.223754][ T9073] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 422.223778][ T9073] __sock_sendmsg+0x219/0x270 [ 422.223815][ T9073] ____sys_sendmsg+0x505/0x830 [ 422.223850][ T9073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.223895][ T9073] ? import_iovec+0x74/0xa0 [ 422.223922][ T9073] ___sys_sendmsg+0x21f/0x2a0 [ 422.223953][ T9073] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.224020][ T9073] ? __fget_files+0x2a/0x420 [ 422.224048][ T9073] ? __fget_files+0x3a0/0x420 [ 422.224089][ T9073] __x64_sys_sendmsg+0x19b/0x260 [ 422.224120][ T9073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.224159][ T9073] ? __pfx_ksys_write+0x10/0x10 [ 422.224182][ T9073] ? rcu_is_watching+0x15/0xb0 [ 422.224220][ T9073] ? do_syscall_64+0xbe/0x3b0 [ 422.224244][ T9073] do_syscall_64+0xfa/0x3b0 [ 422.224262][ T9073] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.224294][ T9073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.224317][ T9073] ? clear_bhb_loop+0x60/0xb0 [ 422.224344][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.224364][ T9073] RIP: 0033:0x7f3f68f8e929 [ 422.224384][ T9073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.224404][ T9073] RSP: 002b:00007f3f69d62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.224427][ T9073] RAX: ffffffffffffffda RBX: 00007f3f691b5fa0 RCX: 00007f3f68f8e929 [ 422.224443][ T9073] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 422.224457][ T9073] RBP: 00007f3f69d62090 R08: 0000000000000000 R09: 0000000000000000 [ 422.224471][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.224483][ T9073] R13: 0000000000000000 R14: 00007f3f691b5fa0 R15: 00007fff4c3eecf8 [ 422.224515][ T9073] [ 422.520586][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.529237][ T5831] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 423.178817][ T9083] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 423.249351][ T9083] netlink: 60 bytes leftover after parsing attributes in process `syz.4.817'. [ 423.362350][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 423.371222][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.384933][ T5831] usb 2-1: config 0 has no interfaces? [ 423.400351][ T5831] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 423.665684][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.673850][ T9076] nbd3: detected capacity change from 0 to 1073741828 [ 423.681592][ T9076] block nbd3: shutting down sockets [ 423.690671][ T5831] usb 2-1: Product: syz [ 423.695231][ T5831] usb 2-1: Manufacturer: syz [ 423.697826][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.699908][ T5831] usb 2-1: SerialNumber: syz [ 424.538539][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 424.652734][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.662738][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 424.715688][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.727019][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 424.736331][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.736370][ T5831] usb 2-1: config 0 descriptor?? [ 424.746178][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 424.759891][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.769594][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 424.796721][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.811491][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 424.847390][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 424.853832][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 424.866965][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.896906][ T5831] usb 2-1: can't set config #0, error -71 [ 424.906150][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 424.918803][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.024430][ T5831] usb 2-1: USB disconnect, device number 21 [ 425.259611][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 425.420432][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 425.442805][ T9093] ceph: No mds server is up or the cluster is laggy [ 425.461159][ T5876] ldm_validate_partition_table(): Disk read failed. [ 425.461216][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 425.506328][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.521159][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 425.530315][ T5876] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.540102][ T5876] Buffer I/O error on dev nbd3, logical block 0, async page read [ 425.548410][ T5876] Dev nbd3: unable to read RDB block 0 [ 425.658481][ T5876] nbd3: unable to read partition table [ 425.797804][ T9106] netlink: 'syz.2.821': attribute type 3 has an invalid length. [ 426.304218][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 426.447036][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 426.456468][ T5876] ldm_validate_partition_table(): Disk read failed. [ 426.503409][ T5876] Dev nbd3: unable to read RDB block 0 [ 426.533746][ T5876] nbd3: unable to read partition table [ 427.144980][ T1212] libceph: connect (1)[c::]:6789 error -101 [ 427.151232][ T1212] libceph: mon0 (1)[c::]:6789 connect error [ 427.455340][ T1212] libceph: connect (1)[c::]:6789 error -101 [ 427.491336][ T9112] ceph: No mds server is up or the cluster is laggy [ 427.516922][ T1212] libceph: mon0 (1)[c::]:6789 connect error [ 429.877072][ T9138] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 429.892189][ T9138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.831'. [ 430.183619][ T9143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.831'. [ 430.654668][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 430.750834][ T9146] netlink: 'syz.2.830': attribute type 30 has an invalid length. [ 430.789485][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'. [ 431.212325][ T5928] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 431.417128][ T9155] netlink: 'syz.3.834': attribute type 3 has an invalid length. [ 431.457925][ T9154] FAULT_INJECTION: forcing a failure. [ 431.457925][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 431.472424][ T9154] CPU: 1 UID: 0 PID: 9154 Comm: syz.4.835 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 431.472456][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.472481][ T9154] Call Trace: [ 431.472493][ T9154] [ 431.472502][ T9154] dump_stack_lvl+0x189/0x250 [ 431.472542][ T9154] ? __pfx____ratelimit+0x10/0x10 [ 431.472576][ T9154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.472609][ T9154] ? __pfx__printk+0x10/0x10 [ 431.472638][ T9154] ? __pfx___might_resched+0x10/0x10 [ 431.472670][ T9154] ? fs_reclaim_acquire+0x7d/0x100 [ 431.472707][ T9154] should_fail_ex+0x414/0x560 [ 431.472746][ T9154] should_failslab+0xa8/0x100 [ 431.472777][ T9154] __kmalloc_noprof+0xcb/0x4f0 [ 431.472802][ T9154] ? skcipher_next_slow+0xee/0x230 [ 431.472833][ T9154] ? skcipher_walk_next+0x7b3/0xbe0 [ 431.472869][ T9154] skcipher_next_slow+0xee/0x230 [ 431.472906][ T9154] ecb_decrypt+0x180/0x200 [ 431.472944][ T9154] ? __pfx_ecb_decrypt+0x10/0x10 [ 431.473005][ T9154] skcipher_recvmsg+0xb11/0x11c0 [ 431.473036][ T9154] ? finish_task_switch+0x26b/0x950 [ 431.473084][ T9154] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 431.473115][ T9154] ? __lock_acquire+0xab9/0xd20 [ 431.473144][ T9154] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 431.473170][ T9154] ? security_socket_recvmsg+0x7e/0x2e0 [ 431.473196][ T9154] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 431.473227][ T9154] sock_recvmsg+0x229/0x270 [ 431.473267][ T9154] ____sys_recvmsg+0x1c9/0x460 [ 431.473307][ T9154] ? __pfx_____sys_recvmsg+0x10/0x10 [ 431.473356][ T9154] ? import_iovec+0x74/0xa0 [ 431.473383][ T9154] ___sys_recvmsg+0x1b5/0x510 [ 431.473419][ T9154] ? __pfx____sys_recvmsg+0x10/0x10 [ 431.473485][ T9154] ? __fget_files+0x3a0/0x420 [ 431.473529][ T9154] __x64_sys_recvmsg+0x198/0x260 [ 431.473562][ T9154] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 431.473603][ T9154] ? __pfx_ksys_write+0x10/0x10 [ 431.473635][ T9154] ? do_syscall_64+0xbe/0x3b0 [ 431.473661][ T9154] do_syscall_64+0xfa/0x3b0 [ 431.473680][ T9154] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.473712][ T9154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.473735][ T9154] ? clear_bhb_loop+0x60/0xb0 [ 431.473762][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.473784][ T9154] RIP: 0033:0x7f3021d8e929 [ 431.473804][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.473823][ T9154] RSP: 002b:00007f3022bd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 431.473845][ T9154] RAX: ffffffffffffffda RBX: 00007f3021fb6080 RCX: 00007f3021d8e929 [ 431.473862][ T9154] RDX: 0000000000010002 RSI: 00002000000005c0 RDI: 000000000000000c [ 431.473876][ T9154] RBP: 00007f3022bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 431.473890][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.473903][ T9154] R13: 0000000000000000 R14: 00007f3021fb6080 R15: 00007ffcee58bb38 [ 431.473938][ T9154] [ 431.806382][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.430468][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.457543][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.522517][ T5928] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.545441][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.563640][ T5928] usb 1-1: config 0 descriptor?? [ 432.578265][ T1212] libceph: connect (1)[c::]:6789 error -101 [ 432.692676][ T1212] libceph: mon0 (1)[c::]:6789 connect error [ 432.978939][ T1212] libceph: connect (1)[c::]:6789 error -101 [ 433.409444][ T9158] ceph: No mds server is up or the cluster is laggy [ 433.416788][ T1212] libceph: mon0 (1)[c::]:6789 connect error [ 435.641698][ T5928] usbhid 1-1:0.0: can't add hid device: -71 [ 435.648655][ T5928] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 436.352402][ T5928] usb 1-1: USB disconnect, device number 24 [ 437.811235][ T9196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.846'. [ 438.272546][ T9196] netlink: 43 bytes leftover after parsing attributes in process `syz.1.846'. [ 438.281597][ T9196] netlink: 'syz.1.846': attribute type 6 has an invalid length. [ 438.422247][ T9196] netlink: 'syz.1.846': attribute type 5 has an invalid length. [ 438.445438][ T9196] netlink: 43 bytes leftover after parsing attributes in process `syz.1.846'. [ 439.308627][ T9194] batadv0: entered promiscuous mode [ 439.314729][ T9194] batadv0: entered allmulticast mode [ 439.525518][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 439.531724][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 440.184021][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.192193][ T5831] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 440.452285][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 441.143592][ T9207] ceph: No mds server is up or the cluster is laggy [ 441.151637][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 441.158674][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.170490][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 441.188115][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.284442][ T5831] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 441.368574][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.417149][ T5831] usb 2-1: config 0 descriptor?? [ 442.646261][ T5831] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 442.699534][ T30] audit: type=1800 audit(2000000160.300:69): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.855" name="file1" dev="tmpfs" ino=903 res=0 errno=0 [ 442.801188][ T5831] usb 2-1: USB disconnect, device number 22 [ 442.854270][ T9242] 9pnet_fd: Insufficient options for proto=fd [ 442.992317][ T5830] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 443.014825][ T9244] fido_id[9244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 443.237736][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 443.277382][ T9251] netlink: 'syz.3.854': attribute type 30 has an invalid length. [ 443.331466][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.854'. [ 443.443662][ T5831] kernel write not supported for file /amidi2 (pid: 5831 comm: kworker/0:3) [ 443.497855][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 443.539234][ T5830] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 443.562135][ T5830] usb 1-1: config 0 has no interface number 0 [ 443.568319][ T5830] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 443.643349][ T5830] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 443.673754][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.713458][ T5830] usb 1-1: Product: syz [ 443.717720][ T5830] usb 1-1: Manufacturer: syz [ 443.753616][ T5830] usb 1-1: SerialNumber: syz [ 443.784102][ T5830] usb 1-1: config 0 descriptor?? [ 443.810639][ T9239] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 444.079269][ T9239] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.205437][ T5830] net1080 1-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, ea:5f:20:14:bb:d7 [ 446.498767][ T9270] bond_slave_1: entered promiscuous mode [ 446.576116][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 447.013648][ T9270] bond0: (slave bond_slave_1): Releasing backup interface [ 447.045634][ T5831] usb 1-1: USB disconnect, device number 25 [ 447.094894][ T5831] net1080 1-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 447.107898][ T9270] bond_slave_1 (unregistering): left promiscuous mode [ 449.742311][ T5898] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 450.762166][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 450.779234][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 450.798817][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.820300][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.837539][ T5898] usb 1-1: Product: syz [ 450.842245][ T5898] usb 1-1: Manufacturer: syz [ 450.847042][ T5898] usb 1-1: SerialNumber: syz [ 450.868978][ T5898] usb 1-1: config 0 descriptor?? [ 451.110158][ T5898] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 451.161473][ T5898] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 451.579680][ T9297] netlink: 'syz.2.874': attribute type 9 has an invalid length. [ 451.598051][ T9297] netlink: 'syz.2.874': attribute type 7 has an invalid length. [ 451.618076][ T9297] netlink: 'syz.2.874': attribute type 8 has an invalid length. [ 451.741076][ T5898] em28xx 1-1:0.0: chip ID is em2874 [ 452.706116][ T5898] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 452.719875][ T5898] em28xx 1-1:0.0: board has no eeprom [ 452.969227][ T9311] FAULT_INJECTION: forcing a failure. [ 452.969227][ T9311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.009417][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.4.879 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 453.009450][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.009464][ T9311] Call Trace: [ 453.009472][ T9311] [ 453.009482][ T9311] dump_stack_lvl+0x189/0x250 [ 453.009530][ T9311] ? __pfx____ratelimit+0x10/0x10 [ 453.009563][ T9311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.009596][ T9311] ? __pfx__printk+0x10/0x10 [ 453.009618][ T9311] ? __might_fault+0xb0/0x130 [ 453.009657][ T9311] should_fail_ex+0x414/0x560 [ 453.009691][ T9311] _copy_from_user+0x2d/0xb0 [ 453.009714][ T9311] ___sys_sendmsg+0x158/0x2a0 [ 453.009758][ T9311] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.009848][ T9311] ? __fget_files+0x2a/0x420 [ 453.009876][ T9311] ? __fget_files+0x3a0/0x420 [ 453.009917][ T9311] __x64_sys_sendmsg+0x19b/0x260 [ 453.009949][ T9311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.009988][ T9311] ? __pfx_ksys_write+0x10/0x10 [ 453.010010][ T9311] ? rcu_is_watching+0x15/0xb0 [ 453.010048][ T9311] ? do_syscall_64+0xbe/0x3b0 [ 453.010072][ T9311] do_syscall_64+0xfa/0x3b0 [ 453.010091][ T9311] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.010123][ T9311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.010145][ T9311] ? clear_bhb_loop+0x60/0xb0 [ 453.010171][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.010192][ T9311] RIP: 0033:0x7f3021d8e929 [ 453.010210][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.010229][ T9311] RSP: 002b:00007f3022bfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.010251][ T9311] RAX: ffffffffffffffda RBX: 00007f3021fb5fa0 RCX: 00007f3021d8e929 [ 453.010268][ T9311] RDX: 00000000240040c4 RSI: 0000200000000040 RDI: 0000000000000005 [ 453.010282][ T9311] RBP: 00007f3022bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 453.010296][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.010309][ T9311] R13: 0000000000000000 R14: 00007f3021fb5fa0 R15: 00007ffcee58bb38 [ 453.010343][ T9311] [ 453.342846][ T5830] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 453.356028][ T9315] input: syz1 as /devices/virtual/input/input52 [ 453.383433][ T5906] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 453.472566][ T5898] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 453.480959][ T5898] em28xx 1-1:0.0: dvb set to bulk mode. [ 453.486943][ T5897] em28xx 1-1:0.0: Binding DVB extension [ 453.497452][ T5830] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 453.518583][ T5898] usb 1-1: USB disconnect, device number 26 [ 453.528013][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.538050][ T5898] em28xx 1-1:0.0: Disconnecting em28xx [ 453.552470][ T9294] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 453.560229][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 453.566166][ T5830] usb 3-1: config 0 descriptor?? [ 453.584902][ T5906] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 453.611022][ T5906] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 453.634822][ T5830] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 453.646567][ T5897] em28xx 1-1:0.0: Registering input extension [ 453.655910][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 453.665924][ T5906] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 453.869088][ T9294] usb 5-1: device descriptor read/64, error -71 [ 453.887542][ T5830] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 453.896361][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 453.903517][ T5897] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 453.910790][ T5897] Registered IR keymap rc-empty [ 453.916563][ T5830] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 453.925101][ T5906] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 453.938212][ T5897] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 453.948541][ T5830] usb 3-1: media controller created [ 453.953845][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.962148][ T5830] dvb-usb: bulk message failed: -22 (5/0) [ 453.967974][ T5830] dvb-usb: MAC address reading failed. [ 453.975370][ T5897] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input53 [ 454.002666][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.060299][ T5906] usb 2-1: config 0 descriptor?? [ 454.069434][ T5897] em28xx 1-1:0.0: Input extension successfully initialized [ 454.119961][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 454.128705][ T9294] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 454.157105][ T5898] em28xx 1-1:0.0: Closing input extension [ 454.165844][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 454.171826][ T5830] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 454.267174][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 454.292592][ T9294] usb 5-1: device descriptor read/64, error -71 [ 454.447154][ T9294] usb usb5-port1: attempt power cycle [ 454.645294][ T5898] em28xx 1-1:0.0: Freeing device [ 454.668974][ T5830] dvb-usb: schedule remote query interval to 100 msecs. [ 454.681741][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.715089][ T5830] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 454.841337][ T5897] dvb-usb: bulk message failed: -22 (2/0) [ 454.847644][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.935120][ T9294] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 454.980486][ T5830] usb 3-1: USB disconnect, device number 25 [ 455.002834][ T5897] dvb-usb: error while querying for an remote control event. [ 455.046252][ T9294] usb 5-1: device descriptor read/8, error -71 [ 455.070870][ T5906] topre 0003:0853:0148.0005: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.1-1/input0 [ 455.160172][ T5830] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 455.225580][ T9] usb 2-1: USB disconnect, device number 23 [ 455.312299][ T9294] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 455.650350][ T9294] usb 5-1: device descriptor read/8, error -71 [ 455.806694][ T9294] usb usb5-port1: unable to enumerate USB device [ 455.891945][ T9333] fido_id[9333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 456.646547][ T30] audit: type=1326 audit(2000000174.240:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fbed8e929 code=0x0 [ 456.748067][ T9354] input: syz1 as /devices/virtual/input/input55 [ 456.776987][ T9354] input: failed to attach handler leds to device input55, error: -6 [ 456.963172][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 459.587489][ T9383] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 459.597098][ T9383] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 460.672459][ T5831] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 460.849424][ T5831] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.440815][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.545800][ T5831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.591756][ T5831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.627447][ T5831] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.645894][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.659502][ T9396] capability: warning: `syz.3.902' uses deprecated v2 capabilities in a way that may be insecure [ 461.680253][ T5831] usb 1-1: Product: syz [ 461.690373][ T5831] usb 1-1: Manufacturer: syz [ 461.695256][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 461.743592][ T5831] cdc_wdm 1-1:1.0: skipping garbage [ 461.767481][ T5831] cdc_wdm 1-1:1.0: skipping garbage [ 461.832460][ T5831] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 461.862714][ T5831] cdc_wdm 1-1:1.0: Unknown control protocol [ 461.893675][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.947791][ T10] usb 3-1: config 0 has no interface number 0 [ 461.977010][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 462.028459][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.044366][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.051211][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.057584][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.064234][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.070508][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.077111][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.083506][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.090130][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.095163][ T10] usb 3-1: config 0 descriptor?? [ 462.096404][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.107807][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.114732][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.117247][ T10] usb 3-1: selecting invalid altsetting 1 [ 462.121357][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.121615][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.139820][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.151717][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.158380][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.165064][ T5898] usb 1-1: USB disconnect, device number 27 [ 462.167801][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 462.172121][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 462.184009][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 462.190096][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 462.261328][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 462.464405][ T9403] FAULT_INJECTION: forcing a failure. [ 462.464405][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 462.478091][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.3.904 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 462.478121][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.478136][ T9403] Call Trace: [ 462.478145][ T9403] [ 462.478154][ T9403] dump_stack_lvl+0x189/0x250 [ 462.478191][ T9403] ? __pfx____ratelimit+0x10/0x10 [ 462.478225][ T9403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.478259][ T9403] ? __pfx__printk+0x10/0x10 [ 462.478287][ T9403] ? __pfx___might_resched+0x10/0x10 [ 462.478325][ T9403] should_fail_ex+0x414/0x560 [ 462.478359][ T9403] should_failslab+0xa8/0x100 [ 462.478390][ T9403] __kmalloc_noprof+0xcb/0x4f0 [ 462.478414][ T9403] ? sk_prot_alloc+0xe7/0x220 [ 462.478443][ T9403] sk_prot_alloc+0xe7/0x220 [ 462.478467][ T9403] ? sk_alloc+0x24/0x370 [ 462.478496][ T9403] sk_alloc+0x3a/0x370 [ 462.478520][ T9403] ? bpf_ctx_init+0x167/0x1d0 [ 462.478548][ T9403] bpf_prog_test_run_skb+0x2ed/0x1560 [ 462.478573][ T9403] ? __fget_files+0x2a/0x420 [ 462.478619][ T9403] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 462.478645][ T9403] bpf_prog_test_run+0x2c4/0x340 [ 462.478680][ T9403] __sys_bpf+0x4a4/0x860 [ 462.478709][ T9403] ? __pfx___sys_bpf+0x10/0x10 [ 462.478759][ T9403] ? ksys_write+0x22a/0x250 [ 462.478787][ T9403] ? __pfx_ksys_write+0x10/0x10 [ 462.478809][ T9403] ? rcu_is_watching+0x15/0xb0 [ 462.478862][ T9403] __x64_sys_bpf+0x7c/0x90 [ 462.478890][ T9403] do_syscall_64+0xfa/0x3b0 [ 462.478908][ T9403] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.478939][ T9403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.478960][ T9403] ? clear_bhb_loop+0x60/0xb0 [ 462.478985][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.479006][ T9403] RIP: 0033:0x7f60c558e929 [ 462.479025][ T9403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.479044][ T9403] RSP: 002b:00007f60c63d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.479066][ T9403] RAX: ffffffffffffffda RBX: 00007f60c57b5fa0 RCX: 00007f60c558e929 [ 462.479082][ T9403] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 462.479096][ T9403] RBP: 00007f60c63d1090 R08: 0000000000000000 R09: 0000000000000000 [ 462.479109][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.479122][ T9403] R13: 0000000000000000 R14: 00007f60c57b5fa0 R15: 00007ffdfa877e68 [ 462.479155][ T9403] [ 462.801138][ T10] DVB: Unable to find symbol cx22700_attach() [ 463.411765][ T10] DVB: Unable to find symbol tda10046_attach() [ 463.466963][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 463.522949][ T10] usb 3-1: USB disconnect, device number 26 [ 468.698142][ T9463] Cannot find add_set index 0 as target [ 468.716296][ T9463] netlink: 92 bytes leftover after parsing attributes in process `syz.1.919'. [ 472.667118][ T9487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.926'. [ 473.397213][ T9496] input: syz1 as /devices/virtual/input/input56 [ 473.666826][ T9496] input: failed to attach handler leds to device input56, error: -6 [ 473.754951][ T9498] Cannot find add_set index 0 as target [ 473.768001][ T9498] netlink: 92 bytes leftover after parsing attributes in process `syz.4.927'. [ 474.184868][ T30] audit: type=1326 audit(2000000191.800:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9477 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f68f8e929 code=0x7fc00000 [ 474.334717][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.928'. [ 474.621089][ T9501] overlayfs: failed to resolve './file0': -2 [ 474.832916][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 474.843430][ T9506] netlink: 'syz.4.930': attribute type 30 has an invalid length. [ 474.853981][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.930'. [ 475.797625][ T9514] FAULT_INJECTION: forcing a failure. [ 475.797625][ T9514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.488604][ T9516] input: syz1 as /devices/virtual/input/input57 [ 476.533353][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.4.933 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 476.533388][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.533403][ T9514] Call Trace: [ 476.533412][ T9514] [ 476.533422][ T9514] dump_stack_lvl+0x189/0x250 [ 476.533462][ T9514] ? __pfx____ratelimit+0x10/0x10 [ 476.533495][ T9514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.533528][ T9514] ? __pfx__printk+0x10/0x10 [ 476.533570][ T9514] should_fail_ex+0x414/0x560 [ 476.533604][ T9514] strncpy_from_user+0x36/0x290 [ 476.533635][ T9514] getname_flags+0xf3/0x540 [ 476.533670][ T9514] user_path_at+0x24/0x60 [ 476.533693][ T9514] __se_sys_mount+0x2d3/0x410 [ 476.533730][ T9514] ? __pfx___se_sys_mount+0x10/0x10 [ 476.533757][ T9514] ? rcu_is_watching+0x15/0xb0 [ 476.533794][ T9514] ? do_syscall_64+0xbe/0x3b0 [ 476.533810][ T9514] ? __x64_sys_mount+0x20/0xc0 [ 476.533840][ T9514] do_syscall_64+0xfa/0x3b0 [ 476.533859][ T9514] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.533892][ T9514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.533913][ T9514] ? clear_bhb_loop+0x60/0xb0 [ 476.533940][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.533961][ T9514] RIP: 0033:0x7f3021d8e929 [ 476.533980][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.534000][ T9514] RSP: 002b:00007f3022bfa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 476.534023][ T9514] RAX: ffffffffffffffda RBX: 00007f3021fb5fa0 RCX: 00007f3021d8e929 [ 476.534039][ T9514] RDX: 0000200000000180 RSI: 0000200000000380 RDI: 0000000000000000 [ 476.534053][ T9514] RBP: 00007f3022bfa090 R08: 0000200000000400 R09: 0000000000000000 [ 476.534067][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.534078][ T9514] R13: 0000000000000000 R14: 00007f3021fb5fa0 R15: 00007ffcee58bb38 [ 476.534108][ T9514] [ 477.041179][ T9520] input: syz1 as /devices/virtual/input/input58 [ 477.049844][ T9523] fuse: Bad value for 'fd' [ 477.122580][ T9520] input: failed to attach handler leds to device input58, error: -6 [ 477.349912][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 477.769755][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 477.780183][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 478.622743][ T5830] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 478.682720][ T9541] overlayfs: failed to resolve './file0': -2 [ 478.984571][ T5830] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 479.002080][ T5830] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 479.017600][ T5830] usb 5-1: config 135 has no interface number 0 [ 479.030854][ T5830] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 479.308086][ T9551] --map-set only usable from mangle table [ 479.317563][ T9551] netlink: 92 bytes leftover after parsing attributes in process `syz.2.941'. [ 480.052338][ T5830] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 480.221238][ T5830] usb 5-1: config 135 interface 230 has no altsetting 0 [ 480.983695][ T5830] usb 5-1: string descriptor 0 read error: -71 [ 480.990798][ T5830] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 481.001477][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.039419][ T5830] usb 5-1: can't set config #135, error -71 [ 481.093847][ T5830] usb 5-1: USB disconnect, device number 32 [ 482.337936][ T9567] mkiss: ax0: crc mode is auto. [ 482.605097][ T9568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.654553][ T9588] overlayfs: failed to resolve './file1': -2 [ 484.843898][ T9592] FAULT_INJECTION: forcing a failure. [ 484.843898][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 485.916961][ T9592] CPU: 1 UID: 0 PID: 9592 Comm: syz.4.957 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 485.916994][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.917007][ T9592] Call Trace: [ 485.917017][ T9592] [ 485.917027][ T9592] dump_stack_lvl+0x189/0x250 [ 485.917066][ T9592] ? __pfx____ratelimit+0x10/0x10 [ 485.917099][ T9592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.917131][ T9592] ? __pfx__printk+0x10/0x10 [ 485.917160][ T9592] ? __pfx___might_resched+0x10/0x10 [ 485.917197][ T9592] should_fail_ex+0x414/0x560 [ 485.917230][ T9592] should_failslab+0xa8/0x100 [ 485.917261][ T9592] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 485.917289][ T9592] ? __alloc_skb+0x112/0x2d0 [ 485.917318][ T9592] __alloc_skb+0x112/0x2d0 [ 485.917346][ T9592] netlink_dump+0x22b/0xe20 [ 485.917384][ T9592] ? __pfx_netlink_dump+0x10/0x10 [ 485.917422][ T9592] ? __inet_diag_dump_start+0x89a/0xa10 [ 485.917455][ T9592] __netlink_dump_start+0x5cb/0x7e0 [ 485.917490][ T9592] inet_diag_handler_cmd+0x1bf/0x290 [ 485.917517][ T9592] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 485.917538][ T9592] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 485.917556][ T9592] ? __pfx_inet_diag_dump+0x10/0x10 [ 485.917574][ T9592] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 485.917598][ T9592] ? sock_diag_lock_handler+0x19/0x290 [ 485.917619][ T9592] ? sock_diag_lock_handler+0x19/0x290 [ 485.917654][ T9592] sock_diag_rcv_msg+0x4cc/0x600 [ 485.917681][ T9592] netlink_rcv_skb+0x208/0x470 [ 485.917707][ T9592] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 485.917731][ T9592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.917772][ T9592] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.917796][ T9592] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.917828][ T9592] netlink_unicast+0x75b/0x8d0 [ 485.917865][ T9592] netlink_sendmsg+0x805/0xb30 [ 485.917909][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.917946][ T9592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.917973][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.918000][ T9592] __sock_sendmsg+0x219/0x270 [ 485.918038][ T9592] sock_write_iter+0x258/0x330 [ 485.918073][ T9592] ? __pfx_sock_write_iter+0x10/0x10 [ 485.918117][ T9592] ? __lock_acquire+0xab9/0xd20 [ 485.918158][ T9592] do_iter_readv_writev+0x56b/0x7f0 [ 485.918190][ T9592] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 485.918224][ T9592] ? bpf_lsm_file_permission+0x9/0x20 [ 485.918253][ T9592] ? security_file_permission+0x75/0x290 [ 485.918285][ T9592] ? rw_verify_area+0x258/0x650 [ 485.918313][ T9592] vfs_writev+0x31a/0x960 [ 485.918351][ T9592] ? __lock_acquire+0xab9/0xd20 [ 485.918382][ T9592] ? __pfx_vfs_writev+0x10/0x10 [ 485.918431][ T9592] ? __fget_files+0x2a/0x420 [ 485.918466][ T9592] ? __fget_files+0x3a0/0x420 [ 485.918494][ T9592] ? __fget_files+0x2a/0x420 [ 485.918534][ T9592] do_writev+0x14d/0x2d0 [ 485.918568][ T9592] ? __pfx_do_writev+0x10/0x10 [ 485.918597][ T9592] ? rcu_is_watching+0x15/0xb0 [ 485.918636][ T9592] ? do_syscall_64+0xbe/0x3b0 [ 485.918660][ T9592] do_syscall_64+0xfa/0x3b0 [ 485.918674][ T9592] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.918700][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.918718][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 485.918739][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.918756][ T9592] RIP: 0033:0x7f3021d8e929 [ 485.918773][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.918788][ T9592] RSP: 002b:00007f3022bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 485.918807][ T9592] RAX: ffffffffffffffda RBX: 00007f3021fb5fa0 RCX: 00007f3021d8e929 [ 485.918822][ T9592] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 485.918833][ T9592] RBP: 00007f3022bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 485.918843][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.918854][ T9592] R13: 0000000000000000 R14: 00007f3021fb5fa0 R15: 00007ffcee58bb38 [ 485.918893][ T9592] [ 487.485771][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 487.495261][ T9614] netlink: 'syz.2.961': attribute type 30 has an invalid length. [ 487.505184][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 488.622787][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 488.632205][ T9628] netlink: 'syz.2.965': attribute type 30 has an invalid length. [ 488.640342][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 489.989757][ T9616] !: renamed from dummy0 (while UP) [ 490.014926][ T9636] overlayfs: failed to resolve './file1': -2 [ 490.492151][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 490.727708][ T9647] FAULT_INJECTION: forcing a failure. [ 490.727708][ T9647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.748690][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.0.972 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 490.748723][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.748737][ T9647] Call Trace: [ 490.748747][ T9647] [ 490.748756][ T9647] dump_stack_lvl+0x189/0x250 [ 490.748795][ T9647] ? __pfx____ratelimit+0x10/0x10 [ 490.748829][ T9647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.748866][ T9647] ? __pfx__printk+0x10/0x10 [ 490.748903][ T9647] should_fail_ex+0x414/0x560 [ 490.748938][ T9647] _copy_to_user+0x31/0xb0 [ 490.748964][ T9647] simple_read_from_buffer+0xe1/0x170 [ 490.748998][ T9647] proc_fail_nth_read+0x1df/0x250 [ 490.749034][ T9647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.749069][ T9647] ? rw_verify_area+0x258/0x650 [ 490.749093][ T9647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.749127][ T9647] vfs_read+0x200/0x980 [ 490.749157][ T9647] ? __pfx___mutex_lock+0x10/0x10 [ 490.749179][ T9647] ? __pfx_vfs_read+0x10/0x10 [ 490.749206][ T9647] ? __fget_files+0x2a/0x420 [ 490.749241][ T9647] ? __fget_files+0x3a0/0x420 [ 490.749269][ T9647] ? __fget_files+0x2a/0x420 [ 490.749308][ T9647] ksys_read+0x145/0x250 [ 490.749336][ T9647] ? __pfx_ksys_read+0x10/0x10 [ 490.749358][ T9647] ? rcu_is_watching+0x15/0xb0 [ 490.749397][ T9647] ? do_syscall_64+0xbe/0x3b0 [ 490.749422][ T9647] do_syscall_64+0xfa/0x3b0 [ 490.749448][ T9647] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.749486][ T9647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.749508][ T9647] ? clear_bhb_loop+0x60/0xb0 [ 490.749539][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.749561][ T9647] RIP: 0033:0x7fb7be98d33c [ 490.749581][ T9647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 490.749600][ T9647] RSP: 002b:00007fb7bf7b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.749622][ T9647] RAX: ffffffffffffffda RBX: 00007fb7bebb5fa0 RCX: 00007fb7be98d33c [ 490.749638][ T9647] RDX: 000000000000000f RSI: 00007fb7bf7b50a0 RDI: 0000000000000004 [ 490.749651][ T9647] RBP: 00007fb7bf7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 490.749664][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.749677][ T9647] R13: 0000000000000000 R14: 00007fb7bebb5fa0 R15: 00007ffccb6b7898 [ 490.749712][ T9647] [ 490.985855][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.404643][ T10] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 491.419153][ T10] usb 4-1: config 0 has no interface number 0 [ 491.432036][ T10] usb 4-1: config 0 interface 98 has no altsetting 0 [ 491.702183][ T10] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 491.708632][ T9650] input: syz1 as /devices/virtual/input/input59 [ 491.711459][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.762121][ T9650] input: failed to attach handler leds to device input59, error: -6 [ 491.782043][ T10] usb 4-1: Product: syz [ 491.786338][ T10] usb 4-1: Manufacturer: syz [ 491.791227][ T10] usb 4-1: SerialNumber: syz [ 491.862780][ T10] usb 4-1: config 0 descriptor?? [ 492.233910][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.973'. [ 492.353704][ T10] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 492.380535][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 493.073907][ T9666] fuse: Unknown parameter '>lÙùðPfd' [ 493.084253][ T10] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 493.415391][ T9669] netlink: 'syz.2.975': attribute type 3 has an invalid length. [ 494.382196][ T10] usb 4-1: device descriptor read/all, error -71 [ 495.155500][ T9681] overlayfs: failed to resolve './file1': -2 [ 495.528068][ T10] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 495.737369][ T10] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 495.753309][ T1212] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 495.822253][ T1212] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 495.831290][ T10] usb 4-1: USB disconnect, device number 20 [ 495.867969][ T1212] ------------[ cut here ]------------ [ 495.875125][ T1212] WARNING: CPU: 0 PID: 1212 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 495.884384][ T1212] Modules linked in: [ 495.889780][ T1212] CPU: 0 UID: 0 PID: 1212 Comm: kworker/0:2 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 495.902433][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.912918][ T1212] Workqueue: events request_firmware_work_func [ 495.919455][ T1212] RIP: 0010:kernfs_get+0x72/0x90 [ 495.925185][ T1212] Code: e8 a3 ff 64 ff 48 89 df be 04 00 00 00 e8 e6 4e c6 ff f0 ff 03 eb 05 e8 8c ff 64 ff 5b 5d c3 cc cc cc cc cc e8 7f ff 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 e5 [ 495.946043][ T1212] RSP: 0018:ffffc90003c4f5e0 EFLAGS: 00010293 [ 495.953108][ T1212] RAX: ffffffff825b4ec1 RBX: ffff8880321e5f00 RCX: ffff888026e25a00 [ 495.962372][ T1212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.971134][ T1212] RBP: 0000000000000000 R08: ffff8880321e5f03 R09: 1ffff1100643cbe0 [ 495.981271][ T1212] R10: dffffc0000000000 R11: ffffed100643cbe1 R12: ffff888078afc728 [ 495.989949][ T1212] R13: 1ffff1100f15f8e6 R14: ffff888078afc730 R15: 1ffff1100f15f8e5 [ 495.999021][ T1212] FS: 0000000000000000(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 496.008656][ T1212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.016485][ T1212] CR2: 00007f8675c04000 CR3: 000000007a5ee000 CR4: 00000000003526f0 [ 496.025389][ T1212] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 496.033724][ T1212] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 496.042194][ T1212] Call Trace: [ 496.045575][ T1212] [ 496.048690][ T1212] kobject_add_internal+0x632/0xb40 [ 496.054083][ T1212] kobject_add+0x155/0x220 [ 496.058726][ T1212] ? __pfx_kobject_add+0x10/0x10 [ 496.064378][ T1212] ? kobject_init+0x83/0x1e0 [ 496.069122][ T1212] get_device_parent+0x316/0x3a0 [ 496.074306][ T1212] device_add+0x2e1/0xb50 [ 496.078754][ T1212] firmware_fallback_sysfs+0x2e4/0x9b0 [ 496.084534][ T1212] _request_firmware+0xf83/0x15b0 [ 496.089980][ T1212] ? __pfx__request_firmware+0x10/0x10 [ 496.095785][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 496.101665][ T1212] request_firmware_work_func+0xaf/0x1c0 [ 496.107514][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 496.113461][ T1212] process_scheduled_works+0xade/0x17b0 [ 496.119631][ T1212] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.126006][ T1212] worker_thread+0x8a0/0xda0 [ 496.131005][ T1212] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.137655][ T1212] ? __kthread_parkme+0x7b/0x200 [ 496.142763][ T1212] kthread+0x70e/0x8a0 [ 496.146957][ T1212] ? __pfx_worker_thread+0x10/0x10 [ 496.152224][ T1212] ? __pfx_kthread+0x10/0x10 [ 496.156935][ T1212] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.162748][ T1212] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.168077][ T1212] ? __pfx_kthread+0x10/0x10 [ 496.173032][ T1212] ret_from_fork+0x3fc/0x770 [ 496.177885][ T1212] ? __pfx_ret_from_fork+0x10/0x10 [ 496.183292][ T1212] ? __switch_to_asm+0x39/0x70 [ 496.188178][ T1212] ? __switch_to_asm+0x33/0x70 [ 496.193123][ T1212] ? __pfx_kthread+0x10/0x10 [ 496.197841][ T1212] ret_from_fork_asm+0x1a/0x30 [ 496.202850][ T1212] [ 496.205991][ T1212] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 496.213319][ T1212] CPU: 0 UID: 0 PID: 1212 Comm: kworker/0:2 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 496.225516][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.235804][ T1212] Workqueue: events request_firmware_work_func [ 496.242213][ T1212] Call Trace: [ 496.245536][ T1212] [ 496.248586][ T1212] dump_stack_lvl+0x99/0x250 [ 496.253503][ T1212] ? __asan_memcpy+0x40/0x70 [ 496.258137][ T1212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.263828][ T1212] ? __pfx__printk+0x10/0x10 [ 496.268579][ T1212] panic+0x2db/0x790 [ 496.272646][ T1212] ? __pfx_panic+0x10/0x10 [ 496.277126][ T1212] ? show_trace_log_lvl+0x4fb/0x550 [ 496.282478][ T1212] ? ret_from_fork_asm+0x1a/0x30 [ 496.287495][ T1212] __warn+0x31b/0x4b0 [ 496.291723][ T1212] ? kernfs_get+0x72/0x90 [ 496.296122][ T1212] ? kernfs_get+0x72/0x90 [ 496.300598][ T1212] report_bug+0x2be/0x4f0 [ 496.305080][ T1212] ? kernfs_get+0x72/0x90 [ 496.309468][ T1212] ? kernfs_get+0x72/0x90 [ 496.313849][ T1212] ? kernfs_get+0x74/0x90 [ 496.318233][ T1212] handle_bug+0x84/0x160 [ 496.322526][ T1212] exc_invalid_op+0x1a/0x50 [ 496.327168][ T1212] asm_exc_invalid_op+0x1a/0x20 [ 496.332250][ T1212] RIP: 0010:kernfs_get+0x72/0x90 [ 496.338470][ T1212] Code: e8 a3 ff 64 ff 48 89 df be 04 00 00 00 e8 e6 4e c6 ff f0 ff 03 eb 05 e8 8c ff 64 ff 5b 5d c3 cc cc cc cc cc e8 7f ff 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 e5 [ 496.359335][ T1212] RSP: 0018:ffffc90003c4f5e0 EFLAGS: 00010293 [ 496.365522][ T1212] RAX: ffffffff825b4ec1 RBX: ffff8880321e5f00 RCX: ffff888026e25a00 [ 496.374014][ T1212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.382196][ T1212] RBP: 0000000000000000 R08: ffff8880321e5f03 R09: 1ffff1100643cbe0 [ 496.390210][ T1212] R10: dffffc0000000000 R11: ffffed100643cbe1 R12: ffff888078afc728 [ 496.398231][ T1212] R13: 1ffff1100f15f8e6 R14: ffff888078afc730 R15: 1ffff1100f15f8e5 [ 496.406238][ T1212] ? kernfs_get+0x71/0x90 [ 496.410734][ T1212] kobject_add_internal+0x632/0xb40 [ 496.416520][ T1212] kobject_add+0x155/0x220 [ 496.420991][ T1212] ? __pfx_kobject_add+0x10/0x10 [ 496.425988][ T1212] ? kobject_init+0x83/0x1e0 [ 496.430870][ T1212] get_device_parent+0x316/0x3a0 [ 496.436479][ T1212] device_add+0x2e1/0xb50 [ 496.441027][ T1212] firmware_fallback_sysfs+0x2e4/0x9b0 [ 496.447029][ T1212] _request_firmware+0xf83/0x15b0 [ 496.452236][ T1212] ? __pfx__request_firmware+0x10/0x10 [ 496.457924][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 496.464216][ T1212] request_firmware_work_func+0xaf/0x1c0 [ 496.470182][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 496.475941][ T1212] process_scheduled_works+0xade/0x17b0 [ 496.481803][ T1212] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.488370][ T1212] worker_thread+0x8a0/0xda0 [ 496.493127][ T1212] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.499523][ T1212] ? __kthread_parkme+0x7b/0x200 [ 496.505034][ T1212] kthread+0x70e/0x8a0 [ 496.509226][ T1212] ? __pfx_worker_thread+0x10/0x10 [ 496.514365][ T1212] ? __pfx_kthread+0x10/0x10 [ 496.518977][ T1212] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.524233][ T1212] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.529470][ T1212] ? __pfx_kthread+0x10/0x10 [ 496.534123][ T1212] ret_from_fork+0x3fc/0x770 [ 496.538845][ T1212] ? __pfx_ret_from_fork+0x10/0x10 [ 496.543999][ T1212] ? __switch_to_asm+0x39/0x70 [ 496.548784][ T1212] ? __switch_to_asm+0x33/0x70 [ 496.553843][ T1212] ? __pfx_kthread+0x10/0x10 [ 496.558828][ T1212] ret_from_fork_asm+0x1a/0x30 [ 496.563741][ T1212] [ 496.567327][ T1212] Kernel Offset: disabled [ 496.571689][ T1212] Rebooting in 86400 seconds..