last executing test programs: 2m47.057792576s ago: executing program 4 (id=662): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x1, 0x8, 0x0, 0x0, 0x6, 0xf799ab692c18ca67}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={0x14, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4044882) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = syz_pidfd_open(0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x200000) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x8000, 0x1}}) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7e, 0xd}}}}}]}}]}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x80, 0x0) memfd_create(&(0x7f00000001c0)='\x00', 0x2) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x18, &(0x7f0000000000)={0x40, 0x11, 0x7, {0x7, 0x7, '9\r\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m43.526859657s ago: executing program 4 (id=678): r0 = syz_io_uring_setup(0x90e, 0x0, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000020) syz_open_dev$usbfs(0x0, 0x1ff, 0x4100) (async) r1 = syz_open_dev$usbfs(0x0, 0x1ff, 0x4100) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000800) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0xf) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0}) 2m41.047950726s ago: executing program 4 (id=683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40814) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40814) (async) 2m40.749941778s ago: executing program 4 (id=685): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m39.826283397s ago: executing program 4 (id=689): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) dup3(r1, r0, 0x80000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m39.586974911s ago: executing program 4 (id=690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0xd92, 0x0, 0xfffffffe}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)=ANY=[]) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) add_key(&(0x7f0000000440)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) lstat(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xa}}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x9c, 0x82, 0x40, @local, @mcast2, 0x8, 0x7800, 0x10000, 0x10000}}) 2m38.790470843s ago: executing program 32 (id=690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0xd92, 0x0, 0xfffffffe}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)=ANY=[]) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) add_key(&(0x7f0000000440)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) lstat(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xa}}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x9c, 0x82, 0x40, @local, @mcast2, 0x8, 0x7800, 0x10000, 0x10000}}) 9.577856583s ago: executing program 0 (id=1188): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000050024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x1008, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x801, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x38}, 0x300}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 9.170117938s ago: executing program 2 (id=1190): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x3, "7b47950dcffd1469749db98d63afef2421509bd3b9122b6fcab41e43b6ab5ea4c33f7c097afdb346d613bb012376326b5c1bfb1af461c523c3afa15b4744c74bcfcffebec26e6449cb80c49406353806929f3c3efc04637ab6275b7e721ab6386663171afa0064155cb2d30b17e7188cf4eda9401acbcb379a6ce9982d7a66f0aecf5a1383d987e3927fa7bc946f3352805201beb749c9cf98088e19212062cd8f0a7478985b49325d3dbc20ce15dc3304dc830b8b70ca0b4722a6ff75935ffcac0971b0bd45cbb65e4d761fa5fd7751823c22d0df779573368939dfb8e8ee1c231022d0c29aeb0d1da219f10a39b73d0347786e701af0f94639700d025ac07d70397d53c213fa6bf59d147ca1fe2ccbb68b99bba6a0a766f28ec0878aab269dd891d34cac4902c1652c52bfba85ef021383c1d089ad9d17fabd502fcdd4628ea0b1c6ae33cc4c09174c450ab9291f41bb590a28253d0310b0065cd355665443faab4d3b275d6997a22cc1721c3370a6818b5713f999146e1cb252f98604754010b3b33d0cb3c6a5889eecff8fbe28773a59caed3c6874e76ce0fe638b0d707b420427f0d15d9502150b74d2adb139221be3190a997f993b5e99ace67c653cf9d8597463b807b45c9b3b9dd2a6896ba4424fd268b46dc2434fd9ac607ca4e9c7a7319e74ef118e4e15589ef0813675f509871fdfb6088c685276b77757fb2687"}) syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8008009040000010300"], 0x0) 9.080463616s ago: executing program 0 (id=1191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)="ae88"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x80c0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r2, 0x0, 0x7}, 0x38) 8.657976773s ago: executing program 5 (id=1193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x26, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events.local\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x54e6, 0x2b1e, 0x9, &(0x7f00000002c0)={[0x4]}, 0x8) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xbe3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001980), 0x8}, 0x80000000}, {{0x0, 0xffffffffffffff4a, 0x0}, 0x5}], 0x5, 0x40018062, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x7fffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000040)="aa", 0x1, 0x50, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x0, 0x3, 0xffffff00, 0x6, 0x8000}, &(0x7f00000003c0)=0x14) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x40003) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000080)=0x87) close(r7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) 8.397475713s ago: executing program 3 (id=1194): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x1d, 0x0, 0x6cf4, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a150905ff"], 0x0) 7.614426387s ago: executing program 2 (id=1195): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) shutdown(r5, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x504, 0x400700) close(r6) sendmmsg$inet(r4, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000180)}}], 0x1, 0xf00) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000240)={r9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e21, 0xd13, @empty, 0xfffffff9}}, 0x8001, 0x12}, 0x90) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 7.437582892s ago: executing program 0 (id=1196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2d0}, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f000000da00)=[{{&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001140), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000001004090000000000000100800002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xc8, 0x4081}}, {{&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001800)="125a54c160cd53118a10614ec5d960bbea425f4ee8ef6296f6d8a3eb85058fa3b92053ca4a3cb8c5e2f496cde6e5ece720bfd8df8ef0b1d8080063b0e2ae4fd9324f1c5e5f6ce637714d60aab4cb0d14e20e5e27dca3897bd47ae311d2c88aad4f05c009a6ac07dc7699f7ec9a6e1fb2a0757d0b44cbc09df33c4a70b1e460e8e7a77aab19845d593cbdb3d41719c04d8c481fd9de6ebc07604141daf4cce6189c219a3fee27294c88bbd46ffec989250e0007ee8b6dd85eae4a82499e33103a5209b6510711b0263b783b2847afed6f0b3e3f9d615e168dccb4e72caa63d848b488ab8b9851e452965060b0f74d6077894a7f8da9d57c1d2c0ceaab460e", 0xfe}, {&(0x7f0000001900)="48563bb23a84fc15d550ace349f95fb6389a295195d49055577c998f743e609a756bcd7bf71d32fe83384138e9315fdb2c8b918e7364267ede6839d528534f56", 0x40}, {&(0x7f0000001940)="a717ac810ad6a4b2b127ce8c04ee83c45add5c1cb11d8f81651bf30434a385b287ff12a4efa2b2a9e09af8c59f17bfc78393c23ba7a1cfee5825", 0x3a}, {&(0x7f0000001980)="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", 0xff}, {&(0x7f0000001a80)="09043c59a42f3d6eb5d3450d2d41d8ab388e1fa6a60125871a4bfca584412bb089a385af2397e39fbb8e1ed97993c7ae823e623ff11e7e4a645578ebead4c25f4f5608bdbdbe81d5c8e0a1462cd4f0773898737362c1934ab20e44c297d5ce425e00f1946c8069c96c997d95f7abef1c0e9efc18520d50e87f527601b15f6b35d50a2f90c5e192bb3a8980acfbe6e382611278020896202acba447e6753cdc2d9a8d1eef40bd4b6291c2a91095b7a1bd58218fae44ae48196cdc058a8761ad0fc99383038a64ad9c91f42d007e607667d1713c9bf28cf0cfdd6a7bb3331b33278662", 0xe2}, {&(0x7f0000001b80)="73dfe4212881aadc19", 0x9}], 0x6, &(0x7f0000001e80)}}, {{&(0x7f0000001f80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000a280)=[{&(0x7f0000002000)="898eafda0faeb0", 0x7}, {&(0x7f0000002040)="224743bdf2a0c1b3fa0cfd1044fb23f1619f320121d93e9b7227f583f4001f59d36980265ca14e17f6c5f3060d44ee43e868fc1af4076bd1f9724f5a3c6d8c44d830e9b985608368fb700223a981b956e8ce75ad7bbfcaae5f6aa10f861b20175983c2210ad69a", 0x67}, {&(0x7f00000020c0)="7ee49d8e1f3bbd73a2cd444372fb1a631fa2b81d05addb765bc2137cf423e578fc9a88a9", 0x24}, {&(0x7f00000021c0)="d3fb0143baf90aa995c62dd3c95712adbf31d603314fa9d81ac666566c3e740f149c83d8e5de1540b310de1248aaaae5bfe02e4a595268ec4b094fe059b46a2b610efe7e649d6e23b8d0f5f671f98266690e3bb8211f57a3a1c6b21e9a459d978a5591daf614c3dcfabf95972e8079d31e59fc84054e6f03ebb73d493eb33fa8e092a64eb449d249b2aebb69658ad13510e74c6dfedfc823d4d4054d888322e438161db751ce4e95573b5ad87f818a357458cbf75e831f0514a677e19e4bc24e4c10cedaaee22e4514f2852522e8f79b277722a94458", 0xd6}, {&(0x7f00000022c0)="1c027cebda3dabe63996e62cb66956de9603541bf78113400b19112269075ea17732f50858a75f571c34fb55967dcd593deba5efaa07e818f960061a3c1d17c6ad3f64551a5e4141915801027f8d34daae5048398582da6ea20cb1c6d2005c38329fc3197e1fdf1fb81025c8ba883ad64a0f30b70cef818de93ad9af94a06da2095beac82d9a35f208ea11760f655baaa9dde9d5eb9ab7459a5acea90af3e343d46fcbcdb07ec5b6b5a40a2a5ac4aa106e0f", 0xb2}, {&(0x7f0000002380)="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", 0xfc}, {&(0x7f0000002480)="77953ea5e400fe5d934710b4604e68b38928f6f2db71c16496040e831690f1b256e14f9dc302d8161b92c4ea543cfe5ff8f1b73a4bb379c5930fdcea3c2485e2c71d281c05b2bf22f1f01eb1520d95c070ae4e9c3857b6b86eaa8fe9fe8e9c0b1a4a597e1a9597dbb0049fee1a849986be28e6bd49", 0x75}, {&(0x7f0000002500)="83d8046aa3bd", 0x6}, {&(0x7f0000002540)="935342db525ea49cf9772025dc52ea449b7de717ec5077ad03a6e056a2095556e1b94d7f6fb978c2e94ea4bb521f36c2185a1b9b49c8e504955e47b51367d5e9888300964d09b82b208edcadd0f3157027b1b26fdd212397baf93e2216c2629f26fbbcdd954630f0d103e373343340a01c1cecbfc90e9cee53c22e715939cfa9246a51607a3812ac1b84da93e6ff369457b5f6b509c8b8e5cd1d5bc3910674a30bb5df2cb520550404a717df01591f4d8cd35788d578e77b763d6dc83d11eafaaf375294195d84b97753b059", 0xcc}], 0x9, &(0x7f000000a380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x90, 0x1}}, {{&(0x7f000000a440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000b7c0)=[{&(0x7f000000a4c0)="619d3a2ca6c8641ffa5aa7dd86b362f03b5ca7294e580c08deefcb91adb07748e0ac64e36f5578938bdf7b473ec104e7d755ffd9b2f81fb43a6855afa40106dab03c7dacf6f707e757fa76781949ca2fc07cb9408b7adbb82304c4677d40e3fbc980571fbc371a94965b19474ddd98f7543bb82bef59370b6e5983199e45bd2459613d55e11de1b5fbdc5876b687415aaedafb9b4178ac2036982633e21706cb7c0f243940899cbef41b73fdb7df450b06c1f5c9d5e33220be57ec36d52da1a4c738bd85e5b4e9ab2ec84508c9e27a306722c312180b13964bf6ee649cfafb9871ec7993433d62caf68c634df9", 0xed}, {&(0x7f000000a5c0)="c6cd3f4b0c463b394883d65ec0fb9ead63", 0x11}, {&(0x7f00000012c0)="055622647bd292fb13b5c1d4195cecf87c131eefc474f85a6fd19dbaef077c193ed6a896a472ed4925e1a897908f5cd9d0de7293a7d3cb49c5a21854ee5ab5300cf95b20f39511e24acec3", 0x4b}, {&(0x7f000000a640)}, {&(0x7f000000a680)="5ab4f1e1641f6a2f717f072679ea9e43c728adf5838b8f46c40dcdb7d615ce2f69db0227c1afa1e5a88203548b3aa25d6bd07c0abe79c0ee000de91e1316a35353d25b", 0x43}, {&(0x7f000000a700)="f6b68887c8a4ae3a05ddfed70176fa954292b24540103b10228c922c7e149cb67544d0243e4a18c4e3e4716c2495741d2dd31b83435c2b5fa29d89f6ef714f275fcb6cd68e3839ba4e70eeff13a29c93a635cfc5c9412dcf8e9dc4c779e71029e0f3176f6725febed1f709f00624c3c359cde53d719c5e000defcb404cea37454ca103882460345c04ce4d4c4b20fba7ac74934f9e18610d2493aa995843", 0x9e}, {&(0x7f000000a7c0)="0407a2273c25cfa96ebbdcaa1deae0859bacee4346806a22121a7ffa52fd3f9c0cc4af4bb664c42af21608d0a313378e1ca21397a370b7915af97374d1dec368786ddbc7405a3bce92c7c2de470324b222d96fa8214eec86d312ee54de1da29e91f276ecfb6d25c7a341b56f955a03675bd583e16f8134ee68ce3934a9a049ed4e9a90340ca1e9c19ad473d8e3f70b0beed75c03ba925685e7cb48c2236e27164c8855eb980ccf61a97839326c1d461f67b2c3d005b1520418a0ae7ccce2270e82eef2ca8da9aa0f71998d47d006cc60fb87adca816d4b9c6aef5d2cbe4fb21c91d85497f4b6fc46ca1324a1894019632e57ff647dd6eae34529fb2646bc3d205995cae7c54b44242b5e26a97c7dbb3fedc3fbbd9a3adcaeef79c19e9fe7c0c4b8bc6b462f7c5698c4b7e2b7b8d8e3f386b8f27790bf2ea6a4237e2a94b52b43a2b2ee0985080db28cf36a5fed642201cb4263682a8e543288a38e901d930f6aed5c22f27e7f0ee7258175f3d2e270f9c1f69df1f95a486922583297d3b4c432d8dbddaa5a592077b5917c2fb8342f90b25c68480a2270182b75d79b9a9299f1b371dbb08ef535b4f1b84853809d2f15165a7174ffafaf23b57bd368900b14fca8ee7a677e3fb73002f0a225776125bac0c82e02059ecc37a29d17a1e3877c11301fc6f8e345512f0ed613f3a1db7d8637141bb0c254589acfc10296f1b1a0e4cf04e5379d38255bd2453c9dc2da6373f01e5e0b1595d9e1e9f2d70ebaa65eaf575d2a21bb590bd3b7df7fe66162418daaf62d07a52f8945630403cdeefd2485f60edd52acecc3fcf4f16e9f263b629fd6f151066b932ca05d264baedaa4b526096d699f8df937c2ed644dab7afe19aa16dc9f6873e9a22002a47bc8f1117f7dbd71415455be843b802b28d5aa0b43e0d5ec72811a12eb7a7028054d0e7b9da7fd8e23a9a346f002dfee531f9ebe45bccb2319fcfe7b7b08c6e00d2670233cc1078d466ce1257652646aeb69c293726fd22bcfeae9b32d1ffe3c254bc5c04f735451fc3ba4ef5f660c1576fa99ef926be88d22808a39cb39fb57983662c8f1ca0e8dffb4bc92b6011309f46fb337d1079692d5ebe9ef3d3efb80c10980eae9e561e2e9ecb5c0a44b7b763aa814860659360428ac8f06f575c2150c3e36147ed266fe8e22bea275545988a58d0d076053dcf6735a2997d00926ef18b55b645cbb35a0d91651afb857ff83d0c82b96e4a3ea052b03d969a8273caf03ec933bc2d2678122cee5c98266d8e45b33a0d5040535b0e9d1138365295efe56bc8ad54ee593c3f5f88928c5786edb88f2b2317d68ea60f64e37f77879a56d7e71b2ad293218ed15987c0d62a1893bd3df09e11cfeb8a57e40c72a8e99aa9601bf1d87c64b4bafd62a440a2be2b07a6cdd80f45102cfbd99075d14078adce3b1108d33e046dcc43db175bfedbcf143aa19d391de08248001fe636cb56b7de671847ac83479f511fa542aa01f402f9ea6396aa5a4a9ad8fe5ee8b81f747e992181e2f91973778fdfc0bf1e036034cd608ad19b39bb6e782af5177163c45155b1e963fadec3058c22e10934ef2a24e638ddb90bfd74cda93aceeab2b90a14ad7928a6e89453b001427e65ce43d5f06bc96644ed4c86cc89489c7fe6f0ee56adbb14a31c45bfb14120395bed780591bcc9d7cf8ec7425d7e5c9608cb5c9229eb98a6396685886d653ff83476fba66def319f96fcc583f0eb75688821e2d65450503c5f1895eda6ff9f9d4fe4c660ec4d36cabca60689b37be31f03c2f849c0bb5c87b591d9c4e90f3663c4e4e17e7782f034fcfd2efac69f5c03c2cf1c8b39cff6a1a3c1053e6966bece323dabf1ad5684f3417ed3806a4c5fbe40758bf1e7c54e96bfaba19f9fbaacb89deeae7045d5f8db20dc2fc80c49b7d8744bd19315ae50c6a760b7daa43e6376ce42d184f4e0acbd2ce10b582c22dad1700d08dee22106c0ec579a4382fc38061ae50770c18847fa61174e37c3f29c1b6ed525a007513facc79cda62f6a56b7476974c4686e1069bf51921837f2876d2c2c8ee0a7493382f9e154a8aac6b0fb1b0f440dc8a66f81b5f97a0b428c0257d8edf096f715e1e0ac34329ebfc131853c5104840649a038a39af68f938a58cb0c586475c40c1a8ff6801946fb5e2db6ba1902a7f37793a87bacd68686ae86429e34c7c7bd55f6a1b6fdf80407997e8e3d498e9252ef70df73fb590e0b8b14abb30eb27469b0d7276dbbdd3883b67bef3fee323b7099e93169604bbce9b695b2289ee575c3e80e701ae5ee09d944024cf347327a0a7504fee0fc5514a22a44e59bd899989536c08e469a0289ab94bd81d8b72010bc8cc849d7b46a2352c814b20ce3a697609e30a2af38a8ac5c793b34b2962456a6d67dc0148014838db21aa82e5ea6b9dac48ca6a86d3dc270fa2098017b1f302e0ad60e12b8b8a1833d729ea747a0e6579f38f9ef3f3fb50c57b3e9b4bd2a509db3ab462f81fd9e66544bf984ac60eaefe1fbea6a68f5f2a3a68ded89e4d9bd9191aa9787e3f53f1de1278e436fe22546ac02f73fe3045d5ddaae09890eee2da6b06ef01182553813bef007105c77f3d857f336d0fd5a337d0584e9aaff74c1383d1c82f2ce24786f41e76b2c6f73cf462561648a87fc994cdd1dd10076b6cdedf3eb5d3fecd49a72cf053e78e50fe6170adf1f3bf04f3baa0d1628097697b46efe86f4a633d2082e708fa18930773e8d1076344391cd631ffd939e90f6caaaf5c02ce2b071342970f7f7c37870af56b08ce2e73720febfc674e9868c5c76f608e48f5e75b822c0859ea83799d1080e533f76e5d38c5df0d047bed44df8beadffdb1fdf0a6423bbf5351869d706182ac5b1ad78c0fc282d09bd0b9363f870c858ff4abb3cfd802de42b14b91a18c48006c413a378dc8c9f05cedc439e887dabcbb52db7f0baee47e95f3187f77aa4e64387911b24432015f945442c5914e17d3d789096d0c68ceebdd5d191410e7538ce53cc13030b1420d79df8a1852e176647dacedc10610e8348d31fbb06c83e7322e495a15a37f1db34f15d4388077761d587e9531b94fe5bc6bfb9ca36bcea01644525f4b0836c55bfa95fcf8fbc6ce7d77642e0948e4eb61ab4afbb3d766c8e92033047c79e7a0e6e7343ea0aabeabacbb58bc3e38c34a1e90b5a855e26f40c2dc872d6f97741cd54422081eeb9e2c59b1c884e993eafafb8e5f9cab7f4901f4c2f7ece17b3107f35316acbfffb5cbf004272c2f9d580b6df23663af10ab24b8ce4a6f2287abff12804c415353a48f38addd2265b307e0fdd776d848a3f6ed44b04af1df72f70fb9e9d49e54521ca4299efcec09c21e28769453ec9d8b9ffd05f3963faffc6b92f944ac35b751acb07ca78eb54f7f84b3201ff2b3c1168535d1249d10dbf15bf6c5df7dda9caf5f6e42490d4a623b06f059a24f96d9ffffb4fb9c8bdb95075c77b604ba863caaa7d233e81c717c2d4fcdc97a6158c3f028bb20d39dacd6891289a933786b032f34359827d6070349c39eddd74b2bccf1a9101c4abd5c6b333c8dfae003464fbf6da620ab4bd1809cb806f3ee4e4a9b266f86fd61151cbe066a1cead4b848ac1829f85df78122e3f4cdd81762cf4e33baf510d4be32aa9e2f794472bc9aaf2966800bb2f1c431bab4b3b458fd13c5de63e489c3201c2a6b2b8214f579c4cba7c49ec6eb06ae3ba821aeb6531b60620ec5d4c8ff347688ebdc44eeb4575d8a2c2498257cfa9f4a0f780f49d5aa804dd733a9ad2cbde1b633083985000de42c9c48e131f134001c2c8ae5ca9cc8f7ed4236edb396cb5acf9ea44c5694bdf515282807d38c8495f8e80dc64855032dce97140e34b760b94ca23d7f4d47990489abb5668d28ddb16eb2e7714716db2f38c787166663e171fbba726786dde3ab73ac3477c6689adfff05bb18e8f9e67ca6a20e5f73ea830a86d9c76213f199eb473651e4dd0e618f2e55a2e1dbb835d07c1012d1131880fbfdacdba5a4bf5ba17fe8e25691dc3d6a60d3617987d52854e09188b742d84a2f23c92ec199088b0522b17c903e4b8bb505ce46268d934506704af0d68389d2f38fb6d939921969c82061b491c4cd1650a61633d7a2d0fabb0caac75940f3b769c1d1bb7711da21ebd3a17bc2e25b09e047794ae9375c86d62cd0833635e23c35df8f238aafa461574c3f5edb174293a75481acccc2fae89a92a0c8150dc722c445f55390cf8d0148d52043d47adc4615f8bc36e09f5d3a4cc59020fb47b1b5fe9d500eee372684a5cbd816f558bf713be436c172b1292d8a8563abf97352f46675066232defda47cb95159e0936c06f486a419952b9e52e2af375f0d15a09c1e55a7783c8b1f3090d3ab5458793afe980f47606a737bfa776e7181f272ec9989d5941fef7477d86ea49fff3ee7fe141bbfc08135c58746c5904910f39d9f6098730c286311625b8db29864e9247b0b05d78484b14104e8a7fbdb56d566830fc0fec59f784a5f7b99e4632ac30c42b7f91476956fc01eedf7ca478605861277344b730b5fdea121428df16f4a113c9077de013de9ddcb14d356121417ca5bc91c8330d69b812a5872c6b738fd8208667cc3bdf49d767a1d5f1018d9e0f138bdfc58f0f5bbf0ad3156d90e8162ec7bb1c22b1845c97af01e71e7f2c5da8c140a30ca887318176f2e32a2ad7b7f8607e8fd5e72dcaa87e21b7303cd6f9ea7f41543a6b42356dcb492dc9e549dec35e361fac14d18cf43664e69686ab1babc6aacfa4281aef74867276e23a2f9486b0dcc989f80bcf8d96af48f10b2ff73296af8aae5772295275f628dfbf22dfdf1ff2e8efe25ee041b4732d7adc5697801a57708b2b33a3960aca66890de31f8b193ed60a4504f274d72b45c2b7d2a6dab4671ebc243483e685b2410a936e7c45111c77cf2919998f323b7919d7ec7e2c3f420202eb73adff3478335351aa3e8e4e0ac6f22b708897c7be5551d8e0089e14962284e8f3516679865f0f09bdbbc4bfb190575a3ea3d1877836e375c34b75518b191514e92f57dec576ab146cddd2d2fbb6ec2775546130009b0d36ac28936a8cc2ee2a2139c37992af0934791ea7aee1a0e0feda4c2a406f1587ccf4fd59debe20f5ac02b5fe5c81c0a417f501a7a2d96912113f4601065e1acd1cf9c7cab5f74319f01b38bf68dd7ade07a9382df206f7f5eff1c4e237a4201b55b0f439e9e1d8436765269134be81672f21de2b3003d7650232dbda55b1414da22d0a4d54b2db2f4b44fb39f25e158ec2aac026bcf6221ac43791db5bf10b459ca3a7563b1ba4a792af4bafb4eb16a29f267ec6ddefa07b4a3688bd4dbef7f109be00a6be4a1ab34c22f42e8e815c9c838511cdca94286aee3ef05355590204886a161deb32f647880f3c8de39ca015f96a655f3e5809f928f2870b082bfad7cc56e8838e63c4e9f9902d6606b72c0681c6854919d159fecd74f8a1654e84b097d38931338ea730f05a9a56fe56dda66fe223c515fbe0d17a099a640044a03fd0759ec2e745e6119a42c1bdf4e98945a5d3f1274944cc2b46bbc4b7e0200db7b40193b86e46416337255e8f2c656d066534735370088dec14f3595df61b5407134bcca5d6ffa8ff7ff1a6614dcc937b7d36b3ba291e3cd43b1ad291e93a5021beb9dc57d547a47a8ced8906d183d0ca687b83c748230b860572f10023e165f3f937a6991d4e7acbaeedcc9288b44805d428491ae595545fb83e97cc59d344146e2a60c634e8504d9f7125750596", 0x1000}], 0x7, &(0x7f000000bc00)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000004eda9c32f1e2331cf966000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x4000000}}, {{&(0x7f000000bd40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000d2c0)=[{&(0x7f000000bdc0)="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", 0x1000}, {&(0x7f000000cdc0)="044b655c095ccf37bd8c45278c536b4271186ab7890912df11b78a067a58898e4458a8c042a948ed075fede1933cefbd447c0ef75cba8c14716f4dfc50ebf7be553eda8db9682d0c011926c00119499b415574e95c1fdafae99be80c3bbc39d69dd4469b37fd1077301c933d4237986ee8a6533f8453c5e77754c4", 0x7b}, {&(0x7f000000ce40)="e19262de46b792aed57d09ea63a1fa01dd9c849bd5509dfd6b4b208fd07be6a333a2f056c9569eccc22c2239195a65f87bfa5e1f0fdd9458754e29a32527a916c7c67a78e237214f9243c1f328cd37a4f4b1262f92fe375f470980a491aea4a9ca3b106cb825c75932874f08076841480502917d4c027fe4091b626ba551c473c5e4ec866489d568bebccffc3fccd493c98d2511ca705ac6b892477d04b2346865316670f5242455d250d3ad40e975a1282e227a3d661f19f8d7ff6f0110962106316273573dca915c2383c2740266d30d991852e24063b7abc8a16d3719d515cba3bb632621a35745a5ac2c1e77a9be0bab4b", 0xf3}, {&(0x7f000000cf40)="01562c7fec195f23fb9c55877d050f48d08cf3ed542e37e1aa9d9ebe8477e757eb966012bbff9aa9feb320d00b7272adcbf8437c89ac2fb50484acb49783bddb885cce7e01d34f3aed574ed8bc23eec8a54bb2384ddeca3f3632d704e8bf3706443c5064744c3f34ed441bb5419021fbe88b8fd867be2ebe1c10819c2dc18ff75c81", 0x82}, {&(0x7f000000d000)="9354f699b9ac0916ce269d2f878cc30714382fc3763d4b23e97ad0772b13ab77337828e25086e59304a819d402b729066db692a27664a16d4c5df9fd0959acfc39d1e7d0b089a315be0de050219d8ec5c32493f10468153145798440281ec504ca0a3f029b4f12e57daeeb9d32ef6955e795c46c40583dbc251ab02ab637565c363398cf324c4f03f313422c4a4334dedafb", 0x92}, {&(0x7f000000d0c0)="599a048cfc6b025da1645da12b88cca25bf3fd5e04a1bf19a2612ce2bf9bc3474f62267f5ccfcca6f22c1871b96a723e5a4988de1ef4d999d3fe9a9411927285c6377e0f63731b6a32298d11fce13217c539e22f77c9b41ab95a4fd8ed3a35cbe19f5016e1bff954d6af67383a146250b271f2f6182ec31eaef68dacedbaef14b30b2826abbbf5a5d6b6662c3be2468b3cb7c305209c1f096ed49fa001b0ccd601ad152503e0781b0c38cd981c5a3b6cb1750d267224523090a8b504a21330d6b21b2062c08cc4593c00fa6a14e806b7e8559b95ce4fedfee4eec14497ded2cb297423afee09b255c536e6", 0xeb}, {&(0x7f000000d1c0)="2cd271beadb14a3e05fd060b039c20a83af8616fca4059325c252243a3dfeb9114651dbb0e5bc9c6fd5f802427d1a4925bda3b7446e09e67586be143cf63fb94b18eeb0ac64ca0ff26114b9f5936e962297de9a69b8860204a0618c017fab70d2ec80d433c8d5733ff0f588758c4f3a77fd0d649b0ca866260152d7559e981eced569cec12c3c4adb73cd05f5c97ee3f990e044af4afd2a18a919dafc9dde6da123ded702e17ee5107a8dd2394316b71151d8f2577fa0b64d86f6ee320ded4eef5e88b433d3721eb6b08", 0xca}], 0x7, &(0x7f000000d340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x8000}}, {{0x0, 0x0, &(0x7f000000d6c0)=[{&(0x7f000000d380)='\v>', 0x2}, {&(0x7f0000001240)="7a01aa5c213a6c792e58b1bc79ccc8c20c697fcba39cec3b409173df0b0aaa47485eaa0344d583f059c39b772ed821aa53f9b3e707c873dd957d7a4e0188e00aef1b2485ee31", 0x46}, {&(0x7f000000d440)="aaec20f1f5cc3b9a48d4372a642768d509cba830e0fccbb55e68a7d68dceb99476cdec9aafca8d6b8e3af69b13", 0x2d}, {&(0x7f000000d480)="886311d039f95a91a074b529844dc049dbc4d3a7b56b457c02775957198545333cb9c26b6e929053aa69e8d01501607df4588c2813a3ab3a5e8f3743da6f5960d8746b80918a0abc39d16b3591139d89da577254eec4c07e92c9bebc0e190ab9d688dc591ef61a3f41b75cac3111b9891d2efbd54fcbe0ed531c11cf29c4ea507fe808ef9503f495ea08836f4f15e0639bfbc6115fb38550e9d54afc22ea39503005c6e27cac41de18a14d64bff728a8f10681067d2ffd77d8065f07e7e8b4c60cdebcd9ef65e60390faad521cb17a947ed216e4cfd7cd09d30ae6c98510e372571f0fd0dfff7e915f7eba91c32f543a47c779597a1f01c9", 0xf8}, {&(0x7f000000d580)="43f63608b1f6e5982df4e226b28dd2ded687a4017c1644716c99fff6b911c59b87ce16a99b854f0bb3461dc4b15e4547bd53ae36d31f477f0e0c6eb9a29e49c21eba772add679af4158934eeb1531ea732fbe79e216d1cb0f9d8c58a1915c12a2f2939926e5f24073dda51", 0x6b}, {&(0x7f000000d600)="0723a83dfa076155c39aa01ecbad5710a114f39a70abc88d6723aba7f155728a02e6eeb604d7273df01620dee70a9c730d9cb5dbc12afef2c072c11dc48bf4becdf629d011e021dc7343fd0367184ad28c9849bbf861e5b1d03e1e234bd423fbfc42690222b491a6d6c704d8df793720d30ee0edf410be978a112c4a1652ceb4302c2035ff3f3c231398dc99a20be7102b21577dff6fe6ae26d28304c2676073bfae41c7e790cc4d6d1470", 0xab}], 0x6, &(0x7f0000001340)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002063e9322f17f506a79158910d44fc"], 0x70, 0x4040001}}, {{0x0, 0x0, &(0x7f000000d9c0)=[{&(0x7f000000d800)="a970a8abe8a3446ede432ec8794a055565156186de431ebe7d890542dbcbb6aab9cd61f31ea75a022e38ca5b75817f13ada58ee9043828400dcb6c2eed723479afc65d07cd75633fa4435ef5ce58abba5d9c70dfcf663ba4fe2c4e0b6e506f42eaf61489db8123895e8fe14ea5a861ed2f2d50b201394067d2c795297bae9daa0a4603d535a1c61a13c8f558c4f8b8510c4a15d11aadc31dc46039", 0x9b}, {&(0x7f000000d8c0)="9b7397762000fd13168b3f2634db39f6ca071821f27f0da1e08276891786f62403864381288506c82d4fcb20415f218ef76bf6ec86eae9ec68f02951b9c4268508bd3ee512da6dd12b6d95c2b3eb63574e8b99263b76ec51bca283172ca220d7553a142f196b3e057fd2aaf442a8fd30d2cc4ca2486e3502b905990e6d675be7aa2a5da2efb2abb5ef26e225c700493c217a4459eb2da175b7fb1622d23b063d0fe736584d7f3e76c22b26fc81700514b02490cfa444116ae971dc5a1f2020cd4b6c2d1fb9346bc425099b27fd60eb902ce285e8fa7ca12553b022a84bdaaf8a59322b4d509b87", 0xe7}], 0x2, 0x0, 0x0, 0x80}}], 0x7, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x9, 0x101, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001100)=0xa99) ptrace(0x10, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r2, r1, 0x80000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000640)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001180)={'pimreg\x00', @multicast}) sendmmsg$inet(r1, &(0x7f0000000680), 0x0, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r9, 0x6, 0x2}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYBLOB="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"], 0x1008) 7.028737275s ago: executing program 5 (id=1197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000200000000000008000000091104900000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x3, 0x204, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) 5.953137542s ago: executing program 5 (id=1200): r0 = socket(0x9, 0x2, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b", 0x48}], 0x1}, 0x0, 0x80840, 0x1}) (async) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0xffffffffffffff0b, 0x0}, 0x2141) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xffffffff}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}}, 0x0) (rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)=ANY=[@ANYBLOB="12010009000000ddea93d1e66cf5c31e5bdf9cd51f1dd9c4340000000109021200010000"], 0x0) (async) socket(0x27, 0x3, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) (async) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000580)=@usbdevfs_driver={0x59d8, 0x9bc5, &(0x7f0000000480)="542e8962c04c8c8dabd8e17cc934044b642ea00425bf3abac283e788949eb288ffc7209324af9597880a7a42cab85e7faf688e17b351e1b5559a4169244a2469f248ef6fceeecbc0b3a2f41537d54852363b3e20b8b68c2f94d23a705d2f39147a3531ee39759d56aa1cd52782806c3215"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @pic={0x3, 0xf3, 0x2, 0xa9, 0x3, 0xa9, 0x4a, 0x7, 0x78, 0x6, 0x80, 0x6, 0x8, 0x37, 0x0, 0x8d}}) (async) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000380)={0x8, 0x9}) (async) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 5.635047569s ago: executing program 5 (id=1201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r2, 0x9}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7ba0810000009a3c9a1004f700"/40], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10810}, 0xc000) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 5.545558941s ago: executing program 3 (id=1202): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000000000301b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.809684304s ago: executing program 0 (id=1203): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x45}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cd1848ad25"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "803e656753"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7be8abc36a3d17d27c308d3720"}]}, 0x60}, 0x1, 0x0, 0x0, 0xc010}, 0x40010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet_sctp(0x2, 0xeafea86208596ac7, 0x84) r3 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x20002) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000300)) ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x8, 0x5, {0x0}, {0xee00}, 0x8, 0x97}) move_pages(r4, 0x7, &(0x7f0000000400)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0xeef1, 0x440100) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x800) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000680)=0x6e) r6 = accept(r5, &(0x7f00000006c0)=@tipc=@id, &(0x7f0000000740)=0x80) socket$l2tp(0x2, 0x2, 0x73) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x800, 0xc4) mknodat(r7, &(0x7f00000007c0)='./file0\x00', 0x200, 0x73) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000800)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c004}, 0x20000040) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xe, 0x9, 0x5, 0x81, 0x3, 0x3e, 0x8947, 0x165, 0x38, 0x9e, 0xffff, 0x8, 0x20, 0x1, 0xc, 0x0, 0x100}, [{0x60000000, 0x3, 0x9, 0x3, 0xc00, 0x4a47, 0x9, 0xffffffff}], "e7063fbdbf3d10b2b040be3928723284af813345dbdd163be3576efc2dd32bee25163a8f2aee176629d191db9645f1b0999be805a60bfd96fce45a25c70454efcd896959ebc95cd6153a3a876a10583f8b6b1a444b", ['\x00', '\x00']}, 0x2ad) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000001140)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000000cc0)={0x420, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10, 0x4e}}}}, [@NL80211_ATTR_IE={0x245, 0x2a, [@measure_req={0x26, 0x19, {0xfc, 0x35, 0x7, "e14967e091f7e5e705223a0b2d2b3d90c436bb62a224"}}, @fast_bss_trans={0x37, 0x85, {0x6, 0x2, "35e7413bad1352e3dc8c3b5bf150f1f2", "ebb0b9cb1d13a0cdbdffca3475ef7eca4ac9dfb11394bd8042b77be8685cdc42", "b43663055073da790afb3350310ffdc9c8b8d0d889a1c18fdf91844f953558ee", [{0x4, 0x14, "308e8e17b3bac81c54ae33d2de2a384906276b4e"}, {0x4, 0x1b, "ca87c8f99f2e69531fd025a0cc3d33d8190e9246995b60bc36220b"}]}}, @measure_req={0x26, 0xc8, {0x1, 0xe, 0x0, "1ed9c2d021594cd9924ec0375bb25a9f4786314bfb76c47dd76cefafd2d130e0a30eb0c47d4a6085c25a693dc8baf776f39e6589177d4f4af3ee051c949d21c23fceecc2f578828727207dbd805441f28740d7dbc987bb85b224f4c7ccab62cf6564fa922a6e17cda91f9f1aa36cbb5917a72e00bfdaed5b5dce3e526a849c47214620d6064cf2c23c9128c2e489acd176c04d4026285701ed7bc0d1a51a7a148505de8962d0a660c2a77ed3a9411c8599a4246f4c21c44efbd546332edf84e05fbc57826c"}}, @random={0x88, 0xd3, "87836f2bd18a74b99501ee1ea6d594a400289f447f3e7bc78633c7a19bd8cf5258e5a71a4913fc660042c62f8baa5b394625e6588439d03c7eb6b0c28ab1fe1117cbc4e5bf661d3ea6ff5a531426283bc3f932508e2111b1fe05417d47ef5e3c4a25ef38e2c2f302f9c931c9b79ed932fb1e3f4b37ccaa551264f0905ffc1135fa0fa7a11be9343691a822292d288e4817cf7dc6f4fbd2c06e829bdcb3fe3d3725105d4e56f7d9addd016afec4b472dba69005040fabe93691d8cdcce448d80901c4fc3837b74fb3d35434770fc807c3b8fea1"}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x60}, @peer_mgmt={0x75, 0x6, {0x0, 0x97, @val=0x9, @void, @void}}]}, @NL80211_ATTR_IE={0xe7, 0x2a, [@challenge={0x10, 0x1, 0x8e}, @preq={0x82, 0x36, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0xf4, 0x9c, 0x91, @device_a, 0x2, @value=@device_b, 0x998, 0x9, 0x2, [{{0x1}, @device_a, 0x3}, {{}, @broadcast, 0x9}]}}, @random_vendor={0xdd, 0x15, "15e90b502d6f959c1814fe098858c751f155399b55"}, @challenge={0x10, 0x1, 0xf2}, @gcr_ga={0xbd, 0x6}, @fast_bss_trans={0x37, 0x84, {0x40, 0x2, "d52ad653d4d177c375360dc8e0695985", "8f9d00c8c16abf5097da714baf852f1edb33c122cba0585f70376aa7c67face8", "8e1c8dfb332a80deea61816a9a48cfb1bf2eaf3ad6dbf4d1f1f7640afa4bf8d5", [{0x2, 0x27, "71a133568646a96634e26c27d951c02677ca5e4a14a68cf67c78922e4c596b536a9d32009535aa"}, {0x4, 0x7, "91cd096283bd2d"}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xa5, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0x4, 0x1b}}, @tim={0x5, 0x49, {0x9d, 0xbe, 0x4, "97dc703e17cf0a6e6b6a6de4b0a2a2db4e57557c6284b5975c13f095d4bd0f4dc3dd363b205286a2f4e742a117b991dee1b4dd0c23337d80ad1a4628c2ee8eead21cbe56d957"}}, @mic={0x8c, 0x18, {0xb6c, "bea25129a101", @long="a7070e902d5ac7e20d981a103ee672b6"}}, @mic={0x8c, 0x18, {0x116, "fd1dff1986ac", @long="ca7899252f6532ba4bd92ea9c644b3d4"}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x0, 0x81, @broadcast, 0x73c, 0x7, 0x8}}, @challenge={0x10, 0x1, 0x4e}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001180), 0x20a900, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001440)={&(0x7f0000001240)=[0x0], &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f00000014c0)={&(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r14, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000017c0)={&(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[{}, {}, {}, {}, {}], &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0], 0x5, 0xa, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f00000018c0)={0x100, 0x8, &(0x7f0000001500)=[r11, r13, r13, r18, r11, r13, r14, r18], &(0x7f0000001540)=[0x3, 0x7, 0xaa, 0xfffffcdd, 0xfffffff7, 0xffff0001, 0xf27e3a, 0x77], &(0x7f0000001840)=[r15, r19, r17, r15, r16, r20, r12, r17, r17], &(0x7f0000001880)=[0x74b02966, 0x67522473, 0x3ff, 0x1, 0x10, 0x5, 0x0, 0x2], 0x0, 0x4}) 4.497856337s ago: executing program 0 (id=1204): syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010102000000401905b8a4400e0102030109021b0001010000000004001801972efded6e6bdb801000800847"], &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="050f05080087"]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async, rerun: 64) r1 = getpid() (async, rerun: 64) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2, 0x7, 0x0, 0x3, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x9, 0x2}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) ppoll(&(0x7f0000000040)=[{r8, 0x230}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8, 0x7, 0x0, 0x1, 0x5, 0x1, 0xfffffffffffffffc, 0x800000]}) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0xa15c, 0x404, 0x7, 0xffffffff}}) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="20094a0000004a32463b741f85ff7af3997361f66b2fcb2588bfd7a22826136e5c6654ff9f5a4d58b777080367d8b81b6066f51ca5a5791d33fa4411c059fb760d1059d9b197bc55aec59ccbe593aedf25653f7d0600000000000000d7f076b26d55310c5ef19331cb0b56b1d029c28b898cf021087a1c7adbcf1a6d51a492d7b1021947b0d71e894104f32ecc01a1c44dca679443353ab8dcdd6cb48e2539c3a45a03cb09756b83f2259b6b229a73240f929486222bcea49d68d440cf1765ad48d043ff16"], &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="a8f45c8447d15877f22d2d08762c3bd7003b302bb245"], &(0x7f00000003c0)={0x0, 0x21, 0xffffffffffffff5e, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x3db}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)=ANY=[@ANYBLOB="2001670000009ce62bd438f8222828f3fbd21c7da9b247fa62b25cb2a5ecf4f62d150c515aa8bf113b688df25d80dc2ef066d2c0d162ea8919e5b5f7b19678712580fca84954154840c1ec4c81bb47c3543967ab90af578a98752cfa5d3c1151ec07c6e84c89d9efe02cae7a383685392580ea9991f63eab834d13fe27"], &(0x7f0000000600)={0x20, 0x3, 0x1}}) (async) sendmmsg$inet(r10, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008804) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (rerun: 32) read(r7, &(0x7f0000000a00)=""/148, 0x94) (async) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 1', 0x7) 4.41018701s ago: executing program 2 (id=1205): r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x25b6, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x6}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x1000, @private0={0xfc, 0x0, '\x00', 0x80}, 0x8}], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) 3.519424587s ago: executing program 3 (id=1206): eventfd2(0x3, 0x80000) r0 = memfd_secret(0x80000) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000)={{0x0, 0x0, 0x80}}) syz_open_dev$evdev(&(0x7f0000002080), 0x6, 0xa000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000020c0), 0x4000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000002100)={{0xade, 0x7}, 0x100, './file0\x00'}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000002240)={0x7, 0x3, 0x4, 0x8, 0x0, {0x77359400}, {0x1, 0x0, 0xa3, 0xb0, 0xb, 0xa, "59ddb599"}, 0x40000000, 0x4, {0xffffffffffffffff}}) syz_emit_ethernet(0xbd, &(0x7f00000022c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0xff}}, {@llc_tr={0x11, {@snap={0xab, 0x1, "90", "b2f256", 0xdada, "64d154f5e54b60757cf04da7c973e8895e6e492ca3d9f7d7f1e531b6a729dbeccfaa1fd356042bee963d912cceaa8b207beb386da9fbbdc27d7e2d304602fea330635784818128c38ff67c2b957611076a19a1b2ef509f191c3dfb1a8bbfd0851e1cddc1587ade4affb906436ed74ef6c5170763a8a72b378d03c2d4cd27f4d4fef694bf57221a05000204f168454f0f5f4f3b3a1f632e2e7a2850cddfe1f2"}}}}}, &(0x7f0000002380)={0x1, 0x2, [0x813, 0x295, 0xfe2, 0xf70]}) r4 = geteuid() lstat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000023c0), &(0x7f0000002400)='./file0\x00', 0x0, &(0x7f0000002500)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}, 0x0, 0x0, &(0x7f0000002600)="ae99a57dd7315ad804753c98d8166f3ca4f743ff23cf36d023434325d63ab03ae8818017f5bea01ed8a4a200821204425ed1372de543a5685ba63c840c695b80d49fde8caca3ef90db6e791d8cb5366a7f4a7f2bc634a0f35c039d6092306658434a1e31cbf3390661839f0186ca7be3f40d1c62331b14f4bc07abfb54c17406e52e46fc8442a416747173dd8ea39ba7105292f9f2a4e9908d09cab833285d869af334a467523b6bef7d9f276d4ea1a6726853808dcad1f5a5a7e8b9c1b390299ac86fe462af2a9307a85c4d3d417846c28c471a5f21c833") r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000002700)=0xb, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000002740)=[@in6={0xa, 0x4e23, 0x101, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x8, @remote, 0x7ff}, @in6={0xa, 0x4e21, 0x3984, @loopback, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x7, @remote, 0x1}], 0x90) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0xe333000) r8 = openat(r1, &(0x7f0000002800)='./file0\x00', 0x101842, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r8, 0xc20d0000) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000002840)=0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002880)={'veth1_macvtap\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r1, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000004900)={0x110, 0x0, r9, [{0x4, 0x9c, 0x8, 0x4, 'rootmode'}, {0x5, 0x89, 0x8, 0x5, '\xbe\\\\&[\'\\-'}, {0x3, 0x7, 0x5, 0x2, 'audit'}, {0x1, 0x6, 0x1, 0x6, '+'}, {0x2, 0x9, 0x1, 0x8000, ']'}, {0x4, 0x7fff, 0x0, 0xb}, {0x1, 0x7d, 0xa, 0x2, '/dev/vcsa\x00'}, {0x5, 0x3, 0x2, 0x0, 'fd'}]}, 0x110) r12 = openat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0\x00', 0x2, 0x11) sendmsg$kcm(r12, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="5884d3efb9c0572b253f9387965995f9a285ac49f2", 0x15}], 0x2}, 0x80) fsetxattr$system_posix_acl(r3, &(0x7f0000005b40)='system.posix_acl_default\x00', &(0x7f0000005b80)={{}, {0x1, 0x2}, [{0x2, 0x2, r5}, {0x2, 0x0, r4}, {0x2, 0x4, r10}, {0x2, 0x2, r5}, {0x2, 0x0, 0xee01}], {0x4, 0x8}, [{0x8, 0x4, r6}, {0x8, 0x2, r11}, {0x8, 0x2, r11}, {0x8, 0x4, r6}, {0x8, 0x4, r6}, {0x8, 0x3, r6}]}, 0x7c, 0x2) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000005e80)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005c80)={0x19c, r13, 0x10, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xeb4a}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7fff}, {0x8, 0xb, 0x10000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x48}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xd}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffe00}, {0x6, 0x16, 0x6d}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf79a}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x840}, 0xc000) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000005ec0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r8, 0x40086424, &(0x7f0000005f00)={r14, 0x3}) 3.297965988s ago: executing program 3 (id=1207): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="004100e8ffffffff1b002b8008000100", @ANYRES32, @ANYBLOB="0800030019"], 0x3c}}, 0x0) r4 = creat(&(0x7f0000000d00)='./file0\x00', 0x40) syz_io_uring_setup(0x133a, &(0x7f0000000e40)={0x0, 0x9957, 0x20, 0x1, 0x3da, 0x0, r4}, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000001c0)=0x1, 0x4) 3.232857617s ago: executing program 5 (id=1208): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x2, "cfba6f7f0b803e8458532a9acb16626589f1f968711b54fafe3a7353193e64fb", 0xffffffffffffffff}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x27) r4 = epoll_create(0x10000e9) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = fcntl$dupfd(r1, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f00000001c0)={0xe000001b}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120000000000000904000000ff"], 0x0) poll(&(0x7f0000000200), 0x0, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @mcast2, 0x7}, 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e1f, 0x80010003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r11, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x40}) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x400c4) sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x8e0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.905299732s ago: executing program 0 (id=1209): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3a5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200101000000001fc8b19a6daf122cc2532a362e400c4f0e1dd5ed2df4cc"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.649981052s ago: executing program 2 (id=1210): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @start={0x80}}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff3, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0xa0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "18a6a9c0"}]}}, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@delchain={0xb4, 0x65, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {0xffe0, 0x4}, {0xb, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0x78, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xf}}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x9, 0x0, 0x7fffffff}, {0x401, 0xb2, 0x4, 0x5}, {0xfff, 0x3, 0xf8, 0x6}, {0xc3ff, 0x9, 0x2, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x7}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x9}}]}}, @TCA_RATE={0x6, 0x5, {0x56, 0x8}}]}, 0xb4}}, 0x4000) 2.43728702s ago: executing program 1 (id=1212): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x25, 0x7f, 0xfffffffd}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) pselect6(0x40, &(0x7f0000000800)={0xd, 0x1, 0x8, 0x9, 0x8, 0x2cc, 0x0, 0xac83}, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket(0x18, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) ioctl$FS_IOC_GETFLAGS(r10, 0x80047453, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0xffff}}, './file0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0x1, 0x0, 0x1, 0xf6}, &(0x7f0000000180)=0x20) 2.33522613s ago: executing program 3 (id=1213): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="002730050000003e961d3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.473925121s ago: executing program 1 (id=1214): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x0, 0x2}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1000, 0x2, {0x0}, 0x10000003}) 1.241687494s ago: executing program 1 (id=1215): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x9f, 0x4, 0x40, 0xfd, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x80000, [0x4, 0xfffffde]}}) (fail_nth: 4) 883.343527ms ago: executing program 1 (id=1216): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) 741.802738ms ago: executing program 1 (id=1217): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f00000001c0)=@ethtool_cmd={0x30, 0x9f, 0x4, 0x40, 0xfd, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x80000, [0x4, 0xfffffde]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="1700000002", 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x40, 0x101, 0x2, 0x55, 0x1]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0xc010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3040288}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x24}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x1, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x40, 0x8, 0xcd5, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x1, 0x7, 0xa8, 0x9, {{0x1c, 0x4, 0x1, 0x20, 0x70, 0x66, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback, {[@noop, @end, @timestamp_addr={0x44, 0x34, 0x21, 0x1, 0xe, [{@remote, 0x7}, {@multicast2, 0xaae2}, {@multicast2, 0x7fff}, {@remote, 0x3}, {@private=0xa010100, 0xaa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}, @rr={0x7, 0x7, 0xd0, [@dev={0xac, 0x14, 0x14, 0xd}]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0xd, [{@local, 0x3}, {@remote, 0xf6aadf4}, {@multicast2, 0x1}]}]}}}}}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x902d4d8680f0c7f, r9, 0x1, 0x4, 0x6, @remote}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x4c}}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000008c0)={'tunl0\x00', 0x0}) sendto$packet(r12, &(0x7f00000000c0)='?', 0x5cc, 0x0, &(0x7f0000000540)={0x11, 0xb, r13, 0x1, 0xfd, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000680)={@initdev, @multicast1}, &(0x7f00000006c0)=0xc) 563.949401ms ago: executing program 2 (id=1218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4080) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) poll(&(0x7f0000000140)=[{r2, 0x208}, {0xffffffffffffffff, 0x2002}, {r2, 0x440}, {r0, 0x4020}, {0xffffffffffffffff, 0x420}], 0x5, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a00)={0x0, &(0x7f0000000200)=[@code={0x1, 0x47, {"c4e1fd5188fdffffff0f06c4a3355f560c528fc800cd0039470f0130b8010000000f01d93e660fdef00fc71a0f019adae400000f01c2"}}, @uexit={0x0, 0x18, 0xec1a}, @code={0x1, 0x65, {"450f0021b9800000c00f3235000100000f3066baf80cb818384787ef66bafc0cedc401295977180f00ded89e0a000000460f013666ba4300b8e1000000ef0f38f9770db97f0b0000b847493931baba459a5e0f30"}}, @code={0x1, 0x88, {"c4c2a5a8068f6818a2510f00c4c17fe6922a00000036f3430f38f609c74424008a000000c744240204000000ff1c2466bad104b806000000ef48b810000000008000000f23c00f21f83501000c000f23f866baf80cb812012681ef66bafc0cec410f2354c74424008e000000c744240200000100ff1c24"}}, @uexit={0x0, 0x18, 0x10000}, @code={0x1, 0x55, {"0fc72c34660f3881230f3065363e36470f01c3c4e17f12da450f32c744240007000000c74424023b8f0000c7442406000000000f011c24b9020400000f3244d9ff450f08"}}, @code={0x1, 0x50, {"f30f09410f01d1670f001483470f22c366ba610066b8feff66ef440f20c03502000000440f22c00fc798c7d10000d9edc42181fa0866460f388289ac000000"}}, @code={0x1, 0x71, {"66baf80cb896c80781ef66bafc0cec470f08410f01c4b9780b00000f328f4978952348b861970000000000000f23d00f21f8350000000b0f23f8b9800000c00f3235008000000f3036460f01bf6bac3b84c4219d62b10d0000003ef30f594509"}}, @code={0x1, 0x68, {"c442fd3128410f3026460f0175060fc77796460f01c8660fdadd0f20d835080000000f22d866baf80cb8cce8dd82ef66bafc0c66b8000066efc461d971d00748b847600000000000000f23c80f21f835040040000f23f8"}}, @code={0x1, 0x4b, {"0f522066410fc7360f01cf660fc7b5b4fe7fab66ba420066ed0f015a0b3eff8800080000b91d0900000f323e4d0fc7a884c30000642e0fc73409"}}, @code={0x1, 0x6a, {"0f21ed0f072e3e4a0fc75a0d460f35b9c60a0000b800000100ba000000000f30c4e2d192748c6248b807000000000000000f23d80f21f835800000e00f23f866b85c008ee866450f380339b9800000c00f3235000100000f30"}}, @code={0x1, 0x40, {"0f01c366b8c4000f00d83e0f01c9b9680300000f3243dbd566410f380a70200f01ca0f01cb64f3440f5e12430fc71e"}}, @code={0x1, 0x6e, {"c4422d39dc0fc71867650fc735e62d0000262e0fc78d7f000000c74424006d000000c74424020f000000ff1c2448b804000000000000000f23d80f21f835800000100f23f8650f22c5c4617de642bf66440f38236476cb646436660f06"}}, @code={0x1, 0x73, {"67360f01c90fc7aa0000000066b86b008ec066baf80cb89e106985ef66bafc0c66b8660066ef66b873008ee8360fc75a3fc4e3551891745800008066b8f4008ee8f2450f01dfc74424000e000000c744240279ba0000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x6c, {"660f1106660f38806601c48215a946c566470f3a624e0d98410f212b0f0748b800700000000000000f23d00f21f835000000020f23f8c421085f978fe12807b9800000c00f3235004000000f30b9800000c00f3235000800000f30"}}, @code={0x1, 0x73, {"440f01f88fe978e3ffc744240000800000c7442402d15965c7c7442406000000000f011c24660f38800fc7442400c691863ac744240259830000c7442406000000000f011424660f3583bffffffffff464400f01b307980000c4a2a5a8de440f2083"}}, @code={0x1, 0x59, {"e3006442306538b93c080000b800380000ba000000000f30b9800000c00f3235000100000f308f49900270e166bad10466b8684066ef36672e470f01cb440f01c3c4e259dff70f06"}}, @code={0x1, 0x5e, {"43def544c04200d166b85a008ed00fc79a00080000642e0f01ca65420f0f53be0c410f32b978020000b88cab0000ba000000000f30c7442400b2000000c744240200700000ff1c2466ba4200ec"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x55, {"66baf80cb8d5e4c68fef66bafc0cb0c2ee66b8f9008ed8450f06470f005f000f0096bf0000003e4e0fc76e07b9800000c00f3235001000000f300f2012f4c4c3e920e500"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x77, {"0f38f65fa0b8010000000f01c1b9390900000f32c74424003c010000c74424020c000000ff1c24c481fc5ae36564653e0fc7338fe91002f7c46241a896e86c0000660f3882a663000000c744240018000000c744240200600000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x55}], 0x7c2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000a40)=@gcm_128={{0x303}, "bcf64e471e4b818d", "148cd9853b71c88985ccc448a60d6063", "7ed47ff0", "5e2418a1c6c5a8f6"}, 0x28) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000a80)=0x1, 0x4) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000ac0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa76fdd67f2c305c9, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{0x3, 0x2, 0xa, 0x5}, {0x1ff, 0x80, 0x5, 0x7}, {0xfffb, 0x78, 0x7, 0xf5a9}]}) (async) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000bc0)={0xffffffffffffffff, 0x1, 0x1000000, 0x8000}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f0000000c00)='rng\x00') (async) r7 = fanotify_init(0x4, 0x40000) fanotify_mark(r7, 0x1, 0x40000000, r4, &(0x7f0000000c40)='./file0\x00') (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'vlan1\x00'}) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000cc0)='.log\x00', 0x80, 0x0) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000d00)=""/249) (async) write$midi(r8, &(0x7f0000000e00)="44140b6912f51e028a10d348597554af1e2c352e4c380c081af9918c27b76254d3a429d63a9497341dcf70f67a7e8033bbd4ae31c1bb5f4269537d", 0x3b) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "43134e3ef60d459a3215ec1124305c0ba78a9d33"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000f80)={'veth0_to_team\x00', {0x2, 0x0, @loopback}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40044) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8744}]}, 0x24}, 0x1, 0x0, 0x0, 0x626feb9c3e405ca2}, 0x4000) r10 = dup2(r2, r7) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000002200)={{0x0, 0x3, 0xa2f, 0xc, 0x6e1, 0xfffffffffffffffd, 0xbe6, 0x1, 0xa, 0x360, 0x2, 0x38000000000, 0x8, 0x2, 0x8}}) 448.592163ms ago: executing program 1 (id=1219): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) r2 = syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 385.721023ms ago: executing program 2 (id=1220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0xdff9, 0x800, 0x1000, 0x0, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r2, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000010000000be2e510f0000000c00018008000100", @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 40.252192ms ago: executing program 5 (id=1221): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3e, 0x107, 0xfffffffe, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f0000000000000000000000000000000000140020000000000000000000000000200000000106001b004e"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x78, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x0, 0xb}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 3 (id=1222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x9, 0x4, 0x4, 0x2c, 0x0, 0x9}, 0x9c) r1 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0xc800) listen(r0, 0x2) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "45c26dec586345dcab8a762eda755704177bedcca8118feef985d5a8c0922be34e4577b4fb78c5a0242d11692e7e7c620eec1c18eab7d3c6f7eacce6950ccdd1", 0x27}, 0x48, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, &(0x7f00000002c0)='.request_key_auth\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'ip_vti0\x00', r3, 0x10, 0x8, 0x5, 0x4898, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, {[@timestamp_prespec={0x44, 0xc, 0x77, 0x3, 0x5, [{@private=0xa010101, 0x16f7}]}, @generic={0x86, 0xa, "fae343be6f816b8b"}, @noop, @timestamp={0x44, 0x18, 0x74, 0x0, 0x7, [0x0, 0x5, 0xc, 0xd7, 0xe74e]}, @lsrr={0x83, 0x7, 0xbb, [@private=0xa010102]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x810c0009}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@gettfilter={0x54, 0x2e, 0x404, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {0x4, 0xa}, {0xb, 0xf}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x80000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2000c050) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000800)={0x0, 0xfffffffeffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) epoll_create(0x0) listen(r7, 0x10000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000880)={0x0, 0x4c5, 0x1, 0x1, 0x1, 0xfffffffb}, &(0x7f00000008c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000900)={r8, 0xfff7}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000940)={0x1, 0x0, [{0xa22, 0x0, 0x7fffffffffffffff}]}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f00000032c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003280)={&(0x7f00000009c0)={0x289c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x180, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_SRF={0x168, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0x3c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3ac, 0xd, 0x0, 0x1, [{0xb1, 0x0, "1bfbc16a5dcce2cfa57a60da25de8f8b06594accc13404fd725eb2579e7e9455a4e9275a0de83bd9b27156adbd6b14eff8333cfa32fc8aecbe629f5ebfbb1bdf1cec5c5915c9b0aa7b2d8bee67d57263703696f6df6efd05c714a933b0f550f07c162bc8cd083b5b40357f365876a62bde7b5cfb3c55c04ff5e2ef31ee46b1910694f5fafe188c3173340e9e23cb65180d5257cd3ac17a6b8df9983913cedb4d32586a85cfac3a9fb8162b76d3"}, {0x82, 0x0, "dcd1dc9f7027ccf378d2c86955821d674d581bdebf74c2c114139c65676de012cd91a158226f4e20a2cd655cf1714a25a172044e4416deef576e73db00f7c5709b256bf255fd79abde9414896014d179dc3f4a6a2fc649aca6d59cfcfa1f02d193d092bc0913b5dbde014c393874ed706303c52725a86f66c0e384c7b33c"}, {0x4}, {0x67, 0x0, "28f7c78fa76e9565b2c65c1a3ee0d7d4ff781a01b318ac4b1de5e8c302d3ad1dd71075231af3066a0126be9a5753299fc0b2dfd28182b77e58ad8597b046e9fb272cb95d91329e5966b11ddb964db14c59fb8f3d6085b27955fcefb52d84d020fedc56"}, {0x1e, 0x0, "3d96c8846e9e70ed37e31fcb5100d8bccb481c6fdcceb2a46b78"}, {0xd2, 0x0, "8e260258b622637400b6ae4bf24fdaf2f20f85e7daaea83aadf81b7d675ab9083ce114b3c384f5dfa2c8ec938583c2a97183dbb3f633f642f3302b56cc71c9dd27662cb20c9d013f268b2dfae4eb08e413876ab4c2f1df5cdea805497586039b2bcf9bbf9c370c06f4e81cb6fa2c718538d428b07dc926ef3eee155685c66e3043dd6342865c5e55a581615d29f4303106f505df47219dccae01fc6ef7afcf146eb57bb1ca93a74d0ef7fdee05af204d5037c25ac298cab2dbf65e317327256cded96696c17162b740a9e497ce4c"}, {0x9d, 0x0, "aea8c754af50ab18b7aa1c7d710fd26bc6a060a9b15b0f65b2c8e65924fc111c05c58a36b31921e8d96fbbcd170385985058cb1d0432dbc3ef90fe7cb22a896357180517456432a4f4fd83566ee8ed0e9d740b22dd494c1ce7e380670b60091bd62d2e12ef78dbdcba6fd2b61b14f75387ee95eb0c6d6a033736de4f47b9f942cc233369f5b8f953974f670870326ca2487337b4a070f2456b"}, {0x6d, 0x0, "bd71f4e20b852da8c24d78a76c779726abd976f493a81647ac62f0567d8bdecb6948569884d60a333a95ebbe3dc6a90e45406f0f0e6b4973849ef86816b2a0a73e4837bade48822b0f443627799d91b054fce9806a083072bf7b26e4af442902a53ced152bfac6e038"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0x232c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2324, 0xd, 0x0, 0x1, [{0x26, 0x0, "cfb75d19b3d573cc00ba5bf2734c70b10a30019fb4192b5e952080c29cd518dca73e"}, {0xa3, 0x0, "60c1e2558336cfc4e4ddc3cbf8dc43db25a29fd0d1e58248f6d1a045cc9eff265cfba70b6fab72e65c14c364bd489078e554d6d56cacde6ebb51f8ee86a76aab664546e72959fa7fb7537df71b7161998c70adc56aeba3f87e703478d7eb28f59455d2fc6a15e91b025ecfaaebd59c4673022e621f5ab344f81b54f399c4fd95613579d6c621d93078f90361ee6a49f278cd137f6cb1de7043fee56fc7e43d"}, {0x67, 0x0, "98fed666d8047ab3a75a461f871501ec53e0880765e7c3497380a047419599686f6fe8e51e81f7d48b554e2aab37bcc939d7377e0ba585c26fc11bbe865a8938ec093dfbe87d914f27cc8fccd2fd73e1805e5225d647cca16357f4c210f5646d0b2877"}, {0xa, 0x0, "4215070fb817"}, {0x49, 0x0, "a22fab7d2474aa375240d76a862af5e19465fc972b7b7fb8210e356a62d986aff77fad6d8e82c17a6b3bd5e5d4511fd767d1126afe06cb0c9c4f5a42ca3d9842e88d55c889"}, {0x1004, 0x0, "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"}, {0x1004, 0x0, "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"}, {0xa7, 0x0, "f95e22fa6ba64624d41a7053e9fdc3bdc93bda32807622b2b93fbef75c8602f0d62b0b14f4e2df704d8f022cb6aa310c2d0f763c8bdc1bad03de4bf810dddb06827d0f003dd545e5dc6a269ace512012720c4c650443fab9cb8dda5d45e2481bc4716362cdc2954f65695c599445ba0a46dca2024a61cd6d8fdb6cca3e1168753ff94ddebd75a2e11f54a8a0d98454937c36495ec35f9aff4465b0c5ffdfe86e8f21cb"}, {0xcd, 0x0, "ed4f19c986fd9c813a8667ba12ab7430966506a62cfd247eac1989a47f372c592fca7bb5ed0d47e9689df07bafaeb916b273df8be07477284d90b4f7d8eb281dd8096c9693de9f137ad9170b6c80d3d964ab7f3ac6d2236154106c8018e2df410393905a6cdd509322b1445e68a6e765f322420f45fe9398b861343daa639913d79f0b9c7649b37dbd913689ed2b71002cc91172777eeb08851210a7207c66d8d50f094bdc7f88dba8f2e9db937c726dfcea42249d259827c9b878b9e87a46e08d0f608922e5248cb8"}, {0x12, 0x0, "ee09d571cfb8a51c3df41302ec72"}]}]}]}, 0x289c}, 0x1, 0x0, 0x0, 0x24000085}, 0x81) connect$pppl2tp(r0, &(0x7f0000003300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x0, 0x2, 0x4}}, 0x26) fsopen(&(0x7f0000003340)='incremental-fs\x00', 0x0) sendfile(r7, r0, &(0x7f0000003380)=0x2, 0x9) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000033c0), 0x2000, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000049c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004980)={&(0x7f0000003440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSET={0x1338, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x1214, 0x12, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x44, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6c}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x40}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x21}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x1098, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x108c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x40, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6, 0x1, "4cdf"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CMP_DATA={0x1008, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "f9ff0d70782e8d654d23ca1c4ed99dbdb4ae889ec4497d9ab406692733d3f6ea04658db0f462a2d8ae346b05ab19f3cf6f0cf9749e4b147c32a4cc39efc53335e4e43bd5b12e3908e9da3f9a80e9ad4a2405dc6fa3777f6dbbaceb7c78e369edb8fa68266618ff15c941ea8eac2604f1eb302e0dc8999c46aa96a939efeb0f2cc47e9be03fcc05436cda2405f0f6f1221b18a599a87738bc0e27bae3a383afa8144b27dcd34c73bc7375886ff756a5fdfaaa4d90a6d15ebe566b23b73a2ac8d44a3b84561141e481d34900b807ef2af03dcf5737c41d44c3196646c3a3ab073239e000328a73f0df15294756917ba612f5f4c2d22a40f3eddaf5c9ecd1d79e133b5b94c693d539cfdef9141023285766b97b3ad85dcdb0670694ab385a7afbfea016112c88bd7989c7b426b52df1e31bc0ff1d51754ed6e957eacc43a3317bcbf8da0f84b216993b667b9edd770536579b61728ed09a0aefd61be6f49a180434090a506b04c4e4a549d37f36507dc342c2b98a385f2fd929ab5e1e4cdc60581cd85ce207150787254d9f80da23c5d4e224a086c4a85e5f3ff5a292444b8ea7b7bb5aa0f1edf4e79f3815e0a0bcd7018ca363b64246a3e741a20d03c2170d1600f6017e59725316e6a170c2375ce4523a94411932c485985c2e3275c9392546f292e1efbfa4056a1947ead52d7dbf000a0a979bbbc1293a2746a891db3d18a903ba5e00f91d34126e0392b1ca6864d81573c778b65ec2791f81cdd2b9bb5b2aa446ffafb802b3ca1aa69afc76b5dda5b1f73bdaa80d1e1944a8cc53529daaf8a5be548b0b9e27d4bc3203f0768eb836caaba65723b5100a4e3b26d2a139919b3057a8d2ebbc5dff5713a13834cd37d6b8e292a814b4825f99abb3fab30a4767c8a8506a7e9b0107875e1764ca65d02fc728d1d080522a83baca19d870a056fbb8c65f7637f3e1664919353d132df9d8ccbd97ca44686d62a34c2391588426c5b9870b891c5b45b9b0838d9bb0e91bff0130250f46f30e9ac07d4aa9b1236c1116b9302158ffcac90537523766c02a47610b387b9837dcc1794101ce79b12c67145631736e0834e5ae9cce178831e316a4ae07efa6cb7bf368d9264aebf530392251f71d8af742444d688286d9a8e54c67739d3774d64776e481ed5da021bc0fdf91f86d641bfefd2f6df022e5ce44bded9a8026b54b9215aeb2fbf0c14e2ccc7125406debf9eedfe9484f36f5c991f854ac91812fb96dc505ebbfd992afc93576cff4be31d12e0b274dd16828a4ed6228c7c5a1dfcd71eb5f722a5a08fce19b28a238558396ec65e93568f65075d7ad961a39ed46d2fed03d650029d72c322de1d60d02ce084d12ac76cb5ae1d5486887731143e94b346e650fa1d977104137d75e122c244e7a34e75ffe25cc77f74e35b73ff5c9b75f09bfa7c99683f467e202bcab2a698c1e7cf98e21a28a50b2b90a770c74b912ef7688bba0912f9648e30da62c6161fae16294d99c5da7d0476acd646b2ae2108f9e727fde4cbfffefd8df49635cdb794060bece561adb5f22c71a762db32f8d562544d7fecb60fd7848774c9b7a43ea5e00184164c5582526423f389df6cbae730e61b61a08f151f4353e545c4984e383876c9fe8358e6f547a2db1a99ccc50eb72b4f3a02406d39d93207c53d14007a22e1d6262a1e9c032ab46cff95b0b93a13ba110080a30e11108053fec24a9a4d256e4de9d35f60e02ea10747f22b75167e6bd5f707f64293d1011d8dd90deea53bccd7c736c3e4740095fa92f937e4ed235fe01386ec62373b015952e77e9ab1ea823f4e4dcc47dcc349f9987ef93d6efc1c81d207926b0156c40160128cffecb9ff91556507a4a954a1432b573547094a2dfdf824e8013e25d23fe85c429acda94d6c5b7440cea4651e317c4fc93b73bbaa2bf9cd0cc08c7361d4ce99bbb647304c212ef86fd43141df67f3b4145bfddc7da3e8b50ba895e4994375628ed0df2c077e33cf4b1d79d5ca9dc8bd120cb5a670859fd88574b7f330c251f0db8ca4d1bdfa51585f24a908a2da1a2081dd21c50e0195223f0168da4d1873ce555fa738b84f046fed4c1d966b496c11cde1669d742a3b82fe4bf4478b90433b0f4e55d8f348fc79923518b65d8d67abd5e50d6b22ef7d77c6820e368ab98ffb3296bb4bb6b67f888e49ed10aca4e827449e77b5b0d231dbb09f6abae0aad9c56f8e0e89b379477024f6f199ddf525aea74036d31af9beece60bb826da8275fdac2cfa47c01dd054fc57862181563f44f7b89b6993c9f5c3b3974cc480d8f412d89b2343449c36127217ec1d2ad29c0a3aeaadbfbbf62a31f1c452721c323e19d3b272172a0769b332002f42cadff6238387cac6540552ffbf3a0b07da50d38664b602c18365f74d8e8791299aa39d94f9b0ef091f3dd7076836a9208d7c91be6f37bd3349244deaa491658ccdd6e7d0793c809d5419ff9384fc8f618ba11e045ff629ed6772ad9479f393a722a63a1ff00e0581282d4b3cd6cc0e4ace22ca8bac5007ef4159099c03c9bcc2a37a5f30b47cba655cc7472286af5a6d64ab6732c191b3d603aab5813ca0be1bb238acf53a760c7a6faa813db2b8c7f2a76bde239d5c7bf3aad23072d16a0c4e216d8bade289405a37d3a4bcc72382878ad43daddfa9a31d98e207c20b906a86ce2947ed4047873fc51693d88d836eb02e8af518fa1794ad41016b31e69b28f3c547997360dd0c9005222c41c47035f182b33c48ce51211822bf89a3be53af193946a09cc1e861bced7d33040e1afb02fe693d495b40e13b3a4e3646dba97878988130a61a5d142ad731d949933a860ed0334976b15868880b87e93ab10ed25a0f445e2001159caa72f75b331931e6d46984a705aca4efc37b79859a617fd4b124e8535c58de1505f0d67b489d6c9409db1748a4806ba562a46127246ea445b5b6c0bd2524383f37f03f3db3dd30f849bc0563ac43904effb36c242372cb7f25801f07b408aac7aee32849f704ef909707a158be349dd50710b76c3306a4343f2c72fb823c576f63ffdabdc851764b5b3197eeb77b5ed13ab90c96b8df7f2d4ca544299c6930fabfa70ffe513d9ec1f3863b4535905b24ccbde57718a94aa1b747b1f833f159bac4d228734d4b0b282ff23d598927e52bb659239fb51bfa2815e59a637833f8f0ad316470281b3e2b84bac69b04688c643e2240e51b59b27d50dec656ccfe8c2ecc8d6e87a874bc06acaad2dac2e613d710007a44e9baba5b8177f72990b69bbe0ef15280edc11aa0523db6a6b28406016e2a3ec12fea02e961e0c2f7c1e110f9098c9404bc20fe15c166d4d51d2b4e2596baadc3b7a760d81aefe62563ba4911671d0ea8faef81164d584aaab404008a08f7ecc45dc0c1a2341156e21d2aff0331ce57d9f2d2511198da93b5bd13f02d630eb55bfa790f91fd83de9d192d77d930e54a4a49719771d4b88367c6f8d5349581d772dfbb49ece36111d927bed0b56c9052923e4c3bc22c8b755fd7eda46753a6e9fa8eddb581e6594a1aa9c0af24f0dcecfc1d388aaa46a0dab36d8fd8a641beac9666c34421e0dc443a0be1651c79604e92b98b8fb3f0141b0f152e2f94517c1712460c23d54ff35b7f9cab47c0b49d437e52f4a5bd59fab54074d1a7d6f84d27a95c97499338e36e6cb11f9820e8900388646a7001b9a52a39a91a5999049165deb5caf3481515b4f4d632b7e8989e05d0ece99e3531af96fbd218aa0c9ce0a2a91a7ac4424b25ab96f39229168adf733561ba64cb8d4b59fb7278d051a792f57c38971816c86997c8d9f553382da24c69393b61595e02f78ad0a96c679cad096dbd14e0cd01f3c0477061b08417cddbce87bf5be0e494c9d01dc583d7c6140c85a8e2806aeeaf76f79c2f4d08672e64a24c051900c37e37f195f891e9ee0d63a5cb9c65c75f9ada771cae8a884d41acfdd3f58537b81c1179da671621ca5ed7673bf42d470ba20c4f006ed8f47689ff546d412443c77d4cd49781d6fe29d82cf89a4d2ccb92f45e2d747dd255085ccd5fb49ab2de4dff8e72c53d73d65339852ed216d7d0e0800be7382549162673191e5371c1aff2f7e077daea09d7f912d2ff8b97452fbd38c927b26dc6a90dff61906a252b267ff1cc5e2b09a38740c9a0931f64a3c6ac40431bec8361d9ee3ba7a19d36bce97d9d3eb4e4181ae9e2db65f4009a038c4934286b4529cad3849b46045d3e2b2e155c9e844b80fbc98c0482398f49518ff23b76d6fb0cc8c5a62dedff67f9f429458255341b9c4cb0171c8a6f1b5b971694921b411f0dc1d2cf2847bd27630e3a7fe2f2916fe1e3201a14b47cb92de268a8c9f54938ab1c72c22cf115b377c659c28101d42cb4d63cab50747e2212d31a9d1197e6a546b6c7db06d44a3114f7736c6da7cbbd4d141403a4f32412f8bc93aa92398a643a59fd3691cc3eaa61dad7e50b9f111567b99a923d856f1a775701934e678d2322bace653c9125e43144af1a62793e096a34bee63598ce27b3b85409ee6e7d6dc32a9c17544204fd8f766d7bc689ec36361c766b541a6d6c908ed1ff329204e7ac00b387f8ac42ddaedf452bd0300a73ef3657b43734607f11706643b0e3821664a77698ff39f3e3f404eedb4c36e94fdb6e60689b9a26968010cc82ed4b2f396ec47a525375b39a8ca4e5198c1cfbfa8b655e8fc895f4c20830002e302a72f32075faedf5e34c2c150ed6fd629a030ecc82e286ceb29a0833e2b4f949789df379bd4d5b0002c0733b139698d5132def372094d53ebc9fd6a6ec570e36e4b47a37c56155a0a2d729983064bfcc1c13e17a5c244c1e090832d7a8d689f15aaf8fee5c20248181f2b04ebb2e8ee0130f0efa20d4a692352b7310fcd793788fedabdbbf4d1bb3854d58da820653886133bae1997dc59c73142bd55066fd77bdb2018f5c42e984626def3e3071c9efba7cfee173f9c65ae837ea22ce8c7de4f7e2684a88344725c7ae859a47e068101f1e8bc9fbe8304992495897cab12f1e68237cb1b54cac004d376d53698e59c1922f474458b745c857864d9e08ee2941e75215b56ef9f9d5ccf332ed36455cbcb475f3eee9f1ff702f72858d9501027449951fd782290074ce1a93fc5d28374e8d943a4029c459d56f2e1c1a51a838a416222ba119efcd1cebd402d4d16c3a00d854a65d57df861a2d6bf50c00d92ea50544cefdfd2e414d33cc7009217b578bd58754662af78098ffb4058369583016d6b855c5b1fbeb7adc66306a8469453b443d3acfffb2f20ee7a846157e2ca89d02c56e04eed01f81db2d85f6bd45629c98d319cb19ee707ee37cd5364fd3b0316cdd9fb9bfe9265780dc692ec1e8eee723014cad097e79dfe3ff524dfe41ded68d8cd1b656134c724e8fd8def53687b90aae6989282090b67db9d7ec2568c0fbd689cb47f7d0bff21b35251ce334ce594c5b415c1d23213e364c14a3537a06404edaea9b6582e1396403669a6c705d496d99607e47eab4aaab64aaa4b8e005727db702feca7c27df98f9aac0ff6b34559010bd910f99b86311bdec32e50fac5473cb751c4845c57956597103d30e4bc8b8140151e083fd03d73bf052be1ab4d029d8f111a375f7835972ff2929f22d4344b5ff766a873aa81aa30d2cb192a029ffbe74f031456394d60130767a2df8b4a0f44fca292aee288a1df52edd3736bd3c28c175fb4e700261a3cb9054ceb3d3407bc7c09e567b5b8303fd660655517ed4deecfbea1531ff2d3cc9e45441ca300"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc7d3c98bddc47124}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x88, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_USERDATA={0xe2, 0xd, 0x1, 0x0, "69a34c30c34908eec6d8bd77fc6673724f884e58a9b963189cc89d147c1c36e71df5b90a5ac1f9edcbedc2419a763424800fcdedcf5685d5d4b43ad8aed1c71128e988f371894e747a45c80988ff98337ec1e20a549088f2b286825cc84931419dc88484cc78851af480a342cd83f09d49e629227b23080fae9d0181b136b9b9057d354a953d66383466baa68bbb9e4ed6cf40e78216d1cf33c65f25fa48af38ae87d81f976f901e34fac27a5c17ae7fe9c9e81fb3ba5031fe20f8129f852765396523ee02ebe36237e3f9b942fc91fe14d9067e6f97762e3a70ddce4604"}]}, @NFT_MSG_NEWCHAIN={0xe0, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7b, 0xc, "520b5ea71dee05f9b618b120ac1d2b0d57e4f5de56cc5315f04fce525a23252650f20e2b580511725d83a309b1c9c10f731ebfadee020147f858054110fd02212710a1ad7e9cc75f9b18fc145227688397c2798e24b4e59b545bb5fda0ae286245ee23c4b99d806aff1711110c92d7193c3a8c072092a7"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2bf59c34}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e86508f}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5a3a6ba275112c60, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x7, 0x8, "220cf4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1520}, 0x1, 0x0, 0x0, 0x20008050}, 0x40005) fsopen(&(0x7f0000004a00)='jffs2\x00', 0x1) kernel console output (not intermixed with test programs): 6 audit(1746755839.537:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60b8e969 code=0x7ffc0000 [ 370.611464][ T5888] usb 4-1: device descriptor read/8, error -71 [ 370.630887][ T30] audit: type=1326 audit(1746755839.607:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f6f60b8e969 code=0x7ffc0000 [ 370.732086][ T5888] usb usb4-port1: unable to enumerate USB device [ 370.945013][ T30] audit: type=1326 audit(1746755839.607:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60b8e969 code=0x7ffc0000 [ 370.989020][ T30] audit: type=1326 audit(1746755839.607:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60b8e969 code=0x7ffc0000 [ 371.126153][ T30] audit: type=1326 audit(1746755839.607:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f60b90887 code=0x7ffc0000 [ 371.149468][ T30] audit: type=1326 audit(1746755839.617:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6f60b907fc code=0x7ffc0000 [ 371.172458][ T30] audit: type=1326 audit(1746755839.617:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6f60b90734 code=0x7ffc0000 [ 371.249463][ T30] audit: type=1326 audit(1746755839.617:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6f60b90734 code=0x7ffc0000 [ 371.305258][ T30] audit: type=1326 audit(1746755839.617:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f60b8d5ca code=0x7ffc0000 [ 371.358226][ T30] audit: type=1326 audit(1746755839.617:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f60b8e969 code=0x7ffc0000 [ 371.896845][ T5926] usb 1-1: USB disconnect, device number 64 [ 371.903043][ T5891] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 371.947820][ T9772] batadv_slave_1: entered promiscuous mode [ 372.026539][ T9772] batadv_slave_1: left promiscuous mode [ 372.082396][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 372.104086][ T5891] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 372.113977][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.158714][ T5891] usb 4-1: Product: syz [ 372.179205][ T5891] usb 4-1: Manufacturer: syz [ 372.205696][ T5891] usb 4-1: SerialNumber: syz [ 372.274716][ T5891] usb 4-1: config 0 descriptor?? [ 372.333528][ T5926] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 372.512253][ T5891] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 372.525048][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 372.553766][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 372.579485][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 372.601821][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.867'. [ 372.632489][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 372.647010][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 372.680934][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 372.721308][ T9781] binder: 9780:9781 ioctl c0306201 200000000240 returned -11 [ 372.722864][ T5926] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 372.740799][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.787602][ T5926] usb 1-1: Product: syz [ 372.818199][ T5926] usb 1-1: Manufacturer: syz [ 372.851211][ T5926] usb 1-1: SerialNumber: syz [ 372.874371][ T5926] usb 1-1: config 0 descriptor?? [ 372.932475][ T9769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.951630][ T9769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.227963][ T5891] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 373.248997][ T5891] usb 4-1: USB disconnect, device number 78 [ 373.985641][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 373.993225][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 373.999796][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.006522][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.026420][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.048650][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.075030][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.101594][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.156660][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.177206][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.205259][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.222614][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.252926][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.280738][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.290656][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.297299][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.336127][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.355451][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.396415][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.435077][ T5926] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 374.469164][ T5926] input input20: Timeout waiting for response from device. [ 374.534869][ T9806] netlink: 236 bytes leftover after parsing attributes in process `syz.3.873'. [ 374.593482][ T9806] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.873'. [ 374.731187][ T9812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 374.834085][ T5887] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 375.002398][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 375.013314][ T5887] usb 2-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 375.024107][ T5887] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.036125][ T5887] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 375.046017][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.054413][ T5887] usb 2-1: Product: syz [ 375.058919][ T5887] usb 2-1: Manufacturer: syz [ 375.064228][ T5887] usb 2-1: SerialNumber: syz [ 375.073145][ T5887] usb 2-1: config 0 descriptor?? [ 375.194528][ T9827] netlink: 156 bytes leftover after parsing attributes in process `syz.5.878'. [ 375.212561][ T5887] usb 1-1: USB disconnect, device number 65 [ 375.398913][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.880'. [ 375.962656][ T5891] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 376.393048][ T5926] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 376.402430][ T5891] usb 6-1: config 0 has no interfaces? [ 376.414733][ T5891] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.430920][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.519642][ T5891] usb 6-1: Product: syz [ 376.536890][ T5891] usb 6-1: Manufacturer: syz [ 376.577884][ T5891] usb 6-1: SerialNumber: syz [ 376.666943][ T5926] usb 4-1: config 0 has no interfaces? [ 376.674195][ T5891] usb 6-1: config 0 descriptor?? [ 376.707376][ T5926] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.970735][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.043109][ T5926] usb 4-1: Product: syz [ 377.450902][ T5926] usb 4-1: Manufacturer: syz [ 377.470935][ T9] usb 2-1: USB disconnect, device number 76 [ 377.502438][ T5926] usb 4-1: SerialNumber: syz [ 377.566448][ T5926] usb 4-1: config 0 descriptor?? [ 377.737602][ T5887] usb 6-1: USB disconnect, device number 11 [ 377.896874][ T9851] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.972403][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 378.143267][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 378.155852][ T9] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 378.170204][ T9] usb 2-1: config 0 has no interface number 0 [ 378.186193][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 378.207130][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.215977][ T9] usb 2-1: Product: syz [ 378.221722][ T9] usb 2-1: Manufacturer: syz [ 378.230145][ T9] usb 2-1: SerialNumber: syz [ 378.239607][ T9] usb 2-1: config 0 descriptor?? [ 378.668159][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.736888][ T9] usb 2-1: USB disconnect, device number 77 [ 378.784263][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.790616][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.983346][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.776618][ T9884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.893'. [ 380.091613][ T5926] usb 4-1: USB disconnect, device number 79 [ 382.502588][ T5926] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 382.662408][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 382.885069][ T5926] usb 1-1: config 0 has no interfaces? [ 382.902486][ T5926] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 382.919471][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.946262][ T5926] usb 1-1: Product: syz [ 382.992179][ T5926] usb 1-1: Manufacturer: syz [ 382.999764][ T5926] usb 1-1: SerialNumber: syz [ 383.054785][ T5926] usb 1-1: config 0 descriptor?? [ 383.152543][ T5887] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 383.369010][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.379297][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.612542][ T5887] usb 4-1: config 0 has no interfaces? [ 383.723787][ T9] usb 2-1: config 0 has no interfaces? [ 383.748886][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 383.772633][ T5887] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 383.823339][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.842116][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.852722][ T9] usb 2-1: Product: syz [ 383.866323][ T9] usb 2-1: Manufacturer: syz [ 383.890696][ T5887] usb 4-1: Product: syz [ 383.899217][ T9] usb 2-1: SerialNumber: syz [ 383.905575][ T5887] usb 4-1: Manufacturer: syz [ 383.912767][ T5887] usb 4-1: SerialNumber: syz [ 383.927872][ T9] usb 2-1: config 0 descriptor?? [ 383.989570][ T5887] usb 4-1: config 0 descriptor?? [ 384.267409][ T9939] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 385.067195][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.907'. [ 385.084849][ T5887] usb 1-1: USB disconnect, device number 66 [ 385.333485][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.909'. [ 385.532985][ T5887] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 385.712392][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 385.743287][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.853086][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.912448][ T5887] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 385.985197][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.049394][ T5887] usb 1-1: config 0 descriptor?? [ 386.172984][ T5888] usb 4-1: USB disconnect, device number 80 [ 386.230259][ T9963] binder: 9962:9963 ioctl 4018620d 0 returned -22 [ 386.258122][ T9963] binder: 9962:9963 ioctl c0306201 0 returned -14 [ 386.327556][ T5889] usb 2-1: USB disconnect, device number 78 [ 386.347845][ T9968] binder: 9962:9968 ioctl 4068aea3 2000000000c0 returned -22 [ 386.480251][ T9952] fuse: Unexpected value for 'default_permissions' [ 386.512170][ T5887] ft260 0003:0403:6030.0012: collection stack underflow [ 386.540262][ T5887] ft260 0003:0403:6030.0012: item 0 1 0 12 parsing failed [ 386.561697][ T5887] ft260 0003:0403:6030.0012: failed to parse HID [ 386.578125][ T5887] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -22 [ 386.715969][ T5887] usb 1-1: USB disconnect, device number 67 [ 386.772440][ T5889] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 386.922425][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 386.955483][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.007408][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.027834][ T5889] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 387.041999][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.047479][ T9963] binder: 9962:9963 ioctl c0306201 200000000240 returned -14 [ 387.070628][ T5889] usb 3-1: config 0 descriptor?? [ 387.152762][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 387.373588][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 387.401331][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 387.416066][ T5919] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 387.986163][ T5889] samsung 0003:0419:0001.0013: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 388.007079][ T5919] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 388.017553][ T5889] usb 3-1: USB disconnect, device number 59 [ 388.023548][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.034055][ T5919] usb 6-1: Product: syz [ 388.060600][ T5919] usb 6-1: Manufacturer: syz [ 388.071886][ T5919] usb 6-1: SerialNumber: syz [ 388.100762][ T5919] usb 6-1: config 0 descriptor?? [ 388.168187][ T9981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 388.178092][ T5919] hub 6-1:0.0: bad descriptor, ignoring hub [ 388.265789][ T5919] hub 6-1:0.0: probe with driver hub failed with error -5 [ 388.277646][ T5919] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 388.528030][ T5888] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 388.648724][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.915'. [ 388.674315][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.915'. [ 388.785162][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 388.862819][ T5888] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 388.890749][ T9998] fido_id[9998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 388.915467][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.937021][ T5888] usb 2-1: Product: syz [ 388.942864][ T5888] usb 2-1: Manufacturer: syz [ 388.960021][ T5888] usb 2-1: SerialNumber: syz [ 389.051434][ T5888] usb 2-1: config 0 descriptor?? [ 389.074998][ T5888] gspca_main: se401-2.14.0 probing 047d:5003 [ 389.172580][ T5919] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 389.422852][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 389.492076][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.536335][ T5919] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 389.574319][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.913400][ T5919] usb 3-1: config 0 descriptor?? [ 390.035188][ T5919] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 390.035936][ T5888] gspca_se401: read req failed req 0x06 error -19 [ 390.159328][ T5888] usb 2-1: USB disconnect, device number 79 [ 390.253848][ T5926] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 390.462646][ T5919] usb 6-1: USB disconnect, device number 12 [ 390.489382][ T5926] usb 1-1: config 0 has no interfaces? [ 390.512256][ T5926] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 390.521585][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.560440][ T5926] usb 1-1: Product: syz [ 390.595461][ T5926] usb 1-1: Manufacturer: syz [ 390.607051][ T5926] usb 1-1: SerialNumber: syz [ 390.625741][ T5926] usb 1-1: config 0 descriptor?? [ 390.957466][T10020] netlink: 'syz.5.923': attribute type 1 has an invalid length. [ 391.137989][ T5919] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 391.322385][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 391.329798][ T5919] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 391.338885][ T5919] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 391.347608][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.358405][ T5919] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 391.369191][ T5919] usb 4-1: config 0 has no interface number 0 [ 391.376012][ T5919] usb 4-1: config 0 has no interface number 1 [ 391.383194][ T5919] usb 4-1: config 0 interface 104 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 391.397778][ T5919] usb 4-1: config 0 interface 104 has no altsetting 0 [ 391.462381][ T5919] usb 4-1: config 0 interface 2 has no altsetting 0 [ 391.491343][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice=6b.76 [ 391.501530][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.514361][ T5919] usb 4-1: Product: syz [ 391.525904][ T5919] usb 4-1: Manufacturer: syz [ 391.530756][ T5919] usb 4-1: SerialNumber: syz [ 391.543546][ T5919] usb 4-1: config 0 descriptor?? [ 391.571718][T10024] openvswitch: netlink: Duplicate or invalid key (type 0). [ 391.607300][T10024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.859276][ T5891] usb 3-1: USB disconnect, device number 60 [ 392.412426][ T5888] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 392.582393][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 392.600491][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.633320][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.665347][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 392.690995][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.710311][ T5888] usb 3-1: config 0 descriptor?? [ 393.006473][T10036] binder: 10035:10036 ioctl c00c620f 0 returned -14 [ 393.327398][ T5888] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 393.504823][ T5888] usb 3-1: USB disconnect, device number 61 [ 393.669860][T10048] fido_id[10048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 394.003568][ T5888] usb 1-1: USB disconnect, device number 68 [ 394.275685][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.298281][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.432068][T10060] bond_slave_1: entered promiscuous mode [ 394.504279][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 394.901586][T10066] bond0: (slave bond_slave_1): Releasing backup interface [ 395.072209][T10066] bond_slave_1 (unregistering): left promiscuous mode [ 395.192822][ T5888] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 395.344014][ T5888] usb 1-1: device descriptor read/64, error -71 [ 395.535934][T10078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.632418][ T5888] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 395.752192][T10070] batadv1: entered promiscuous mode [ 395.822382][ T5888] usb 1-1: device descriptor read/64, error -71 [ 395.944639][ T5888] usb usb1-port1: attempt power cycle [ 396.382559][ T5888] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 396.412908][ T5888] usb 1-1: device descriptor read/8, error -71 [ 396.602508][ T5926] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 396.616332][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.627101][ T5919] snd-usb-audio 4-1:0.104: probe with driver snd-usb-audio failed with error -2 [ 396.659394][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.732387][ T5888] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 396.873489][ T5888] usb 1-1: device descriptor read/8, error -71 [ 396.916432][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 396.956956][ T5926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 396.987695][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 396.991249][ T5919] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 397.019738][ T5888] usb usb1-port1: unable to enumerate USB device [ 397.032897][ T5926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 397.052644][ T5926] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 397.062099][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.076014][ T5926] usb 3-1: config 0 descriptor?? [ 397.297823][ T5926] hdpvr 3-1:0.0: firmware version 0xc7 dated 5[¦ãKÏToçjÌ<_„H'soº]íŒWy/L" \“úÄÎP$⸠[ 397.310711][ T6441] udevd[6441]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.347656][ T5926] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 397.492473][ T5926] hdpvr 3-1:0.0: device init failed [ 397.518244][ T5926] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 397.541794][ T5926] usb 3-1: USB disconnect, device number 62 [ 397.982452][ T5891] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 398.240689][ T5891] usb 6-1: config 0 has no interfaces? [ 398.290056][ T5891] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 398.339472][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.351252][ T5891] usb 6-1: Product: syz [ 398.355833][ T5891] usb 6-1: Manufacturer: syz [ 398.408055][ T5891] usb 6-1: SerialNumber: syz [ 398.427809][ T5891] usb 6-1: config 0 descriptor?? [ 398.536074][ T5888] usb 4-1: USB disconnect, device number 81 [ 398.672386][ T5919] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 398.914496][ T5919] usb 2-1: config 0 has no interfaces? [ 398.943990][ T5919] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 398.988206][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.060224][ T5919] usb 2-1: Product: syz [ 399.072705][ T5919] usb 2-1: Manufacturer: syz [ 399.101345][ T5919] usb 2-1: SerialNumber: syz [ 399.126564][ T5919] usb 2-1: config 0 descriptor?? [ 399.152386][ T5887] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 399.376965][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 399.447885][ T5887] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 399.539452][ T5887] usb 1-1: config 0 has no interface number 0 [ 399.629953][ T5887] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 399.782095][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.047668][ T5887] usb 1-1: config 0 descriptor?? [ 400.183291][ T5887] viperboard 1-1:0.143: version 0.00 found at bus 001 address 073 [ 400.288517][ T5887] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 400.321480][ T5887] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 400.388415][ T5887] usb 1-1: USB disconnect, device number 73 [ 400.869907][T10126] ======================================================= [ 400.869907][T10126] WARNING: The mand mount option has been deprecated and [ 400.869907][T10126] and is ignored by this kernel. Remove the mand [ 400.869907][T10126] option from the mount to silence this warning. [ 400.869907][T10126] ======================================================= [ 400.999251][T10130] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 401.020393][T10128] netlink: 100 bytes leftover after parsing attributes in process `syz.2.952'. [ 401.179478][ T5887] usb 2-1: USB disconnect, device number 80 [ 401.417952][T10137] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 401.706131][T10137] batman_adv: batadv0: Adding interface: gretap1 [ 401.769457][T10137] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.784079][ T5926] usb 6-1: USB disconnect, device number 13 [ 401.794841][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.852469][T10137] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 402.849461][ T5887] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 402.867770][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 402.912498][ T5926] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 403.010259][T10155] pimreg: entered allmulticast mode [ 403.041406][ T5887] usb 3-1: config 0 has no interfaces? [ 403.117965][ T5887] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 403.142492][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 403.153172][ T5926] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 403.177152][ T5926] usb 1-1: config 0 has no interface number 0 [ 403.185696][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.215691][ T5887] usb 3-1: Product: syz [ 403.229993][ T5926] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.231466][ T5887] usb 3-1: Manufacturer: syz [ 403.291760][ T5887] usb 3-1: SerialNumber: syz [ 403.309880][ T5887] usb 3-1: config 0 descriptor?? [ 403.353356][ T5926] usb 1-1: config 0 interface 85 has no altsetting 0 [ 403.482228][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 403.495457][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.511637][ T5926] usb 1-1: Product: syz [ 403.523005][ T5926] usb 1-1: Manufacturer: syz [ 403.557085][ T5926] usb 1-1: SerialNumber: syz [ 403.580261][ T5926] usb 1-1: config 0 descriptor?? [ 403.709228][T10151] ALSA: seq fatal error: cannot create timer (-19) [ 404.015288][ T5926] appletouch 1-1:0.85: Geyser mode initialized. [ 404.024931][ T5926] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input22 [ 404.743718][ T5887] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 404.882553][ T5887] usb 6-1: device descriptor read/64, error -71 [ 405.122519][ T5887] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 405.264930][ T5887] usb 6-1: device descriptor read/64, error -71 [ 405.372753][ T5887] usb usb6-port1: attempt power cycle [ 405.404954][ T5926] usb 3-1: USB disconnect, device number 63 [ 405.602392][ T5889] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 405.732509][ T5887] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 405.740830][ T5891] usb 1-1: USB disconnect, device number 74 [ 405.776039][ T5887] usb 6-1: device descriptor read/8, error -71 [ 405.791745][ T5891] appletouch 1-1:0.85: input: appletouch disconnected [ 405.978979][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.038767][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.085708][ T5926] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 406.242360][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.282488][ T5889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.321390][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.353068][ T5887] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 406.373930][ T5887] usb 6-1: device descriptor read/8, error -71 [ 406.383694][ T5889] usb 2-1: config 0 descriptor?? [ 406.478450][ T5926] usb 3-1: config 0 has no interfaces? [ 406.483771][ T5887] usb usb6-port1: unable to enumerate USB device [ 406.503141][ T5926] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 406.521034][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.542381][ T5919] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 406.600827][ T5926] usb 3-1: Product: syz [ 406.642560][ T5926] usb 3-1: Manufacturer: syz [ 406.647430][ T5926] usb 3-1: SerialNumber: syz [ 406.712238][ T5926] usb 3-1: config 0 descriptor?? [ 406.735870][ T5919] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 406.778025][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.905700][ T5889] plantronics 0003:047F:FFFF.0015: report_id 874771267 is invalid [ 407.011983][ T5919] usb 1-1: config 0 descriptor?? [ 407.025436][ T5889] plantronics 0003:047F:FFFF.0015: item 0 4 1 8 parsing failed [ 407.038393][ T5919] cp210x 1-1:0.0: cp210x converter detected [ 407.040934][T10180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.045893][ T5889] plantronics 0003:047F:FFFF.0015: parse failed [ 407.061095][ T5889] plantronics 0003:047F:FFFF.0015: probe with driver plantronics failed with error -22 [ 407.091591][T10180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.128353][ T5889] usb 2-1: USB disconnect, device number 81 [ 407.449381][ T5919] usb 1-1: cp210x converter now attached to ttyUSB0 [ 407.456346][ T5889] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 407.472252][ T5919] usb 1-1: USB disconnect, device number 75 [ 407.517026][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 407.544604][ T5919] cp210x 1-1:0.0: device disconnected [ 408.036593][ T5919] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 408.222563][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 408.332676][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.352221][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.405207][ T5919] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 408.438224][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.514457][ T5919] usb 2-1: config 0 descriptor?? [ 408.543921][ T5887] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 408.658960][T10218] netlink: 156 bytes leftover after parsing attributes in process `syz.3.977'. [ 408.710725][ T5887] usb 1-1: config 0 has no interfaces? [ 408.738818][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.784150][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.864029][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.879970][ T5887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 408.906393][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.953370][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.976532][ T5887] usb 1-1: Product: syz [ 408.991410][ T5887] usb 1-1: Manufacturer: syz [ 409.018948][ T5887] usb 1-1: SerialNumber: syz [ 409.112942][ T5891] usb 3-1: USB disconnect, device number 64 [ 409.121777][ T5887] usb 1-1: config 0 descriptor?? [ 409.184215][ T5919] playstation 0003:054C:05C4.0016: invalid report_count 1553694380 [ 409.224479][ T5919] playstation 0003:054C:05C4.0016: item 0 4 1 9 parsing failed [ 409.253601][ T5919] playstation 0003:054C:05C4.0016: Parse failed [ 409.266587][ T5919] playstation 0003:054C:05C4.0016: probe with driver playstation failed with error -22 [ 409.385475][ T5919] usb 2-1: USB disconnect, device number 82 [ 409.443761][ T5926] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 409.644244][T10216] ALSA: seq fatal error: cannot create timer (-19) [ 409.666148][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 409.696707][ T5926] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 409.718921][ T5926] usb 4-1: config 4 has no interface number 0 [ 409.737426][ T5926] usb 4-1: config 4 interface 15 has no altsetting 0 [ 409.747915][ T5926] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 409.759257][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.761064][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.774139][ T5926] usb 4-1: Product: syz [ 409.780727][ T5926] usb 4-1: Manufacturer: syz [ 409.789400][ T5926] usb 4-1: SerialNumber: syz [ 409.810081][ T5926] ax88179_178a 4-1:4.15: probe with driver ax88179_178a failed with error -22 [ 409.821482][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.852436][ T5891] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 409.982937][ T5919] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 410.002474][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 410.028252][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.088510][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.120893][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.164070][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 410.174382][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.185976][ T5891] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 410.186010][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.206985][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 410.219793][ T5891] usb 3-1: config 0 descriptor?? [ 410.227935][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 410.255511][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 410.268847][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.281504][ T5919] usb 6-1: config 0 descriptor?? [ 410.292585][T10233] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 410.308667][ T5919] hub 6-1:0.0: USB hub found [ 410.419283][ T5889] usb 4-1: USB disconnect, device number 82 [ 410.436059][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.445457][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.487576][ T5886] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 410.543163][ T5919] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 410.638464][ T5919] usbhid 6-1:0.0: can't add hid device: -71 [ 410.644736][ T5886] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.645481][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 410.658090][ T5886] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 410.689590][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 410.701817][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 410.722660][ T5886] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.722946][ T5919] usb 6-1: USB disconnect, device number 19 [ 410.756657][ T5891] usb 3-1: USB disconnect, device number 65 [ 410.793060][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.824796][ T5886] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 410.849597][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.876315][ T5886] usb 2-1: config 0 descriptor?? [ 410.891906][T10239] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 411.209617][ T5919] usb 1-1: USB disconnect, device number 76 [ 411.440879][T10255] netlink: 156 bytes leftover after parsing attributes in process `syz.5.988'. [ 411.488385][ T5886] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 411.688397][ T5886] usb 2-1: USB disconnect, device number 83 [ 411.876875][T10264] Invalid logical block size (18) [ 413.169518][T10284] overlayfs: missing 'lowerdir' [ 413.585791][ T5886] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 413.797057][ T5886] usb 2-1: device descriptor read/64, error -71 [ 414.062413][ T5886] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 414.172578][ T5919] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 414.335380][ T5919] usb 3-1: config 0 has no interfaces? [ 414.360966][ T5919] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 414.389110][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.412384][ T5886] usb 2-1: device descriptor read/64, error -71 [ 414.434519][ T5919] usb 3-1: Product: syz [ 414.450720][ T5919] usb 3-1: Manufacturer: syz [ 414.461140][ T5919] usb 3-1: SerialNumber: syz [ 414.489023][ T5919] usb 3-1: config 0 descriptor?? [ 414.524363][ T5886] usb usb2-port1: attempt power cycle [ 414.982390][ T5886] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 415.022496][ T5919] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 415.172678][ T5886] usb 2-1: device descriptor read/8, error -71 [ 415.295422][ T5919] usb 4-1: config 0 has no interfaces? [ 415.319949][ T5919] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.387341][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.407566][ T5919] usb 4-1: Product: syz [ 415.416147][ T5919] usb 4-1: Manufacturer: syz [ 415.428922][ T5919] usb 4-1: SerialNumber: syz [ 415.450838][ T5919] usb 4-1: config 0 descriptor?? [ 415.532492][ T5886] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 415.567996][ T5886] usb 2-1: device descriptor read/8, error -71 [ 415.779604][T10303] ALSA: seq fatal error: cannot create timer (-19) [ 416.085094][ T5886] usb usb2-port1: unable to enumerate USB device [ 417.204216][ T5889] usb 3-1: USB disconnect, device number 66 [ 417.615881][T10322] netlink: 156 bytes leftover after parsing attributes in process `syz.5.999'. [ 417.626284][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 417.626302][ T30] audit: type=1326 audit(1746755886.727:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.0.997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec5858e969 code=0x0 [ 417.657691][ T5889] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 417.875046][ T5889] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 417.912378][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.960014][ T5889] usb 3-1: config 0 descriptor?? [ 417.982206][ T5889] cp210x 3-1:0.0: cp210x converter detected [ 418.056715][ T5887] usb 4-1: USB disconnect, device number 83 [ 418.182629][ T5886] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 418.268167][T10336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.349985][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.361641][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.379121][ T5886] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 418.389929][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.393102][ T5889] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 418.406999][ T5886] usb 6-1: config 0 descriptor?? [ 418.449102][ T5886] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 418.544925][ T5891] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 418.648572][T10318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1000'. [ 418.664568][ T5886] usb 6-1: USB disconnect, device number 20 [ 418.683573][ T5889] usb 3-1: cp210x converter now attached to ttyUSB0 [ 418.732399][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 418.766100][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.809628][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 418.838872][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 418.876360][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.890355][ T5889] usb 3-1: USB disconnect, device number 67 [ 418.896363][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 418.910439][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 418.964752][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 418.992432][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 418.996986][ T5889] cp210x 3-1:0.0: device disconnected [ 419.091472][ T5891] usb 1-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 419.091511][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.091534][ T5891] usb 1-1: Product: syz [ 419.091551][ T5891] usb 1-1: Manufacturer: syz [ 419.091568][ T5891] usb 1-1: SerialNumber: syz [ 419.107468][ T5891] usb 1-1: config 0 descriptor?? [ 419.204066][ T5886] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 419.342477][ T5886] usb 6-1: device descriptor read/64, error -71 [ 419.619024][ T5886] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 419.752617][ T5886] usb 6-1: device descriptor read/64, error -71 [ 419.800202][T10367] input: syz0 as /devices/virtual/input/input24 [ 419.890293][ T5886] usb usb6-port1: attempt power cycle [ 420.285228][ T5886] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 420.304105][T10374] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1014'. [ 421.167665][ T5886] usb 6-1: device descriptor read/8, error -71 [ 421.333385][ T5891] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.541939][T10382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1017'. [ 421.614620][ T5891] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 421.750529][ T5891] usb 1-1: USB disconnect, device number 77 [ 421.864650][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.723546][T10409] program syz.1.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.702711][ T1206] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 423.914973][ T1206] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 423.987399][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.001266][ T1206] usb 2-1: config 0 has no interface number 0 [ 424.013487][ T1206] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 424.037715][ T1206] usb 2-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 424.051799][ T1206] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 424.094919][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.355523][ T1206] usb 2-1: config 0 descriptor?? [ 424.377790][ T1206] ttusbir 2-1:0.83: cannot find expected altsetting [ 424.584463][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.622040][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.655741][ T5889] usb 2-1: USB disconnect, device number 88 [ 424.752526][ T1206] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 424.965344][ T5919] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 425.012483][ T1206] usb 3-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.026372][ T1206] usb 3-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 425.070241][ T1206] usb 3-1: config 9 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 425.115701][ T1206] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 425.146489][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.182447][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 425.204031][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.216171][T10401] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 425.231357][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.297234][ T5919] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 425.360184][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.424245][ T5919] usb 6-1: config 0 descriptor?? [ 425.698950][ T1206] aureal 0003:0755:2626.0018: unknown main item tag 0x6 [ 425.716553][ T1206] aureal 0003:0755:2626.0018: report_id 29495 is invalid [ 425.738852][ T1206] aureal 0003:0755:2626.0018: item 0 2 1 8 parsing failed [ 425.774886][ T1206] aureal 0003:0755:2626.0018: probe with driver aureal failed with error -22 [ 425.841233][T10435] netlink: 'syz.5.1029': attribute type 5 has an invalid length. [ 425.876697][T10435] ip6erspan0: entered promiscuous mode [ 425.896468][ T5919] greenasia 0003:0E8F:0012.0019: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0 [ 425.918702][ T5919] greenasia 0003:0E8F:0012.0019: no inputs found [ 425.948527][ T5891] usb 3-1: USB disconnect, device number 68 [ 426.111954][ T5919] usb 6-1: USB disconnect, device number 25 [ 426.171319][T10444] fido_id[10444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 426.205775][T10446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 426.212454][T10446] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 426.232542][T10446] vhci_hcd vhci_hcd.0: Device attached [ 426.277309][T10446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 426.346479][T10446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 426.392441][T10446] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 426.399991][T10446] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 426.418057][T10446] vhci_hcd vhci_hcd.0: Device attached [ 426.432793][ T5919] vhci_hcd: vhci_device speed not set [ 426.462419][T10446] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 426.469087][T10446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 426.485329][T10446] vhci_hcd vhci_hcd.0: Device attached [ 426.507218][ T5919] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 426.516382][T10457] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(23) [ 426.523091][T10457] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 426.572403][T10457] vhci_hcd vhci_hcd.0: Device attached [ 426.588117][T10446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 426.601996][T10446] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(26) [ 426.608675][T10446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 426.648286][T10446] vhci_hcd vhci_hcd.0: Device attached [ 426.700822][T10462] vhci_hcd: connection closed [ 426.710501][T10447] vhci_hcd: connection reset by peer [ 426.720828][T10458] vhci_hcd: connection closed [ 426.721093][T10451] vhci_hcd: connection closed [ 426.800312][T10454] vhci_hcd: connection closed [ 426.822320][ T6175] vhci_hcd: stop threads [ 426.833206][T10465] netlink: 'syz.5.1035': attribute type 2 has an invalid length. [ 426.842370][ T6175] vhci_hcd: release socket [ 426.846941][ T6175] vhci_hcd: disconnect device [ 426.866300][ T6175] vhci_hcd: stop threads [ 426.870628][ T6175] vhci_hcd: release socket [ 426.875787][ T30] audit: type=1326 audit(1746755895.977:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 426.912682][ T6175] vhci_hcd: disconnect device [ 426.921081][ T6175] vhci_hcd: stop threads [ 426.931148][ T6175] vhci_hcd: release socket [ 426.942724][ T6175] vhci_hcd: disconnect device [ 426.956082][ T6175] vhci_hcd: stop threads [ 426.960499][ T30] audit: type=1326 audit(1746755895.987:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 426.992347][ T6175] vhci_hcd: release socket [ 426.996974][ T6175] vhci_hcd: disconnect device [ 427.013089][ T6175] vhci_hcd: stop threads [ 427.021514][ T6175] vhci_hcd: release socket [ 427.041311][ T6175] vhci_hcd: disconnect device [ 427.046277][ T30] audit: type=1326 audit(1746755895.987:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 427.056358][T10467] loop8: detected capacity change from 0 to 8 [ 427.096545][ T30] audit: type=1326 audit(1746755895.987:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 427.170208][ T5921] Dev loop8: unable to read RDB block 8 [ 427.194816][ T30] audit: type=1326 audit(1746755895.987:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 427.197760][ T5921] loop8: unable to read partition table [ 427.226453][ T30] audit: type=1326 audit(1746755895.987:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 427.268670][ T30] audit: type=1326 audit(1746755895.987:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 427.291916][ T5921] loop8: partition table beyond EOD, truncated [ 427.314730][T10467] Dev loop8: unable to read RDB block 8 [ 427.321685][T10467] loop8: unable to read partition table [ 427.331448][T10467] loop8: partition table beyond EOD, truncated [ 427.339359][T10467] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 427.352089][ T30] audit: type=1326 audit(1746755895.997:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 427.441110][ T30] audit: type=1326 audit(1746755895.997:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 427.494116][ T30] audit: type=1326 audit(1746755895.997:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cc178e969 code=0x7ffc0000 [ 428.356210][ T5889] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 428.585399][ T5888] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 428.596423][ T5889] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 428.614653][ T5889] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 428.648438][ T5889] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=bb.9d [ 428.667181][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.822482][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 428.839671][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 428.858243][ T5888] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 428.890780][ T5888] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 428.939909][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.963488][ T5888] usb 6-1: Product: syz [ 428.967714][ T5888] usb 6-1: Manufacturer: syz [ 428.978562][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.987717][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.145310][ T5888] usb 6-1: SerialNumber: syz [ 429.171450][ T5888] usb 6-1: config 0 descriptor?? [ 429.406368][T10504] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1045'. [ 429.720661][ T5888] usb 6-1: USB disconnect, device number 26 [ 429.877360][T10511] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 429.885440][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1047'. [ 429.925833][T10511] team0: Port device geneve0 added [ 430.037672][T10516] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 430.098653][T10516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.793828][ T5888] usb 2-1: USB disconnect, device number 89 [ 431.802745][ T5888] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 431.952711][ T5919] vhci_hcd: vhci_device speed not set [ 431.978148][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.992551][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.013118][ T5888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.027631][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.059585][ T5888] usb 4-1: SerialNumber: syz [ 432.422422][ T5887] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 432.595468][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 432.647810][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 432.689423][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.712992][ T5887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.739832][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.757381][ T5887] usb 3-1: config 0 descriptor?? [ 432.771215][T10561] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 432.866802][ T5888] usb 4-1: 0:2 : does not exist [ 432.922461][ T5888] usb 4-1: unit 5: unexpected type 0x0d [ 432.992648][ T5888] usb 4-1: USB disconnect, device number 84 [ 433.060530][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.217989][ T5887] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 433.240536][ T5887] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 433.585820][ T5888] usb 3-1: USB disconnect, device number 69 [ 433.594514][T10589] plantronics 0003:047F:FFFF.001A: usb_submit_urb(ctrl) failed: -19 [ 433.654433][ T5891] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 433.791143][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 433.862378][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 433.871580][ T5891] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 433.893240][ T5891] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 433.904935][ T5891] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.915988][ T5891] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 433.929491][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 433.951633][ T5891] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 433.972496][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.000234][ T5891] usb 2-1: config 0 descriptor?? [ 434.053175][ T5838] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 434.249089][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.357614][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.368001][ T5838] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 434.380051][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.393156][ T5838] usb 4-1: config 0 descriptor?? [ 434.470953][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.482807][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.540070][ T5891] microsoft 0003:045E:00F9.001B: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 434.679717][ T5891] microsoft 0003:045E:00F9.001B: no inputs found [ 434.705575][ T5891] microsoft 0003:045E:00F9.001B: could not initialize ff, continuing anyway [ 436.572600][ T5891] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 436.757441][ T5891] usb 1-1: config 0 has no interfaces? [ 436.767366][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 436.767387][ T30] audit: type=1800 audit(1746755905.867:248): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1075" name="memory.events.local" dev="tmpfs" ino=410 res=0 errno=0 [ 436.809654][ T5887] usb 2-1: USB disconnect, device number 90 [ 436.816414][ T5838] hid-led 0003:27B8:01ED.001C: probe with driver hid-led failed with error -71 [ 436.840538][ T5891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 436.859240][ T5838] usb 4-1: USB disconnect, device number 85 [ 436.865362][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.882941][ T5891] usb 1-1: Product: syz [ 436.918822][ T5891] usb 1-1: Manufacturer: syz [ 436.952253][ T5891] usb 1-1: SerialNumber: syz [ 437.001833][ T5891] usb 1-1: config 0 descriptor?? [ 437.055802][T10635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1079'. [ 437.402603][ T5838] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 437.410556][ T5891] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 437.542662][ T5838] usb 4-1: device descriptor read/64, error -71 [ 437.565020][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.585484][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.635736][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.669675][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.698419][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.809636][ T5838] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 437.827591][ T5891] usb 2-1: config 0 descriptor?? [ 437.962596][ T5838] usb 4-1: device descriptor read/64, error -71 [ 438.082982][ T5838] usb usb4-port1: attempt power cycle [ 438.276666][ T5891] plantronics 0003:047F:FFFF.001D: item fetching failed at offset 13/15 [ 438.296364][ T5891] plantronics 0003:047F:FFFF.001D: parse failed [ 438.482384][ T5838] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 438.526175][ T5891] plantronics 0003:047F:FFFF.001D: probe with driver plantronics failed with error -22 [ 438.561519][T10637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.570385][T10637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.697386][ T5838] usb 4-1: device descriptor read/8, error -71 [ 438.715952][ T5891] usb 2-1: USB disconnect, device number 91 [ 438.960955][ T5838] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 439.005744][ T5838] usb 4-1: device descriptor read/8, error -71 [ 439.132997][ T5838] usb usb4-port1: unable to enumerate USB device [ 439.378324][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 440.025440][ T5887] usb 1-1: USB disconnect, device number 78 [ 440.043497][T10669] ALSA: seq fatal error: cannot create timer (-19) [ 440.215725][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.246093][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.394304][ T5838] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 440.575139][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 440.595562][ T5838] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 440.610058][ T5838] usb 2-1: config 0 has no interface number 0 [ 440.664544][T10694] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1096'. [ 440.698412][ T5887] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 440.769772][ T5838] usb 2-1: config 0 interface 237 has no altsetting 0 [ 440.808213][ T5838] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 440.818261][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.826710][ T5838] usb 2-1: Product: syz [ 440.842243][ T5838] usb 2-1: Manufacturer: syz [ 440.856335][ T5838] usb 2-1: SerialNumber: syz [ 440.876100][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 440.899104][ T5838] usb 2-1: config 0 descriptor?? [ 440.914514][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.915816][ T5838] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 440.925475][ T5919] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 440.979614][ T5887] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 441.020845][ T5887] usb 1-1: config 1 has no interface number 1 [ 441.043304][ T5887] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.090521][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.107594][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.128693][T10680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.141436][ T5887] usb 1-1: Product: syz [ 441.150296][ T5887] usb 1-1: Manufacturer: syz [ 441.159120][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 441.185088][ T5887] usb 1-1: SerialNumber: syz [ 441.206503][ T5919] usb 4-1: config 2 has an invalid interface number: 32 but max is 3 [ 441.237726][ T5919] usb 4-1: config 2 has an invalid interface number: 55 but max is 3 [ 441.277761][ T5919] usb 4-1: config 2 has an invalid interface number: 196 but max is 3 [ 441.299820][ T5919] usb 4-1: config 2 has no interface number 1 [ 441.313944][ T5919] usb 4-1: config 2 has no interface number 2 [ 441.329437][ T5919] usb 4-1: config 2 has no interface number 3 [ 441.348143][ T5919] usb 4-1: config 2 interface 32 has no altsetting 0 [ 441.402221][ T5919] usb 4-1: config 2 interface 0 has no altsetting 0 [ 441.492097][ T5919] usb 4-1: config 2 interface 55 has no altsetting 0 [ 441.538676][ T5919] usb 4-1: config 2 interface 196 has no altsetting 0 [ 441.579705][ T5919] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 441.594016][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.611330][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.668623][ T5919] usb 4-1: Product: syz [ 441.692936][ T5919] usb 4-1: Manufacturer: syz [ 441.695552][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.708547][ T5887] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 441.737536][ T5919] usb 4-1: SerialNumber: syz [ 441.747926][ T5887] usb 1-1: 2:1 : format type 6 is not supported yet [ 441.825755][ T5838] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 441.837661][ T5838] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 441.849802][ T5838] snd_usb_podhd 2-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 441.897447][ T5887] usb 1-1: USB disconnect, device number 79 [ 442.079958][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1096'. [ 442.164359][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.190913][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.285299][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 442.582579][ T5887] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 442.745505][ T5838] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 442.763634][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 442.778252][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 442.802394][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.810618][ T5887] usb 3-1: Product: syz [ 442.819862][ T5887] usb 3-1: Manufacturer: syz [ 442.826156][ T5887] usb 3-1: SerialNumber: syz [ 442.844224][ T5887] usb 3-1: config 0 descriptor?? [ 442.904674][ T5838] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 442.922512][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.952427][ T5838] usb 1-1: config 0 descriptor?? [ 442.981409][ T5838] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 443.159804][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.182777][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.193561][ T5185] bcm5974 1-1:0.0: could not read from device [ 443.254555][ T5185] bcm5974 1-1:0.0: could not read from device [ 443.287965][ T5838] usb 1-1: USB disconnect, device number 80 [ 443.294540][ T5185] bcm5974 1-1:0.0: could not read from device [ 443.299091][ T5889] usb 2-1: USB disconnect, device number 92 [ 443.307191][ T1206] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 443.344484][ T5885] udevd[5885]: Error opening device "/dev/input/event4": No such file or directory [ 443.375275][ T5885] udevd[5885]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.392989][ T5885] udevd[5885]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.408154][ T5885] udevd[5885]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.416212][ T5885] udevd[5885]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.496331][ T1206] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.532206][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.557373][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 443.666165][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 443.741313][ T1206] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 443.775932][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.820985][ T1206] usb 6-1: Product: syz [ 443.852362][ T1206] usb 6-1: Manufacturer: syz [ 443.874740][ T1206] usb 6-1: SerialNumber: syz [ 443.881271][ T5919] usb 4-1: USB disconnect, device number 90 [ 443.895851][ T1206] usb 6-1: config 0 descriptor?? [ 444.005678][ T5887] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 444.024859][ T1206] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 444.160182][ T5887] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 444.196243][ T1206] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 444.234165][ T1206] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 444.286165][ T1206] usb 6-1: USB disconnect, device number 27 [ 444.307686][ T5887] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 444.315548][ T5887] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 444.335697][ T1206] garmin_gps 6-1:0.0: device disconnected [ 444.358891][ T5887] usb 3-1: USB disconnect, device number 71 [ 444.459713][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 444.509022][ T7304] udevd[7304]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.55/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 444.560145][ T6441] udevd[6441]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.602154][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.196/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 444.772399][ T5919] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 444.935788][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 444.954657][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 444.972098][ T5919] usb 4-1: language id specifier not provided by device, defaulting to English [ 445.014548][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 445.041296][ T5919] usb 4-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.40 [ 445.067013][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.081769][ T5919] usb 4-1: Product: syz [ 445.091364][ T5919] usb 4-1: Manufacturer: è¥ [ 445.096316][ T5919] usb 4-1: SerialNumber: syz [ 445.163171][ T9] usb 3-1: device descriptor read/64, error -71 [ 445.165259][T10750] ip6gre1: entered allmulticast mode [ 445.179486][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 445.335375][T10758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.368774][T10758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.417089][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 445.475860][ T5919] usbhid 4-1:1.0: can't add hid device: -71 [ 445.490341][ T5919] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 445.520044][ T5919] usb 4-1: USB disconnect, device number 91 [ 445.574310][ T9] usb 3-1: device descriptor read/64, error -71 [ 445.689552][ T9] usb usb3-port1: attempt power cycle [ 445.771460][T10767] ALSA: seq fatal error: cannot create timer (-19) [ 446.081303][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 446.123196][ T9] usb 3-1: device descriptor read/8, error -71 [ 446.212684][ T5838] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 446.363257][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 446.368701][ T5888] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 446.378680][ T5838] usb 1-1: device descriptor read/64, error -71 [ 446.406763][ T9] usb 3-1: device descriptor read/8, error -71 [ 446.433198][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 446.446460][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 446.455752][T10783] netlink: 'syz.1.1114': attribute type 18 has an invalid length. [ 446.467220][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 446.542958][ T9] usb usb3-port1: unable to enumerate USB device [ 446.548548][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.567563][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.585609][ T5888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.605121][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.624606][ T5888] usb 4-1: SerialNumber: syz [ 446.632477][ T5838] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 446.762467][ T5838] usb 1-1: device descriptor read/64, error -71 [ 446.861661][ T5888] usb 4-1: 0:2 : does not exist [ 446.883448][ T5838] usb usb1-port1: attempt power cycle [ 446.922524][ T5888] usb 4-1: USB disconnect, device number 92 [ 446.986196][ T7304] udevd[7304]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.282490][ T5838] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 447.303169][ T5838] usb 1-1: device descriptor read/8, error -71 [ 447.559363][ T5838] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 447.600163][ T5838] usb 1-1: device descriptor read/8, error -71 [ 447.712551][ T5838] usb usb1-port1: unable to enumerate USB device [ 447.722569][ T5919] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 447.882386][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 447.897552][ T5919] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 447.906685][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.918300][ T5919] usb 4-1: Product: syz [ 447.922810][ T5919] usb 4-1: Manufacturer: syz [ 447.932598][ T5919] usb 4-1: SerialNumber: syz [ 447.941367][ T5919] usb 4-1: config 0 descriptor?? [ 447.966500][ T5919] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 447.980825][ T5919] usb 4-1: Detected FT232H [ 448.152410][ T5838] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 448.302405][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 448.309593][ T5838] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 448.319362][ T5838] usb 3-1: config 0 has no interface number 0 [ 448.327946][ T5838] usb 3-1: config 0 interface 12 has no altsetting 0 [ 448.339572][ T5838] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 448.351660][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.360495][ T5838] usb 3-1: Product: syz [ 448.362419][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 448.367303][ T5838] usb 3-1: Manufacturer: syz [ 448.378358][ T5838] usb 3-1: SerialNumber: syz [ 448.380447][ T5919] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 448.391460][ T5919] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 448.400881][ T5838] usb 3-1: config 0 descriptor?? [ 448.401565][ T5919] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 448.421140][ T5919] usb 4-1: USB disconnect, device number 93 [ 448.435914][ T5919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 448.448511][ T5919] ftdi_sio 4-1:0.0: device disconnected [ 448.542514][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 448.550021][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 448.565951][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 448.576175][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.587042][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.600162][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.609551][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.832670][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 448.838426][ T9] usbtmc 2-1:16.0: can't read capabilities [ 449.045825][ T9] usb 2-1: USB disconnect, device number 93 [ 449.255446][T10801] FAULT_INJECTION: forcing a failure. [ 449.255446][T10801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.269927][T10801] CPU: 1 UID: 0 PID: 10801 Comm: syz.5.1122 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 449.269959][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 449.269977][T10801] Call Trace: [ 449.269990][T10801] [ 449.270000][T10801] dump_stack_lvl+0x189/0x250 [ 449.270034][T10801] ? __lock_acquire+0xaac/0xd20 [ 449.270065][T10801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.270094][T10801] ? __pfx__printk+0x10/0x10 [ 449.270115][T10801] ? __might_fault+0xb0/0x130 [ 449.270151][T10801] should_fail_ex+0x414/0x560 [ 449.270188][T10801] _copy_from_iter+0x1db/0x15a0 [ 449.270228][T10801] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 449.270251][T10801] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 449.270277][T10801] ? __pfx__copy_from_iter+0x10/0x10 [ 449.270303][T10801] ? __build_skb_around+0x257/0x3e0 [ 449.270332][T10801] ? netlink_sendmsg+0x642/0xb30 [ 449.270352][T10801] ? skb_put+0x11b/0x210 [ 449.270381][T10801] netlink_sendmsg+0x6b2/0xb30 [ 449.270413][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.270445][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.270468][T10801] __sock_sendmsg+0x219/0x270 [ 449.270503][T10801] ____sys_sendmsg+0x505/0x830 [ 449.270534][T10801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.270570][T10801] ? import_iovec+0x74/0xa0 [ 449.270600][T10801] ___sys_sendmsg+0x21f/0x2a0 [ 449.270628][T10801] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.270691][T10801] ? __fget_files+0x2a/0x420 [ 449.270716][T10801] ? __fget_files+0x3a0/0x420 [ 449.270752][T10801] __x64_sys_sendmsg+0x19b/0x260 [ 449.270781][T10801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.270824][T10801] ? do_syscall_64+0xba/0x210 [ 449.270853][T10801] do_syscall_64+0xf6/0x210 [ 449.270878][T10801] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 449.270898][T10801] ? clear_bhb_loop+0x45/0xa0 [ 449.270922][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.270941][T10801] RIP: 0033:0x7f8cc178e969 [ 449.270960][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.270977][T10801] RSP: 002b:00007f8cc2601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.270998][T10801] RAX: ffffffffffffffda RBX: 00007f8cc19b5fa0 RCX: 00007f8cc178e969 [ 449.271013][T10801] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 449.271025][T10801] RBP: 00007f8cc2601090 R08: 0000000000000000 R09: 0000000000000000 [ 449.271037][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.271049][T10801] R13: 0000000000000000 R14: 00007f8cc19b5fa0 R15: 00007f8cc1adfa28 [ 449.271080][T10801] [ 449.690732][T10805] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1123'. [ 449.782664][ T5838] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 449.790261][ T5838] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 449.798670][ T5838] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 449.806824][ T5838] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 449.824116][ T5838] usb 3-1: USB disconnect, device number 76 [ 449.833729][ T5891] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 450.014344][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 450.027062][T10812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1119'. [ 450.032534][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 450.056274][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 450.076685][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 450.097218][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 450.111856][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.523353][ T5891] usb 1-1: config 0 descriptor?? [ 450.913364][T10820] Unknown options in mask 5 [ 450.919554][T10820] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1120'. [ 450.932511][T10820] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1120'. [ 451.180713][T10828] netlink: 'syz.1.1128': attribute type 29 has an invalid length. [ 451.193799][T10828] netlink: 'syz.1.1128': attribute type 29 has an invalid length. [ 451.205891][T10828] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1128'. [ 451.302635][ T5838] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 451.452455][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 451.463431][ T5838] usb 3-1: config 5 has an invalid interface number: 72 but max is 0 [ 451.471965][ T5838] usb 3-1: config 5 has no interface number 0 [ 451.478636][ T5838] usb 3-1: config 5 interface 72 has no altsetting 0 [ 451.490298][ T5838] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 451.500224][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.688020][ T5838] usb 3-1: Product: syz [ 451.723313][ T5838] usb 3-1: Manufacturer: syz [ 451.758377][ T5838] usb 3-1: SerialNumber: syz [ 451.826812][T10840] ALSA: seq fatal error: cannot create timer (-19) [ 452.100740][ T5838] ftdi_sio 3-1:5.72: FTDI USB Serial Device converter detected [ 452.169128][ T5838] usb 3-1: Detected FT4232H [ 452.182213][ T5838] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 452.230741][ T5838] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 452.245879][ T5891] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 452.314344][ T5891] hdpvr 1-1:0.0: device init failed [ 452.336534][ T5891] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 452.380923][ T5838] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 452.405767][ T5891] usb 1-1: USB disconnect, device number 85 [ 452.426086][ T5838] usb 3-1: USB disconnect, device number 77 [ 452.466777][ T5838] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 452.491502][ T5838] ftdi_sio 3-1:5.72: device disconnected [ 452.714281][T10853] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1134'. [ 452.855947][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 452.882176][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 453.314919][ T5838] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 453.528570][T10866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1139'. [ 453.633439][ T5838] usb 4-1: config 0 has no interfaces? [ 453.650875][ T5838] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 453.660314][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.668794][ T5838] usb 4-1: Product: syz [ 453.684919][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.695145][ T5838] usb 4-1: Manufacturer: syz [ 453.701791][ T5838] usb 4-1: SerialNumber: syz [ 453.738184][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.823892][ T5838] usb 4-1: config 0 descriptor?? [ 453.854689][ T5891] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 453.912444][T10580] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 453.923827][T10874] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.034082][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 454.046483][T10580] usb 1-1: device descriptor read/64, error -71 [ 454.077634][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.106487][T10859] input: syz1 as /devices/virtual/input/input28 [ 454.168786][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.225188][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.248833][ T5891] usb 6-1: config 0 descriptor?? [ 454.271944][ T5891] hub 6-1:0.0: USB hub found [ 454.389773][T10882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.479724][ T5891] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 454.492136][ T5891] usbhid 6-1:0.0: can't add hid device: -71 [ 454.498265][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 454.543741][ T5891] usb 6-1: USB disconnect, device number 28 [ 454.572546][T10580] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 454.672626][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 454.768650][T10580] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 454.812400][T10580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.830088][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 454.846911][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.906899][T10580] usb 1-1: config 0 descriptor?? [ 454.939359][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.146967][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.242974][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.414309][T10894] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1146'. [ 455.515589][T10882] vlan2: entered promiscuous mode [ 455.520949][T10882] bond0: entered promiscuous mode [ 455.526335][T10882] bond_slave_0: entered promiscuous mode [ 455.533362][T10882] bond_slave_1: entered promiscuous mode [ 455.559403][T10580] ath6kl: Failed to read usb control message: -71 [ 455.626332][T10580] ath6kl: Unable to read the bmi data from the device: -71 [ 455.654301][T10580] ath6kl: Unable to recv target info: -71 [ 455.693540][T10580] ath6kl: Failed to init ath6kl core: -71 [ 455.698471][T10897] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 10897 comm: syz.5.1145) [ 455.739330][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 455.756493][T10580] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 455.822707][T10580] usb 1-1: USB disconnect, device number 87 [ 456.051402][ T30] audit: type=1800 audit(1746755924.947:249): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1145" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=31561 res=0 errno=0 [ 456.392907][ T1206] usb 4-1: USB disconnect, device number 94 [ 456.514124][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 456.535716][T10901] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 456.578377][T10901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.892448][T10580] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 456.902613][ T5891] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 457.046562][T10910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1150'. [ 457.095271][T10580] usb 6-1: Using ep0 maxpacket: 32 [ 457.101103][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 457.108978][T10580] usb 6-1: unable to get BOS descriptor or descriptor too short [ 457.116799][ T5891] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 457.125806][ T5891] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 457.136417][ T5891] usb 2-1: config 179 has no interface number 0 [ 457.143033][ T5891] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 457.157020][T10580] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 457.168401][T10580] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 457.191368][T10580] usb 6-1: config 255 has no interface number 0 [ 457.204854][ T5891] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 457.219015][T10580] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 457.238638][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.259315][T10580] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 457.289880][T10580] usb 6-1: config 255 interface 81 has no altsetting 0 [ 457.326233][T10580] usb 6-1: string descriptor 0 read error: -22 [ 457.333307][T10580] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 457.349585][T10580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.414315][T10580] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input29 [ 457.533416][ T30] audit: type=1326 audit(1746755926.627:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.1.1148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e3198e969 code=0x0 [ 457.673512][T10917] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.1151'. [ 457.709889][ T5887] usb 2-1: USB disconnect, device number 95 [ 457.727018][ T30] audit: type=1326 audit(1746755926.637:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.1.1148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e3198e969 code=0x0 [ 457.794709][T10580] usb 6-1: USB disconnect, device number 29 [ 457.832186][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 458.204946][T10580] usb 3-1: USB disconnect, device number 78 [ 458.658472][T10940] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1158'. [ 458.738619][T10580] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 458.852412][ T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 458.912362][T10580] usb 3-1: Using ep0 maxpacket: 16 [ 458.958559][T10580] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 459.032093][T10580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.062417][ T24] usb 2-1: device descriptor read/64, error -71 [ 459.091340][T10580] usb 3-1: Product: syz [ 459.121770][T10580] usb 3-1: Manufacturer: syz [ 459.157071][T10580] usb 3-1: SerialNumber: syz [ 459.254749][T10950] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.261990][T10950] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 459.356779][T10580] usb 3-1: config 0 descriptor?? [ 459.362424][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 459.420466][T10950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.470725][T10950] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 459.523778][T10950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 459.539069][T10950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 459.552675][ T24] usb 2-1: device descriptor read/64, error -71 [ 459.571032][T10950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.667564][T10950] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 459.688015][ T24] usb usb2-port1: attempt power cycle [ 459.759567][T10950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.812763][T10950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 460.131598][ T5891] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 460.230450][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 460.272496][ T5919] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 460.439932][ T5919] usb 1-1: config 0 has no interfaces? [ 460.451298][ T5919] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.461236][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.479088][ T5919] usb 1-1: Product: syz [ 460.511370][ T5919] usb 1-1: Manufacturer: syz [ 460.540911][ T5919] usb 1-1: SerialNumber: syz [ 460.549856][ T5891] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 460.594008][ T5919] usb 1-1: config 0 descriptor?? [ 460.631343][ T5891] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 460.701989][ T5891] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 460.889546][ T24] usb 2-1: device descriptor read/8, error -71 [ 461.241280][ T5891] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 461.250517][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 461.362434][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.377290][T10955] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 461.422415][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 461.483826][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 461.533171][T10580] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 461.564471][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 461.573977][T10580] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 461.652759][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 461.765406][ T24] usb 2-1: device descriptor read/8, error -71 [ 461.780457][T10580] usb 3-1: USB disconnect, device number 79 [ 461.806240][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 461.884453][T10971] macvlan1: entered promiscuous mode [ 461.903349][ T24] usb usb2-port1: unable to enumerate USB device [ 461.929844][T10971] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 461.968018][T10971] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 461.996564][T10979] netlink: 'syz.2.1169': attribute type 21 has an invalid length. [ 462.002432][T10971] Cannot create hsr debugfs directory [ 462.223624][T10580] usb 1-1: USB disconnect, device number 88 [ 462.302620][ T24] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 462.323307][T10983] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1170'. [ 462.601323][T10996] FAULT_INJECTION: forcing a failure. [ 462.601323][T10996] name failslab, interval 1, probability 0, space 0, times 0 [ 462.622551][T10996] CPU: 0 UID: 0 PID: 10996 Comm: syz.2.1175 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 462.622582][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 462.622595][T10996] Call Trace: [ 462.622604][T10996] [ 462.622613][T10996] dump_stack_lvl+0x189/0x250 [ 462.622650][T10996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.622678][T10996] ? __pfx__printk+0x10/0x10 [ 462.622704][T10996] ? __pfx___might_resched+0x10/0x10 [ 462.622721][T10996] ? fs_reclaim_acquire+0x7d/0x100 [ 462.622755][T10996] should_fail_ex+0x414/0x560 [ 462.622792][T10996] ? alloc_netdev_mqs+0xa6/0x11e0 [ 462.622818][T10996] should_failslab+0xa8/0x100 [ 462.622845][T10996] __kvmalloc_node_noprof+0x168/0x5e0 [ 462.622871][T10996] ? alloc_netdev_mqs+0xa6/0x11e0 [ 462.622898][T10996] ? snprintf+0xda/0x120 [ 462.622950][T10996] ? __pfx_hsr_dev_setup+0x10/0x10 [ 462.622982][T10996] alloc_netdev_mqs+0xa6/0x11e0 [ 462.623010][T10996] ? __pfx_hsr_dev_setup+0x10/0x10 [ 462.623037][T10996] ? __pfx_snprintf+0x10/0x10 [ 462.623070][T10996] rtnl_create_link+0x31f/0xd10 [ 462.623105][T10996] rtnl_newlink_create+0x258/0xaf0 [ 462.623135][T10996] ? __pfx_aa_get_newest_label+0x10/0x10 [ 462.623160][T10996] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 462.623182][T10996] ? rtnl_newlink+0x8db/0x1c70 [ 462.623205][T10996] ? __pfx___mutex_lock+0x10/0x10 [ 462.623240][T10996] ? ns_capable+0x8a/0xf0 [ 462.623262][T10996] rtnl_newlink+0x16d6/0x1c70 [ 462.623285][T10996] ? kasan_save_track+0x3e/0x80 [ 462.623319][T10996] ? __pfx_rtnl_newlink+0x10/0x10 [ 462.623373][T10996] ? kasan_quarantine_put+0xdd/0x220 [ 462.623394][T10996] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.623423][T10996] ? nlmon_xmit+0xb0/0x100 [ 462.623448][T10996] ? kmem_cache_free+0x192/0x3f0 [ 462.623480][T10996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.623510][T10996] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.623539][T10996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.623569][T10996] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 462.623607][T10996] ? aa_get_newest_label+0xf7/0x5d0 [ 462.623631][T10996] ? __lock_acquire+0xaac/0xd20 [ 462.623683][T10996] ? __pfx_rtnl_newlink+0x10/0x10 [ 462.623704][T10996] rtnetlink_rcv_msg+0x7cc/0xb70 [ 462.623729][T10996] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 462.623749][T10996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.623775][T10996] ? ref_tracker_free+0x63a/0x7d0 [ 462.623794][T10996] ? __copy_skb_header+0xa7/0x550 [ 462.623832][T10996] netlink_rcv_skb+0x219/0x490 [ 462.623855][T10996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.623878][T10996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.623921][T10996] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.623952][T10996] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.623979][T10996] netlink_unicast+0x758/0x8d0 [ 462.624021][T10996] netlink_sendmsg+0x805/0xb30 [ 462.624052][T10996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.624077][T10996] ? aa_sock_msg_perm+0x94/0x160 [ 462.624099][T10996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.624122][T10996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.624145][T10996] __sock_sendmsg+0x219/0x270 [ 462.624179][T10996] ____sys_sendmsg+0x505/0x830 [ 462.624211][T10996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.624247][T10996] ? import_iovec+0x74/0xa0 [ 462.624278][T10996] ___sys_sendmsg+0x21f/0x2a0 [ 462.624307][T10996] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.624372][T10996] ? __fget_files+0x2a/0x420 [ 462.624398][T10996] ? __fget_files+0x3a0/0x420 [ 462.624434][T10996] __x64_sys_sendmsg+0x19b/0x260 [ 462.624464][T10996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.624508][T10996] ? do_syscall_64+0xba/0x210 [ 462.624537][T10996] do_syscall_64+0xf6/0x210 [ 462.624562][T10996] ? clear_bhb_loop+0x45/0xa0 [ 462.624587][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.624606][T10996] RIP: 0033:0x7f6f60b8e969 [ 462.624623][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.624641][T10996] RSP: 002b:00007f6f61a0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.624662][T10996] RAX: ffffffffffffffda RBX: 00007f6f60db5fa0 RCX: 00007f6f60b8e969 [ 462.624675][T10996] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 462.624687][T10996] RBP: 00007f6f61a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 462.624699][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.624710][T10996] R13: 0000000000000000 R14: 00007f6f60db5fa0 R15: 00007f6f60edfa28 [ 462.624741][T10996] [ 462.633169][ T5891] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 463.196158][ T5891] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input30 [ 463.218356][T10580] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 463.322432][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 463.341210][ T5891] usb 6-1: USB disconnect, device number 30 [ 463.347431][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 463.393518][T10580] usb 4-1: Using ep0 maxpacket: 32 [ 463.429475][T10580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 463.440541][T10580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 463.465221][T10580] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.574593][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 463.643866][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 463.654471][T10580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.693190][T10580] usb 4-1: Product: 訶ä‹ë¿¼îŽ¾ê‡‰ì¦–粙셫갫蟨隖쎧䚢胖㬩ì°æƒ†á‰¼à©‡ï£¦â•á ˜âŠå­µá¿‹ê–”亽똪è„尔⟤贅᩺녺ㄼࡪí‡è•îŽªæœ¨ã¹ê¬·ä„©ëšˆæ“§ì—³ë¤‹îŒæ‚†ëˆ¨éµ«å‚¼ê„詙æžï¼¢ç˜»ç‹µéŽˆç—·æ™…覊⫠ﮤ斮뿗薓嵣晶喌⛠酢ç„ᨤ⃸爸꧖슀䂳îºç«‚ [ 463.722869][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 463.742713][ T5888] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 463.846176][T10580] usb 4-1: Manufacturer: æ›® [ 463.862451][T10580] usb 4-1: SerialNumber: syz [ 463.882686][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 463.942376][ T5891] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 463.992433][ T5888] usb 3-1: device descriptor read/64, error -71 [ 464.135153][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 464.144356][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 464.162457][ T5891] usb 6-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 464.191136][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.232527][ T5891] usb 6-1: config 0 descriptor?? [ 464.242467][ T5888] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 464.309909][T10990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.318914][T10990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.331251][T10580] cdc_ncm 4-1:1.0: bind() failure [ 464.341497][T10580] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 464.420824][ T5888] usb 3-1: device descriptor read/64, error -71 [ 464.441409][T10580] cdc_ncm 4-1:1.1: bind() failure [ 464.502760][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.532755][ T5888] usb usb3-port1: attempt power cycle [ 464.538492][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.583943][ T5891] usb 6-1: string descriptor 0 read error: -71 [ 464.605458][T10580] usb 4-1: USB disconnect, device number 95 [ 464.686203][ T5891] usbhid 6-1:0.0: can't add hid device: -71 [ 464.759293][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 464.792419][ T5891] usb 6-1: USB disconnect, device number 31 [ 464.882365][ T5888] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 465.015452][ T5888] usb 3-1: device descriptor read/8, error -71 [ 465.101828][T11025] openvswitch: netlink: IP tunnel dst address not specified [ 465.149536][T11025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1182'. [ 465.273494][T11028] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1183'. [ 465.312383][ T5888] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 465.347470][ T5888] usb 3-1: device descriptor read/8, error -71 [ 465.383037][T11028] sctp: [Deprecated]: syz.5.1183 (pid 11028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.383037][T11028] Use struct sctp_sack_info instead [ 465.407950][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1183'. [ 465.552620][ T5888] usb usb3-port1: unable to enumerate USB device [ 465.996233][T11037] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1185'. [ 466.117183][T11039] FAULT_INJECTION: forcing a failure. [ 466.117183][T11039] name failslab, interval 1, probability 0, space 0, times 0 [ 466.197756][T11039] CPU: 1 UID: 0 PID: 11039 Comm: syz.0.1186 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 466.197778][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 466.197788][T11039] Call Trace: [ 466.197794][T11039] [ 466.197801][T11039] dump_stack_lvl+0x189/0x250 [ 466.197828][T11039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.197850][T11039] ? __pfx__printk+0x10/0x10 [ 466.197867][T11039] ? __mutex_trylock_common+0x153/0x260 [ 466.197890][T11039] should_fail_ex+0x414/0x560 [ 466.197918][T11039] should_failslab+0xa8/0x100 [ 466.197939][T11039] __kmalloc_cache_noprof+0x70/0x3d0 [ 466.197957][T11039] ? __hw_addr_add_ex+0x1f4/0x770 [ 466.197979][T11039] __hw_addr_add_ex+0x1f4/0x770 [ 466.198003][T11039] dev_addr_init+0x14f/0x230 [ 466.198024][T11039] ? __pfx_dev_addr_init+0x10/0x10 [ 466.198039][T11039] ? alloc_netdev_mqs+0xa6/0x11e0 [ 466.198070][T11039] alloc_netdev_mqs+0x2f3/0x11e0 [ 466.198089][T11039] ? __pfx_hsr_dev_setup+0x10/0x10 [ 466.198116][T11039] rtnl_create_link+0x31f/0xd10 [ 466.198142][T11039] rtnl_newlink_create+0x258/0xaf0 [ 466.198164][T11039] ? __pfx_aa_get_newest_label+0x10/0x10 [ 466.198182][T11039] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 466.198197][T11039] ? rtnl_newlink+0x8db/0x1c70 [ 466.198214][T11039] ? __pfx___mutex_lock+0x10/0x10 [ 466.198239][T11039] ? ns_capable+0x8a/0xf0 [ 466.198255][T11039] rtnl_newlink+0x16d6/0x1c70 [ 466.198271][T11039] ? kasan_save_track+0x3e/0x80 [ 466.198295][T11039] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.198332][T11039] ? kasan_quarantine_put+0xdd/0x220 [ 466.198347][T11039] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.198368][T11039] ? nlmon_xmit+0xb0/0x100 [ 466.198395][T11039] ? kmem_cache_free+0x192/0x3f0 [ 466.198417][T11039] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.198440][T11039] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.198460][T11039] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.198481][T11039] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 466.198510][T11039] ? aa_get_newest_label+0xf7/0x5d0 [ 466.198527][T11039] ? __lock_acquire+0xaac/0xd20 [ 466.198564][T11039] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.198578][T11039] rtnetlink_rcv_msg+0x7cc/0xb70 [ 466.198596][T11039] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 466.198610][T11039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.198628][T11039] ? ref_tracker_free+0x63a/0x7d0 [ 466.198647][T11039] ? __copy_skb_header+0xa7/0x550 [ 466.198673][T11039] netlink_rcv_skb+0x219/0x490 [ 466.198689][T11039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.198705][T11039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.198734][T11039] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.198749][T11039] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.198768][T11039] netlink_unicast+0x758/0x8d0 [ 466.198799][T11039] netlink_sendmsg+0x805/0xb30 [ 466.198821][T11039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.198840][T11039] ? aa_sock_msg_perm+0x94/0x160 [ 466.198855][T11039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.198871][T11039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.198887][T11039] __sock_sendmsg+0x219/0x270 [ 466.198913][T11039] ____sys_sendmsg+0x505/0x830 [ 466.198935][T11039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.198960][T11039] ? import_iovec+0x74/0xa0 [ 466.198982][T11039] ___sys_sendmsg+0x21f/0x2a0 [ 466.199002][T11039] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.199047][T11039] ? __fget_files+0x2a/0x420 [ 466.199065][T11039] ? __fget_files+0x3a0/0x420 [ 466.199090][T11039] __x64_sys_sendmsg+0x19b/0x260 [ 466.199111][T11039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.199142][T11039] ? do_syscall_64+0xba/0x210 [ 466.199161][T11039] do_syscall_64+0xf6/0x210 [ 466.199179][T11039] ? clear_bhb_loop+0x45/0xa0 [ 466.199197][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.199210][T11039] RIP: 0033:0x7fec5858e969 [ 466.199223][T11039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.199235][T11039] RSP: 002b:00007fec593bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.199251][T11039] RAX: ffffffffffffffda RBX: 00007fec587b5fa0 RCX: 00007fec5858e969 [ 466.199261][T11039] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 466.199270][T11039] RBP: 00007fec593bc090 R08: 0000000000000000 R09: 0000000000000000 [ 466.199278][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.199287][T11039] R13: 0000000000000000 R14: 00007fec587b5fa0 R15: 00007fec588dfa28 [ 466.199308][T11039] [ 466.997838][T11046] vti0: entered promiscuous mode [ 467.402575][ T5888] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 467.585559][ T5888] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 467.630590][ T5888] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.650458][ T5888] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 467.663564][ T5888] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 467.671988][ T5888] usb 3-1: Manufacturer: syz [ 467.677520][ T5888] usb 3-1: SerialNumber: syz [ 467.903257][ T5888] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 468.328885][ T5888] usb 3-1: USB disconnect, device number 84 [ 468.672386][T10580] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 468.832351][T10580] usb 4-1: Using ep0 maxpacket: 16 [ 469.112465][ T1206] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 469.146310][T10580] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.172473][T10580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 469.208572][T10580] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 469.277553][ T1206] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 469.279446][T10580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.319214][ T1206] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.361365][T10580] usb 4-1: Product: syz [ 469.384186][ T1206] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.419487][ T1206] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.445527][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.453889][T10580] usb 4-1: Manufacturer: syz [ 469.453913][T10580] usb 4-1: SerialNumber: syz [ 469.504934][ T1206] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.539445][T11076] netlink: 'syz.5.1197': attribute type 10 has an invalid length. [ 469.565837][T11076] team0: Port device syz_tun added [ 469.582083][T10580] usb 4-1: config 0 descriptor?? [ 469.599050][ T1206] usb 3-1: invalid MIDI out EP 0 [ 469.629573][T11078] FAULT_INJECTION: forcing a failure. [ 469.629573][T11078] name failslab, interval 1, probability 0, space 0, times 0 [ 469.672547][T11078] CPU: 1 UID: 0 PID: 11078 Comm: syz.1.1198 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 469.672585][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 469.672598][T11078] Call Trace: [ 469.672605][T11078] [ 469.672615][T11078] dump_stack_lvl+0x189/0x250 [ 469.672651][T11078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.672679][T11078] ? __pfx__printk+0x10/0x10 [ 469.672702][T11078] ? __pfx___might_resched+0x10/0x10 [ 469.672721][T11078] ? fs_reclaim_acquire+0x7d/0x100 [ 469.672755][T11078] should_fail_ex+0x414/0x560 [ 469.672789][T11078] should_failslab+0xa8/0x100 [ 469.672815][T11078] __kmalloc_cache_noprof+0x70/0x3d0 [ 469.672838][T11078] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 469.672863][T11078] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 469.672891][T11078] alloc_netdev_mqs+0xbd5/0x11e0 [ 469.672927][T11078] rtnl_create_link+0x31f/0xd10 [ 469.672962][T11078] rtnl_newlink_create+0x258/0xaf0 [ 469.672994][T11078] ? __pfx_aa_get_newest_label+0x10/0x10 [ 469.673019][T11078] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 469.673040][T11078] ? rtnl_newlink+0x8db/0x1c70 [ 469.673063][T11078] ? __pfx___mutex_lock+0x10/0x10 [ 469.673098][T11078] ? ns_capable+0x8a/0xf0 [ 469.673121][T11078] rtnl_newlink+0x16d6/0x1c70 [ 469.673158][T11078] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.673180][T11078] ? is_bpf_text_address+0x26/0x2b0 [ 469.673212][T11078] ? is_bpf_text_address+0x292/0x2b0 [ 469.673244][T11078] ? __lock_acquire+0xaac/0xd20 [ 469.673285][T11078] ? __lock_acquire+0xaac/0xd20 [ 469.673332][T11078] ? is_bpf_text_address+0x26/0x2b0 [ 469.673364][T11078] ? is_bpf_text_address+0x292/0x2b0 [ 469.673390][T11078] ? is_bpf_text_address+0x26/0x2b0 [ 469.673424][T11078] ? aa_get_newest_label+0xf7/0x5d0 [ 469.673448][T11078] ? __lock_acquire+0xaac/0xd20 [ 469.673499][T11078] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.673518][T11078] rtnetlink_rcv_msg+0x7cc/0xb70 [ 469.673538][T11078] ? kasan_save_track+0x4f/0x80 [ 469.673567][T11078] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 469.673586][T11078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.673607][T11078] ? __lock_acquire+0xaac/0xd20 [ 469.673648][T11078] netlink_rcv_skb+0x219/0x490 [ 469.673671][T11078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.673692][T11078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.673732][T11078] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.673753][T11078] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.673780][T11078] netlink_unicast+0x758/0x8d0 [ 469.673824][T11078] netlink_sendmsg+0x805/0xb30 [ 469.673856][T11078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.673882][T11078] ? aa_sock_msg_perm+0x94/0x160 [ 469.673905][T11078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.673926][T11078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.673950][T11078] __sock_sendmsg+0x219/0x270 [ 469.673985][T11078] ____sys_sendmsg+0x505/0x830 [ 469.674018][T11078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.674053][T11078] ? import_iovec+0x74/0xa0 [ 469.674084][T11078] ___sys_sendmsg+0x21f/0x2a0 [ 469.674113][T11078] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.674179][T11078] ? __fget_files+0x2a/0x420 [ 469.674203][T11078] ? __fget_files+0x3a0/0x420 [ 469.674241][T11078] __x64_sys_sendmsg+0x19b/0x260 [ 469.674269][T11078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.674314][T11078] ? do_syscall_64+0xba/0x210 [ 469.674343][T11078] do_syscall_64+0xf6/0x210 [ 469.674368][T11078] ? clear_bhb_loop+0x45/0xa0 [ 469.674392][T11078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.674412][T11078] RIP: 0033:0x7f2e3198e969 [ 469.674431][T11078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.674448][T11078] RSP: 002b:00007f2e327ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.674470][T11078] RAX: ffffffffffffffda RBX: 00007f2e31bb5fa0 RCX: 00007f2e3198e969 [ 469.674484][T11078] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 469.674497][T11078] RBP: 00007f2e327ef090 R08: 0000000000000000 R09: 0000000000000000 [ 469.674509][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.674521][T11078] R13: 0000000000000000 R14: 00007f2e31bb5fa0 R15: 00007f2e31cdfa28 [ 469.674560][T11078] [ 470.086449][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.231944][ T1206] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 470.305555][T10580] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 470.322912][T10580] usb 4-1: USB disconnect, device number 96 [ 470.356320][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.368267][T11082] program syz.5.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.439865][T11073] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[11073] [ 470.443314][T11082] program syz.5.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.459680][T11082] program syz.5.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.469151][T11082] program syz.5.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.478678][T11082] program syz.5.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.488109][T11082] program syz.5.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.547537][T11073] binder: BINDER_SET_CONTEXT_MGR already set [ 470.554863][T11073] binder: 11072:11073 ioctl 4018620d 200000000040 returned -16 [ 470.570346][T11085] delete_channel: no stack [ 470.578266][ T5919] usb 3-1: USB disconnect, device number 85 [ 470.762714][ T1206] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 470.902436][ T1206] usb 2-1: device descriptor read/64, error -71 [ 471.262386][ T1206] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 471.562907][ T1206] usb 2-1: device descriptor read/64, error -71 [ 471.675173][ T1206] usb usb2-port1: attempt power cycle [ 472.072361][ T1206] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 472.102030][ T1206] usb 2-1: device descriptor read/8, error -71 [ 472.245807][T10580] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 472.342508][ T1206] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 472.364675][ T1206] usb 2-1: device descriptor read/8, error -71 [ 472.492516][ T1206] usb usb2-port1: unable to enumerate USB device [ 472.503979][T10580] usb 1-1: unable to get BOS descriptor set [ 472.515762][T10580] usb 1-1: not running at top speed; connect to a high speed hub [ 472.568639][T10580] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.627427][T10580] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 472.680651][T10580] usb 1-1: New USB device found, idVendor=0519, idProduct=a4b8, bcdDevice= e.40 [ 472.709148][T10580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.731398][T10580] usb 1-1: Product: syz [ 472.740704][T10580] usb 1-1: Manufacturer: syz [ 472.852342][T10580] usb 1-1: SerialNumber: syz [ 472.895959][T11109] fuse: Bad value for 'fd' [ 472.951001][T11111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.984246][T11111] batadv_slave_1: entered promiscuous mode [ 473.004557][T11111] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1207'. [ 473.360019][ T5888] usb 1-1: USB disconnect, device number 89 [ 473.532776][T10580] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 473.694409][T10580] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 473.707171][T10580] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 473.731314][T10580] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 473.760903][T10580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.769160][T10580] usb 6-1: Product: syz [ 473.796947][T10580] usb 6-1: Manufacturer: syz [ 473.801615][T10580] usb 6-1: SerialNumber: syz [ 473.806444][ T5888] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 473.835680][T10580] usb 6-1: config 0 descriptor?? [ 473.872019][ T5919] IPVS: starting estimator thread 0... [ 473.886908][T11125] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1212'. [ 473.932530][ T1206] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 473.982390][T11126] IPVS: using max 29 ests per chain, 69600 per kthread [ 473.992415][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 474.006154][ T5888] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 474.019249][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.029955][ T5888] usb 1-1: config 0 descriptor?? [ 474.093084][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 474.118829][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.142314][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.152163][ T1206] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 474.166247][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.186470][ T1206] usb 3-1: config 0 descriptor?? [ 474.232490][ T5919] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 474.248924][ T5888] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 474.392390][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 474.400657][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.413712][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.426396][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.436275][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.444551][ T5919] usb 4-1: Product: syz [ 474.449231][ T5919] usb 4-1: Manufacturer: syz [ 474.454906][ T5919] usb 4-1: SerialNumber: syz [ 474.637680][ T1206] nzxt-kraken2 0003:1E71:170E.001E: collection stack underflow [ 474.649696][ T1206] nzxt-kraken2 0003:1E71:170E.001E: item 0 4 0 12 parsing failed [ 474.661932][ T1206] nzxt-kraken2 0003:1E71:170E.001E: hid parse failed with -22 [ 474.670499][ T1206] nzxt-kraken2 0003:1E71:170E.001E: probe with driver nzxt-kraken2 failed with error -22 [ 474.852146][ T1206] usb 3-1: USB disconnect, device number 86 [ 474.895835][ T5919] usb 4-1: 0:2 : does not exist [ 474.927007][T10580] usb 6-1: Firmware version (0.0) predates our first public release. [ 474.946624][T10580] usb 6-1: Please update to version 0.2 or newer [ 475.062134][T11138] FAULT_INJECTION: forcing a failure. [ 475.062134][T11138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.078040][T11138] CPU: 0 UID: 0 PID: 11138 Comm: syz.1.1215 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 475.078073][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 475.078095][T11138] Call Trace: [ 475.078105][T11138] [ 475.078115][T11138] dump_stack_lvl+0x189/0x250 [ 475.078150][T11138] ? __lock_acquire+0xaac/0xd20 [ 475.078182][T11138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.078212][T11138] ? __pfx__printk+0x10/0x10 [ 475.078233][T11138] ? __might_fault+0xb0/0x130 [ 475.078271][T11138] should_fail_ex+0x414/0x560 [ 475.078309][T11138] _copy_from_user+0x2d/0xb0 [ 475.078339][T11138] dev_ethtool+0xd0/0x1990 [ 475.078372][T11138] ? __lock_acquire+0xaac/0xd20 [ 475.078404][T11138] ? __pfx_dev_ethtool+0x10/0x10 [ 475.078442][T11138] ? dev_load+0x21/0x1f0 [ 475.078465][T11138] ? dev_load+0x21/0x1f0 [ 475.078486][T11138] dev_ioctl+0x392/0x1150 [ 475.078511][T11138] sock_do_ioctl+0x22c/0x300 [ 475.078544][T11138] ? __pfx_sock_do_ioctl+0x10/0x10 [ 475.078592][T11138] sock_ioctl+0x576/0x790 [ 475.078625][T11138] ? __pfx_sock_ioctl+0x10/0x10 [ 475.078659][T11138] ? __fget_files+0x3a0/0x420 [ 475.078685][T11138] ? __fget_files+0x2a/0x420 [ 475.078715][T11138] ? bpf_lsm_file_ioctl+0x9/0x20 [ 475.078742][T11138] ? __pfx_sock_ioctl+0x10/0x10 [ 475.078772][T11138] __se_sys_ioctl+0xf9/0x170 [ 475.078795][T11138] do_syscall_64+0xf6/0x210 [ 475.078821][T11138] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 475.078843][T11138] ? clear_bhb_loop+0x45/0xa0 [ 475.078868][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.078889][T11138] RIP: 0033:0x7f2e3198e969 [ 475.078909][T11138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.078927][T11138] RSP: 002b:00007f2e327ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.078949][T11138] RAX: ffffffffffffffda RBX: 00007f2e31bb5fa0 RCX: 00007f2e3198e969 [ 475.078965][T11138] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 475.078978][T11138] RBP: 00007f2e327ef090 R08: 0000000000000000 R09: 0000000000000000 [ 475.078991][T11138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.079003][T11138] R13: 0000000000000000 R14: 00007f2e31bb5fa0 R15: 00007f2e31cdfa28 [ 475.079036][T11138] [ 475.677096][T10580] usb 4-1: USB disconnect, device number 97 [ 475.983874][ T5888] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 476.006307][ T5888] asix 1-1:0.0: probe with driver asix failed with error -71 [ 476.073623][ T5888] usb 1-1: USB disconnect, device number 90 [ 476.252792][T11161] usb 6-1: USB disconnect, device number 32 [ 476.271293][T11154] [ 476.274024][T11154] ============================= [ 476.278904][T11154] WARNING: suspicious RCU usage [ 476.283847][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 476.290983][T11154] ----------------------------- [ 476.295905][T11154] net/ipv6/ip6_fib.c:2024 suspicious rcu_dereference_protected() usage! [ 476.304316][T11154] [ 476.304316][T11154] other info that might help us debug this: [ 476.304316][T11154] [ 476.314637][T11154] [ 476.314637][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 476.322773][T11154] 3 locks held by syz.2.1220/11154: [ 476.328013][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 476.337205][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 476.346856][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 476.356548][T11154] [ 476.356548][T11154] stack backtrace: [ 476.362514][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 476.362548][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 476.362563][T11154] Call Trace: [ 476.362574][T11154] [ 476.362584][T11154] dump_stack_lvl+0x189/0x250 [ 476.362625][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.362658][T11154] ? __pfx__printk+0x10/0x10 [ 476.362684][T11154] ? print_lock_name+0xde/0x100 [ 476.362724][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 476.362762][T11154] fib6_del+0x1516/0x1550 [ 476.362788][T11154] ? fib6_del+0x681/0x1550 [ 476.362834][T11154] ? __pfx_fib6_del+0x10/0x10 [ 476.362854][T11154] ? unwind_get_return_address+0x4d/0x90 [ 476.362880][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 476.362903][T11154] ? arch_stack_walk+0xfc/0x150 [ 476.362958][T11154] fib6_clean_node+0x29f/0x590 [ 476.362989][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 476.363020][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 476.363056][T11154] fib6_walk_continue+0x678/0x910 [ 476.363093][T11154] fib6_walk+0x149/0x290 [ 476.363117][T11154] __fib6_clean_all+0x234/0x380 [ 476.363136][T11154] ? __fib6_clean_all+0x9b/0x380 [ 476.363158][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 476.363181][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 476.363207][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 476.363228][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 476.363252][T11154] ? __lock_acquire+0xaac/0xd20 [ 476.363290][T11154] rt6_disable_ip+0x120/0x720 [ 476.363320][T11154] ? rcu_is_watching+0x15/0xb0 [ 476.363350][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 476.363385][T11154] addrconf_ifdown+0x15d/0x1880 [ 476.363417][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 476.363446][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 476.363471][T11154] ? tls_dev_event+0x717/0xec0 [ 476.363499][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 476.363545][T11154] addrconf_notify+0x1bc/0x1010 [ 476.363575][T11154] notifier_call_chain+0x1b3/0x3e0 [ 476.363604][T11154] __dev_notify_flags+0x18d/0x2e0 [ 476.363633][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 476.363655][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 476.363708][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 476.363730][T11154] ? netif_state_change+0x256/0x3a0 [ 476.363754][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 476.363775][T11154] ? kernel_text_address+0xa5/0xe0 [ 476.363816][T11154] netif_change_flags+0xe8/0x1a0 [ 476.363848][T11154] do_setlink+0xcb9/0x40d0 [ 476.363892][T11154] ? __pfx_do_setlink+0x10/0x10 [ 476.363921][T11154] ? __lock_acquire+0xaac/0xd20 [ 476.363956][T11154] ? __mutex_trylock_common+0x153/0x260 [ 476.363982][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 476.364009][T11154] ? rcu_is_watching+0x15/0xb0 [ 476.364040][T11154] ? trace_contention_end+0x39/0x120 [ 476.364063][T11154] ? __mutex_lock+0x330/0xe80 [ 476.364090][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 476.364117][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 476.364138][T11154] ? rcu_is_watching+0x15/0xb0 [ 476.364170][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 476.364206][T11154] ? ns_capable+0x8a/0xf0 [ 476.364227][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 476.364257][T11154] rtnl_newlink+0x149f/0x1c70 [ 476.364277][T11154] ? kasan_save_track+0x3e/0x80 [ 476.364313][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.364368][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 476.364391][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.364422][T11154] ? nlmon_xmit+0xb0/0x100 [ 476.364449][T11154] ? kmem_cache_free+0x192/0x3f0 [ 476.364483][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 476.364514][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.364539][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 476.364571][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 476.364611][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 476.364637][T11154] ? __lock_acquire+0xaac/0xd20 [ 476.364690][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.364712][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 476.364738][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 476.364758][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.364785][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 476.364813][T11154] ? __copy_skb_header+0xa7/0x550 [ 476.364850][T11154] netlink_rcv_skb+0x219/0x490 [ 476.364874][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.364899][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.364944][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.364966][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.364996][T11154] netlink_unicast+0x758/0x8d0 [ 476.365042][T11154] netlink_sendmsg+0x805/0xb30 [ 476.365076][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.365102][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 476.365126][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.365149][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.365173][T11154] __sock_sendmsg+0x219/0x270 [ 476.365209][T11154] ____sys_sendmsg+0x505/0x830 [ 476.365243][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.365280][T11154] ? import_iovec+0x74/0xa0 [ 476.365311][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 476.365339][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.365407][T11154] ? __fget_files+0x2a/0x420 [ 476.365433][T11154] ? __fget_files+0x3a0/0x420 [ 476.365471][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 476.365500][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.365546][T11154] ? do_syscall_64+0xba/0x210 [ 476.365575][T11154] do_syscall_64+0xf6/0x210 [ 476.365601][T11154] ? clear_bhb_loop+0x45/0xa0 [ 476.365627][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.365647][T11154] RIP: 0033:0x7f6f60b8e969 [ 476.365666][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.365685][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.365708][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 476.365724][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 476.365737][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 476.365750][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.365763][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 476.365802][T11154] [ 476.365824][T11154] [ 476.974506][T11154] ============================= [ 476.979385][T11154] WARNING: suspicious RCU usage [ 476.984316][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 476.991471][T11154] ----------------------------- [ 476.996435][T11154] net/ipv6/ip6_fib.c:2036 suspicious rcu_dereference_protected() usage! [ 477.004830][T11154] [ 477.004830][T11154] other info that might help us debug this: [ 477.004830][T11154] [ 477.015141][T11154] [ 477.015141][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 477.023276][T11154] 3 locks held by syz.2.1220/11154: [ 477.028511][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 477.037711][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 477.047412][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 477.057118][T11154] [ 477.057118][T11154] stack backtrace: [ 477.063079][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 477.063106][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 477.063120][T11154] Call Trace: [ 477.063129][T11154] [ 477.063139][T11154] dump_stack_lvl+0x189/0x250 [ 477.063178][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.063209][T11154] ? __pfx__printk+0x10/0x10 [ 477.063234][T11154] ? print_lock_name+0xde/0x100 [ 477.063274][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 477.063312][T11154] fib6_del+0x595/0x1550 [ 477.063337][T11154] ? fib6_del+0x681/0x1550 [ 477.063375][T11154] ? __pfx_fib6_del+0x10/0x10 [ 477.063395][T11154] ? unwind_get_return_address+0x4d/0x90 [ 477.063420][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.063443][T11154] ? arch_stack_walk+0xfc/0x150 [ 477.063488][T11154] fib6_clean_node+0x29f/0x590 [ 477.063515][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 477.063547][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.063585][T11154] fib6_walk_continue+0x678/0x910 [ 477.063624][T11154] fib6_walk+0x149/0x290 [ 477.063662][T11154] __fib6_clean_all+0x234/0x380 [ 477.063682][T11154] ? __fib6_clean_all+0x9b/0x380 [ 477.063704][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 477.063728][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 477.063761][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 477.063783][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 477.063808][T11154] ? __lock_acquire+0xaac/0xd20 [ 477.063847][T11154] rt6_disable_ip+0x120/0x720 [ 477.063878][T11154] ? rcu_is_watching+0x15/0xb0 [ 477.063909][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 477.063945][T11154] addrconf_ifdown+0x15d/0x1880 [ 477.063979][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 477.064029][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 477.064056][T11154] ? tls_dev_event+0x717/0xec0 [ 477.064085][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 477.064134][T11154] addrconf_notify+0x1bc/0x1010 [ 477.064165][T11154] notifier_call_chain+0x1b3/0x3e0 [ 477.064195][T11154] __dev_notify_flags+0x18d/0x2e0 [ 477.064226][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 477.064250][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 477.064282][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 477.064306][T11154] ? netif_state_change+0x256/0x3a0 [ 477.064330][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 477.064352][T11154] ? kernel_text_address+0xa5/0xe0 [ 477.064384][T11154] netif_change_flags+0xe8/0x1a0 [ 477.064416][T11154] do_setlink+0xcb9/0x40d0 [ 477.064459][T11154] ? __pfx_do_setlink+0x10/0x10 [ 477.064489][T11154] ? __lock_acquire+0xaac/0xd20 [ 477.064524][T11154] ? __mutex_trylock_common+0x153/0x260 [ 477.064550][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 477.064577][T11154] ? rcu_is_watching+0x15/0xb0 [ 477.064610][T11154] ? trace_contention_end+0x39/0x120 [ 477.064632][T11154] ? __mutex_lock+0x330/0xe80 [ 477.064660][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 477.064688][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 477.064709][T11154] ? rcu_is_watching+0x15/0xb0 [ 477.064753][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 477.064790][T11154] ? ns_capable+0x8a/0xf0 [ 477.064811][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 477.064840][T11154] rtnl_newlink+0x149f/0x1c70 [ 477.064861][T11154] ? kasan_save_track+0x3e/0x80 [ 477.064897][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.064953][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 477.064977][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.065008][T11154] ? nlmon_xmit+0xb0/0x100 [ 477.065035][T11154] ? kmem_cache_free+0x192/0x3f0 [ 477.065069][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.065102][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.065127][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.065159][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 477.065199][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 477.065225][T11154] ? __lock_acquire+0xaac/0xd20 [ 477.065279][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.065301][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 477.065327][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 477.065349][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.065376][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 477.065396][T11154] ? __copy_skb_header+0xa7/0x550 [ 477.065435][T11154] netlink_rcv_skb+0x219/0x490 [ 477.065459][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.065483][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.065529][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.065550][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.065580][T11154] netlink_unicast+0x758/0x8d0 [ 477.065624][T11154] netlink_sendmsg+0x805/0xb30 [ 477.065659][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.065687][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 477.065711][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.065743][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.065768][T11154] __sock_sendmsg+0x219/0x270 [ 477.065806][T11154] ____sys_sendmsg+0x505/0x830 [ 477.065840][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.065879][T11154] ? import_iovec+0x74/0xa0 [ 477.065911][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 477.065941][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.066010][T11154] ? __fget_files+0x2a/0x420 [ 477.066036][T11154] ? __fget_files+0x3a0/0x420 [ 477.066075][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 477.066106][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.066153][T11154] ? do_syscall_64+0xba/0x210 [ 477.066184][T11154] do_syscall_64+0xf6/0x210 [ 477.066212][T11154] ? clear_bhb_loop+0x45/0xa0 [ 477.066238][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.066260][T11154] RIP: 0033:0x7f6f60b8e969 [ 477.066280][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.066299][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.066320][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 477.066337][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 477.066350][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 477.066364][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.066376][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 477.066409][T11154] [ 477.066419][T11154] [ 477.672282][T11154] ============================= [ 477.677140][T11154] WARNING: suspicious RCU usage [ 477.681980][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 477.689134][T11154] ----------------------------- [ 477.693999][T11154] net/ipv6/ip6_fib.c:1922 suspicious rcu_dereference_protected() usage! [ 477.702345][T11154] [ 477.702345][T11154] other info that might help us debug this: [ 477.702345][T11154] [ 477.712607][T11154] [ 477.712607][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 477.720667][T11154] 3 locks held by syz.2.1220/11154: [ 477.725887][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 477.734979][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 477.744500][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 477.754109][T11154] [ 477.754109][T11154] stack backtrace: [ 477.759997][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 477.760018][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 477.760029][T11154] Call Trace: [ 477.760037][T11154] [ 477.760044][T11154] dump_stack_lvl+0x189/0x250 [ 477.760072][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.760095][T11154] ? __pfx__printk+0x10/0x10 [ 477.760114][T11154] ? print_lock_name+0xde/0x100 [ 477.760143][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 477.760170][T11154] fib6_del+0x651/0x1550 [ 477.760189][T11154] ? fib6_del+0x681/0x1550 [ 477.760215][T11154] ? __pfx_fib6_del+0x10/0x10 [ 477.760229][T11154] ? unwind_get_return_address+0x4d/0x90 [ 477.760248][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.760265][T11154] ? arch_stack_walk+0xfc/0x150 [ 477.760296][T11154] fib6_clean_node+0x29f/0x590 [ 477.760316][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 477.760339][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.760368][T11154] fib6_walk_continue+0x678/0x910 [ 477.760395][T11154] fib6_walk+0x149/0x290 [ 477.760413][T11154] __fib6_clean_all+0x234/0x380 [ 477.760429][T11154] ? __fib6_clean_all+0x9b/0x380 [ 477.760458][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 477.760476][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 477.760496][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 477.760513][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 477.760531][T11154] ? __lock_acquire+0xaac/0xd20 [ 477.760559][T11154] rt6_disable_ip+0x120/0x720 [ 477.760582][T11154] ? rcu_is_watching+0x15/0xb0 [ 477.760606][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 477.760632][T11154] addrconf_ifdown+0x15d/0x1880 [ 477.760658][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 477.760685][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 477.760704][T11154] ? tls_dev_event+0x717/0xec0 [ 477.760726][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 477.760762][T11154] addrconf_notify+0x1bc/0x1010 [ 477.760784][T11154] notifier_call_chain+0x1b3/0x3e0 [ 477.760806][T11154] __dev_notify_flags+0x18d/0x2e0 [ 477.760828][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 477.760845][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 477.760868][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 477.760885][T11154] ? netif_state_change+0x256/0x3a0 [ 477.760903][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 477.760919][T11154] ? kernel_text_address+0xa5/0xe0 [ 477.760942][T11154] netif_change_flags+0xe8/0x1a0 [ 477.760965][T11154] do_setlink+0xcb9/0x40d0 [ 477.760995][T11154] ? __pfx_do_setlink+0x10/0x10 [ 477.761016][T11154] ? __lock_acquire+0xaac/0xd20 [ 477.761042][T11154] ? __mutex_trylock_common+0x153/0x260 [ 477.761061][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 477.761080][T11154] ? rcu_is_watching+0x15/0xb0 [ 477.761103][T11154] ? trace_contention_end+0x39/0x120 [ 477.761119][T11154] ? __mutex_lock+0x330/0xe80 [ 477.761139][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 477.761160][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 477.761175][T11154] ? rcu_is_watching+0x15/0xb0 [ 477.761199][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 477.761224][T11154] ? ns_capable+0x8a/0xf0 [ 477.761239][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 477.761260][T11154] rtnl_newlink+0x149f/0x1c70 [ 477.761276][T11154] ? kasan_save_track+0x3e/0x80 [ 477.761302][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.761341][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 477.761357][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.761380][T11154] ? nlmon_xmit+0xb0/0x100 [ 477.761400][T11154] ? kmem_cache_free+0x192/0x3f0 [ 477.761424][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.761448][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.761467][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.761491][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 477.761521][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 477.761539][T11154] ? __lock_acquire+0xaac/0xd20 [ 477.761578][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 477.761594][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 477.761613][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 477.761628][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.761648][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 477.761663][T11154] ? __copy_skb_header+0xa7/0x550 [ 477.761696][T11154] netlink_rcv_skb+0x219/0x490 [ 477.761714][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.761731][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.761762][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.761778][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.761799][T11154] netlink_unicast+0x758/0x8d0 [ 477.761832][T11154] netlink_sendmsg+0x805/0xb30 [ 477.761856][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.761876][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 477.761893][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.761911][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.761929][T11154] __sock_sendmsg+0x219/0x270 [ 477.761956][T11154] ____sys_sendmsg+0x505/0x830 [ 477.761980][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.762007][T11154] ? import_iovec+0x74/0xa0 [ 477.762031][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 477.762053][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.762101][T11154] ? __fget_files+0x2a/0x420 [ 477.762120][T11154] ? __fget_files+0x3a0/0x420 [ 477.762147][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 477.762170][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.762202][T11154] ? do_syscall_64+0xba/0x210 [ 477.762225][T11154] do_syscall_64+0xf6/0x210 [ 477.762254][T11154] ? clear_bhb_loop+0x45/0xa0 [ 477.762280][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.762301][T11154] RIP: 0033:0x7f6f60b8e969 [ 477.762322][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.762336][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.762351][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 477.762364][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 477.762374][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 477.762383][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.762392][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 477.762415][T11154] [ 478.363960][T11154] [ 478.366293][T11154] ============================= [ 478.371133][T11154] WARNING: suspicious RCU usage [ 478.376007][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 478.383136][T11154] ----------------------------- [ 478.388165][T11154] net/ipv6/ip6_fib.c:1931 suspicious rcu_dereference_protected() usage! [ 478.396507][T11154] [ 478.396507][T11154] other info that might help us debug this: [ 478.396507][T11154] [ 478.406756][T11154] [ 478.406756][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 478.414842][T11154] 3 locks held by syz.2.1220/11154: [ 478.420039][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 478.429128][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 478.438658][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 478.448272][T11154] [ 478.448272][T11154] stack backtrace: [ 478.454180][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 478.454202][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 478.454212][T11154] Call Trace: [ 478.454220][T11154] [ 478.454229][T11154] dump_stack_lvl+0x189/0x250 [ 478.454257][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.454280][T11154] ? __pfx__printk+0x10/0x10 [ 478.454299][T11154] ? print_lock_name+0xde/0x100 [ 478.454328][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 478.454356][T11154] fib6_del+0x67a/0x1550 [ 478.454374][T11154] ? fib6_del+0x681/0x1550 [ 478.454401][T11154] ? __pfx_fib6_del+0x10/0x10 [ 478.454415][T11154] ? unwind_get_return_address+0x4d/0x90 [ 478.454434][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 478.454451][T11154] ? arch_stack_walk+0xfc/0x150 [ 478.454483][T11154] fib6_clean_node+0x29f/0x590 [ 478.454502][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 478.454524][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 478.454553][T11154] fib6_walk_continue+0x678/0x910 [ 478.454585][T11154] fib6_walk+0x149/0x290 [ 478.454603][T11154] __fib6_clean_all+0x234/0x380 [ 478.454619][T11154] ? __fib6_clean_all+0x9b/0x380 [ 478.454635][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 478.454653][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 478.454673][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 478.454689][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 478.454708][T11154] ? __lock_acquire+0xaac/0xd20 [ 478.454737][T11154] rt6_disable_ip+0x120/0x720 [ 478.454760][T11154] ? rcu_is_watching+0x15/0xb0 [ 478.454783][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 478.454809][T11154] addrconf_ifdown+0x15d/0x1880 [ 478.454834][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 478.454856][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 478.454876][T11154] ? tls_dev_event+0x717/0xec0 [ 478.454898][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 478.454933][T11154] addrconf_notify+0x1bc/0x1010 [ 478.454956][T11154] notifier_call_chain+0x1b3/0x3e0 [ 478.454978][T11154] __dev_notify_flags+0x18d/0x2e0 [ 478.455000][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 478.455017][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 478.455040][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 478.455057][T11154] ? netif_state_change+0x256/0x3a0 [ 478.455075][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 478.455090][T11154] ? kernel_text_address+0xa5/0xe0 [ 478.455113][T11154] netif_change_flags+0xe8/0x1a0 [ 478.455136][T11154] do_setlink+0xcb9/0x40d0 [ 478.455166][T11154] ? __pfx_do_setlink+0x10/0x10 [ 478.455187][T11154] ? __lock_acquire+0xaac/0xd20 [ 478.455213][T11154] ? __mutex_trylock_common+0x153/0x260 [ 478.455231][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 478.455250][T11154] ? rcu_is_watching+0x15/0xb0 [ 478.455274][T11154] ? trace_contention_end+0x39/0x120 [ 478.455290][T11154] ? __mutex_lock+0x330/0xe80 [ 478.455310][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 478.455330][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 478.455346][T11154] ? rcu_is_watching+0x15/0xb0 [ 478.455369][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 478.455395][T11154] ? ns_capable+0x8a/0xf0 [ 478.455410][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 478.455432][T11154] rtnl_newlink+0x149f/0x1c70 [ 478.455446][T11154] ? kasan_save_track+0x3e/0x80 [ 478.455472][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 478.455511][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 478.455527][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.455549][T11154] ? nlmon_xmit+0xb0/0x100 [ 478.455575][T11154] ? kmem_cache_free+0x192/0x3f0 [ 478.455600][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 478.455624][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.455643][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 478.455666][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 478.455696][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 478.455715][T11154] ? __lock_acquire+0xaac/0xd20 [ 478.455753][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 478.455769][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 478.455788][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 478.455803][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.455823][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 478.455838][T11154] ? __copy_skb_header+0xa7/0x550 [ 478.455866][T11154] netlink_rcv_skb+0x219/0x490 [ 478.455884][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.455901][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.455932][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.455948][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.455969][T11154] netlink_unicast+0x758/0x8d0 [ 478.456002][T11154] netlink_sendmsg+0x805/0xb30 [ 478.456026][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.456046][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 478.456063][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.456081][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.456098][T11154] __sock_sendmsg+0x219/0x270 [ 478.456126][T11154] ____sys_sendmsg+0x505/0x830 [ 478.456151][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.456178][T11154] ? import_iovec+0x74/0xa0 [ 478.456202][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 478.456224][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.456272][T11154] ? __fget_files+0x2a/0x420 [ 478.456291][T11154] ? __fget_files+0x3a0/0x420 [ 478.456319][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 478.456341][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.456374][T11154] ? do_syscall_64+0xba/0x210 [ 478.456396][T11154] do_syscall_64+0xf6/0x210 [ 478.456416][T11154] ? clear_bhb_loop+0x45/0xa0 [ 478.456436][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.456451][T11154] RIP: 0033:0x7f6f60b8e969 [ 478.456466][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.456480][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.456496][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 478.456508][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 478.456517][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 478.456527][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.456537][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 478.456560][T11154] [ 478.456573][T11154] [ 479.062595][T11154] ============================= [ 479.067442][T11154] WARNING: suspicious RCU usage [ 479.072331][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 479.079451][T11154] ----------------------------- [ 479.084320][T11154] net/ipv6/ip6_fib.c:1976 suspicious rcu_dereference_protected() usage! [ 479.092667][T11154] [ 479.092667][T11154] other info that might help us debug this: [ 479.092667][T11154] [ 479.102915][T11154] [ 479.102915][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 479.110978][T11154] 4 locks held by syz.2.1220/11154: [ 479.116201][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 479.125303][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 479.134829][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 479.144456][T11154] #3: ffff88805ddacd38 (&net->ipv6.fib6_walker_lock){++..}-{3:3}, at: fib6_del+0xb3f/0x1550 [ 479.154677][T11154] [ 479.154677][T11154] stack backtrace: [ 479.160574][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 479.160596][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 479.160606][T11154] Call Trace: [ 479.160615][T11154] [ 479.160623][T11154] dump_stack_lvl+0x189/0x250 [ 479.160651][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.160674][T11154] ? __pfx__printk+0x10/0x10 [ 479.160688][T11154] ? fib6_del+0xb3f/0x1550 [ 479.160708][T11154] ? print_lock_name+0xde/0x100 [ 479.160737][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 479.160765][T11154] fib6_del+0xd5c/0x1550 [ 479.160782][T11154] ? fib6_del+0x681/0x1550 [ 479.160809][T11154] ? __pfx_fib6_del+0x10/0x10 [ 479.160823][T11154] ? unwind_get_return_address+0x4d/0x90 [ 479.160843][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 479.160860][T11154] ? arch_stack_walk+0xfc/0x150 [ 479.160891][T11154] fib6_clean_node+0x29f/0x590 [ 479.160911][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 479.160934][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.160962][T11154] fib6_walk_continue+0x678/0x910 [ 479.160989][T11154] fib6_walk+0x149/0x290 [ 479.161008][T11154] __fib6_clean_all+0x234/0x380 [ 479.161023][T11154] ? __fib6_clean_all+0x9b/0x380 [ 479.161039][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 479.161058][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 479.161077][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 479.161094][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 479.161112][T11154] ? __lock_acquire+0xaac/0xd20 [ 479.161140][T11154] rt6_disable_ip+0x120/0x720 [ 479.161164][T11154] ? rcu_is_watching+0x15/0xb0 [ 479.161187][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 479.161213][T11154] addrconf_ifdown+0x15d/0x1880 [ 479.161238][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 479.161261][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 479.161280][T11154] ? tls_dev_event+0x717/0xec0 [ 479.161302][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 479.161337][T11154] addrconf_notify+0x1bc/0x1010 [ 479.161359][T11154] notifier_call_chain+0x1b3/0x3e0 [ 479.161381][T11154] __dev_notify_flags+0x18d/0x2e0 [ 479.161403][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 479.161419][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 479.161443][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 479.161460][T11154] ? netif_state_change+0x256/0x3a0 [ 479.161477][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 479.161493][T11154] ? kernel_text_address+0xa5/0xe0 [ 479.161516][T11154] netif_change_flags+0xe8/0x1a0 [ 479.161539][T11154] do_setlink+0xcb9/0x40d0 [ 479.161575][T11154] ? __pfx_do_setlink+0x10/0x10 [ 479.161596][T11154] ? __lock_acquire+0xaac/0xd20 [ 479.161622][T11154] ? __mutex_trylock_common+0x153/0x260 [ 479.161640][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 479.161659][T11154] ? rcu_is_watching+0x15/0xb0 [ 479.161683][T11154] ? trace_contention_end+0x39/0x120 [ 479.161699][T11154] ? __mutex_lock+0x330/0xe80 [ 479.161719][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 479.161740][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 479.161755][T11154] ? rcu_is_watching+0x15/0xb0 [ 479.161780][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 479.161805][T11154] ? ns_capable+0x8a/0xf0 [ 479.161820][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 479.161841][T11154] rtnl_newlink+0x149f/0x1c70 [ 479.161857][T11154] ? kasan_save_track+0x3e/0x80 [ 479.161882][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.161922][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 479.161938][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.161960][T11154] ? nlmon_xmit+0xb0/0x100 [ 479.161980][T11154] ? kmem_cache_free+0x192/0x3f0 [ 479.162006][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.162029][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.162047][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.162071][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 479.162103][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 479.162121][T11154] ? __lock_acquire+0xaac/0xd20 [ 479.162160][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.162176][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 479.162196][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 479.162211][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.162230][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 479.162255][T11154] ? __copy_skb_header+0xa7/0x550 [ 479.162290][T11154] netlink_rcv_skb+0x219/0x490 [ 479.162314][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.162337][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.162381][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.162400][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.162421][T11154] netlink_unicast+0x758/0x8d0 [ 479.162454][T11154] netlink_sendmsg+0x805/0xb30 [ 479.162479][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.162498][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 479.162516][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.162533][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.162557][T11154] __sock_sendmsg+0x219/0x270 [ 479.162585][T11154] ____sys_sendmsg+0x505/0x830 [ 479.162609][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.162637][T11154] ? import_iovec+0x74/0xa0 [ 479.162661][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 479.162682][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.162730][T11154] ? __fget_files+0x2a/0x420 [ 479.162750][T11154] ? __fget_files+0x3a0/0x420 [ 479.162778][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 479.162800][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.162834][T11154] ? do_syscall_64+0xba/0x210 [ 479.162856][T11154] do_syscall_64+0xf6/0x210 [ 479.162876][T11154] ? clear_bhb_loop+0x45/0xa0 [ 479.162895][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.162911][T11154] RIP: 0033:0x7f6f60b8e969 [ 479.162925][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.162939][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.162955][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 479.162967][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 479.162977][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 479.162987][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.162996][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 479.163019][T11154] [ 479.768685][T11154] [ 479.771017][T11154] ============================= [ 479.775885][T11154] WARNING: suspicious RCU usage [ 479.780905][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 479.788120][T11154] ----------------------------- [ 479.792996][T11154] net/ipv6/ip6_fib.c:1806 suspicious rcu_dereference_protected() usage! [ 479.801323][T11154] [ 479.801323][T11154] other info that might help us debug this: [ 479.801323][T11154] [ 479.811579][T11154] [ 479.811579][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 479.819670][T11154] 3 locks held by syz.2.1220/11154: [ 479.824918][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 479.834018][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 479.843546][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 479.853157][T11154] [ 479.853157][T11154] stack backtrace: [ 479.859049][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 479.859070][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 479.859080][T11154] Call Trace: [ 479.859089][T11154] [ 479.859097][T11154] dump_stack_lvl+0x189/0x250 [ 479.859125][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.859148][T11154] ? __pfx__printk+0x10/0x10 [ 479.859168][T11154] ? print_lock_name+0xde/0x100 [ 479.859197][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 479.859224][T11154] fib6_repair_tree+0xdad/0x11c0 [ 479.859258][T11154] fib6_del+0xed2/0x1550 [ 479.859275][T11154] ? fib6_del+0x681/0x1550 [ 479.859303][T11154] ? __pfx_fib6_del+0x10/0x10 [ 479.859317][T11154] ? unwind_get_return_address+0x4d/0x90 [ 479.859336][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 479.859353][T11154] ? arch_stack_walk+0xfc/0x150 [ 479.859384][T11154] fib6_clean_node+0x29f/0x590 [ 479.859404][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 479.859427][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.859456][T11154] fib6_walk_continue+0x678/0x910 [ 479.859483][T11154] fib6_walk+0x149/0x290 [ 479.859505][T11154] __fib6_clean_all+0x234/0x380 [ 479.859521][T11154] ? __fib6_clean_all+0x9b/0x380 [ 479.859537][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 479.859555][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 479.859574][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 479.859590][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 479.859609][T11154] ? __lock_acquire+0xaac/0xd20 [ 479.859637][T11154] rt6_disable_ip+0x120/0x720 [ 479.859660][T11154] ? rcu_is_watching+0x15/0xb0 [ 479.859684][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 479.859709][T11154] addrconf_ifdown+0x15d/0x1880 [ 479.859735][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 479.859757][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 479.859776][T11154] ? tls_dev_event+0x717/0xec0 [ 479.859799][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 479.859834][T11154] addrconf_notify+0x1bc/0x1010 [ 479.859856][T11154] notifier_call_chain+0x1b3/0x3e0 [ 479.859878][T11154] __dev_notify_flags+0x18d/0x2e0 [ 479.859899][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 479.859916][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 479.859938][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 479.859955][T11154] ? netif_state_change+0x256/0x3a0 [ 479.859973][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 479.859988][T11154] ? kernel_text_address+0xa5/0xe0 [ 479.860012][T11154] netif_change_flags+0xe8/0x1a0 [ 479.860035][T11154] do_setlink+0xcb9/0x40d0 [ 479.860065][T11154] ? __pfx_do_setlink+0x10/0x10 [ 479.860086][T11154] ? __lock_acquire+0xaac/0xd20 [ 479.860112][T11154] ? __mutex_trylock_common+0x153/0x260 [ 479.860130][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 479.860150][T11154] ? rcu_is_watching+0x15/0xb0 [ 479.860173][T11154] ? trace_contention_end+0x39/0x120 [ 479.860189][T11154] ? __mutex_lock+0x330/0xe80 [ 479.860209][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 479.860230][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 479.860244][T11154] ? rcu_is_watching+0x15/0xb0 [ 479.860281][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 479.860306][T11154] ? ns_capable+0x8a/0xf0 [ 479.860321][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 479.860342][T11154] rtnl_newlink+0x149f/0x1c70 [ 479.860357][T11154] ? kasan_save_track+0x3e/0x80 [ 479.860384][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.860422][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 479.860438][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.860460][T11154] ? nlmon_xmit+0xb0/0x100 [ 479.860480][T11154] ? kmem_cache_free+0x192/0x3f0 [ 479.860509][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.860533][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.860551][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.860574][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 479.860604][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 479.860622][T11154] ? __lock_acquire+0xaac/0xd20 [ 479.860661][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.860676][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 479.860695][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 479.860710][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.860729][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 479.860745][T11154] ? __copy_skb_header+0xa7/0x550 [ 479.860772][T11154] netlink_rcv_skb+0x219/0x490 [ 479.860790][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.860807][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.860838][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.860854][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.860874][T11154] netlink_unicast+0x758/0x8d0 [ 479.860908][T11154] netlink_sendmsg+0x805/0xb30 [ 479.860932][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.860951][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 479.860969][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.860986][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.861004][T11154] __sock_sendmsg+0x219/0x270 [ 479.861031][T11154] ____sys_sendmsg+0x505/0x830 [ 479.861056][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.861083][T11154] ? import_iovec+0x74/0xa0 [ 479.861107][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 479.861129][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.861176][T11154] ? __fget_files+0x2a/0x420 [ 479.861197][T11154] ? __fget_files+0x3a0/0x420 [ 479.861225][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 479.861247][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.861280][T11154] ? do_syscall_64+0xba/0x210 [ 479.861302][T11154] do_syscall_64+0xf6/0x210 [ 479.861322][T11154] ? clear_bhb_loop+0x45/0xa0 [ 479.861341][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.861357][T11154] RIP: 0033:0x7f6f60b8e969 [ 479.861371][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.861386][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.861401][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 479.861413][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 479.861423][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 479.861433][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.861442][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 479.861465][T11154] [ 479.861472][T11154] [ 480.472141][T11154] ============================= [ 480.477107][T11154] WARNING: suspicious RCU usage [ 480.481959][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 480.489180][T11154] ----------------------------- [ 480.494043][T11154] net/ipv6/ip6_fib.c:1808 suspicious rcu_dereference_protected() usage! [ 480.502385][T11154] [ 480.502385][T11154] other info that might help us debug this: [ 480.502385][T11154] [ 480.512635][T11154] [ 480.512635][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 480.520700][T11154] 3 locks held by syz.2.1220/11154: [ 480.525927][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 480.535035][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 480.544562][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 480.554172][T11154] [ 480.554172][T11154] stack backtrace: [ 480.560097][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 480.560119][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 480.560129][T11154] Call Trace: [ 480.560138][T11154] [ 480.560146][T11154] dump_stack_lvl+0x189/0x250 [ 480.560174][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.560207][T11154] ? __pfx__printk+0x10/0x10 [ 480.560227][T11154] ? print_lock_name+0xde/0x100 [ 480.560256][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 480.560283][T11154] fib6_repair_tree+0xdd6/0x11c0 [ 480.560316][T11154] fib6_del+0xed2/0x1550 [ 480.560333][T11154] ? fib6_del+0x681/0x1550 [ 480.560360][T11154] ? __pfx_fib6_del+0x10/0x10 [ 480.560374][T11154] ? unwind_get_return_address+0x4d/0x90 [ 480.560401][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.560418][T11154] ? arch_stack_walk+0xfc/0x150 [ 480.560449][T11154] fib6_clean_node+0x29f/0x590 [ 480.560469][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 480.560492][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 480.560520][T11154] fib6_walk_continue+0x678/0x910 [ 480.560547][T11154] fib6_walk+0x149/0x290 [ 480.560565][T11154] __fib6_clean_all+0x234/0x380 [ 480.560581][T11154] ? __fib6_clean_all+0x9b/0x380 [ 480.560597][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 480.560616][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 480.560635][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 480.560652][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 480.560670][T11154] ? __lock_acquire+0xaac/0xd20 [ 480.560698][T11154] rt6_disable_ip+0x120/0x720 [ 480.560721][T11154] ? rcu_is_watching+0x15/0xb0 [ 480.560745][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 480.560770][T11154] addrconf_ifdown+0x15d/0x1880 [ 480.560796][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 480.560819][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 480.560838][T11154] ? tls_dev_event+0x717/0xec0 [ 480.560859][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 480.560895][T11154] addrconf_notify+0x1bc/0x1010 [ 480.560916][T11154] notifier_call_chain+0x1b3/0x3e0 [ 480.560938][T11154] __dev_notify_flags+0x18d/0x2e0 [ 480.560959][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 480.560977][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 480.560999][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 480.561017][T11154] ? netif_state_change+0x256/0x3a0 [ 480.561034][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 480.561049][T11154] ? kernel_text_address+0xa5/0xe0 [ 480.561072][T11154] netif_change_flags+0xe8/0x1a0 [ 480.561095][T11154] do_setlink+0xcb9/0x40d0 [ 480.561126][T11154] ? __pfx_do_setlink+0x10/0x10 [ 480.561147][T11154] ? __lock_acquire+0xaac/0xd20 [ 480.561173][T11154] ? __mutex_trylock_common+0x153/0x260 [ 480.561191][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 480.561210][T11154] ? rcu_is_watching+0x15/0xb0 [ 480.561234][T11154] ? trace_contention_end+0x39/0x120 [ 480.561250][T11154] ? __mutex_lock+0x330/0xe80 [ 480.561270][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 480.561291][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 480.561306][T11154] ? rcu_is_watching+0x15/0xb0 [ 480.561330][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 480.561355][T11154] ? ns_capable+0x8a/0xf0 [ 480.561370][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 480.561396][T11154] rtnl_newlink+0x149f/0x1c70 [ 480.561412][T11154] ? kasan_save_track+0x3e/0x80 [ 480.561438][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 480.561476][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 480.561493][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.561515][T11154] ? nlmon_xmit+0xb0/0x100 [ 480.561535][T11154] ? kmem_cache_free+0x192/0x3f0 [ 480.561561][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 480.561584][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.561602][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 480.561626][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 480.561656][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 480.561674][T11154] ? __lock_acquire+0xaac/0xd20 [ 480.561713][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 480.561728][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 480.561747][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 480.561763][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.561782][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 480.561797][T11154] ? __copy_skb_header+0xa7/0x550 [ 480.561825][T11154] netlink_rcv_skb+0x219/0x490 [ 480.561843][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.561861][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.561891][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.561907][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.561928][T11154] netlink_unicast+0x758/0x8d0 [ 480.561961][T11154] netlink_sendmsg+0x805/0xb30 [ 480.561985][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.562004][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 480.562022][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.562039][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.562057][T11154] __sock_sendmsg+0x219/0x270 [ 480.562085][T11154] ____sys_sendmsg+0x505/0x830 [ 480.562109][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.562136][T11154] ? import_iovec+0x74/0xa0 [ 480.562160][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 480.562182][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.562229][T11154] ? __fget_files+0x2a/0x420 [ 480.562257][T11154] ? __fget_files+0x3a0/0x420 [ 480.562293][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 480.562325][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.562359][T11154] ? do_syscall_64+0xba/0x210 [ 480.562381][T11154] do_syscall_64+0xf6/0x210 [ 480.562407][T11154] ? clear_bhb_loop+0x45/0xa0 [ 480.562426][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.562442][T11154] RIP: 0033:0x7f6f60b8e969 [ 480.562457][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.562471][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.562487][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 480.562499][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 480.562509][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 480.562518][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.562528][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 480.562551][T11154] [ 481.168522][T11154] [ 481.170882][T11154] ============================= [ 481.175749][T11154] WARNING: suspicious RCU usage [ 481.180594][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 481.187731][T11154] ----------------------------- [ 481.192598][T11154] net/ipv6/ip6_fib.c:1810 suspicious rcu_dereference_protected() usage! [ 481.200924][T11154] [ 481.200924][T11154] other info that might help us debug this: [ 481.200924][T11154] [ 481.211176][T11154] [ 481.211176][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 481.219269][T11154] 3 locks held by syz.2.1220/11154: [ 481.224485][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 481.233601][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 481.243140][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 481.252752][T11154] [ 481.252752][T11154] stack backtrace: [ 481.258644][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 481.258664][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 481.258674][T11154] Call Trace: [ 481.258684][T11154] [ 481.258692][T11154] dump_stack_lvl+0x189/0x250 [ 481.258720][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.258742][T11154] ? __pfx__printk+0x10/0x10 [ 481.258761][T11154] ? print_lock_name+0xde/0x100 [ 481.258790][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 481.258818][T11154] fib6_repair_tree+0xdff/0x11c0 [ 481.258852][T11154] fib6_del+0xed2/0x1550 [ 481.258869][T11154] ? fib6_del+0x681/0x1550 [ 481.258896][T11154] ? __pfx_fib6_del+0x10/0x10 [ 481.258910][T11154] ? unwind_get_return_address+0x4d/0x90 [ 481.258930][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 481.258947][T11154] ? arch_stack_walk+0xfc/0x150 [ 481.258978][T11154] fib6_clean_node+0x29f/0x590 [ 481.258998][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 481.259020][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.259048][T11154] fib6_walk_continue+0x678/0x910 [ 481.259076][T11154] fib6_walk+0x149/0x290 [ 481.259094][T11154] __fib6_clean_all+0x234/0x380 [ 481.259109][T11154] ? __fib6_clean_all+0x9b/0x380 [ 481.259126][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 481.259144][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 481.259164][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 481.259180][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 481.259210][T11154] ? __lock_acquire+0xaac/0xd20 [ 481.259238][T11154] rt6_disable_ip+0x120/0x720 [ 481.259261][T11154] ? rcu_is_watching+0x15/0xb0 [ 481.259283][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 481.259308][T11154] addrconf_ifdown+0x15d/0x1880 [ 481.259333][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 481.259358][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 481.259377][T11154] ? tls_dev_event+0x717/0xec0 [ 481.259398][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 481.259432][T11154] addrconf_notify+0x1bc/0x1010 [ 481.259453][T11154] notifier_call_chain+0x1b3/0x3e0 [ 481.259475][T11154] __dev_notify_flags+0x18d/0x2e0 [ 481.259496][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 481.259513][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 481.259535][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 481.259551][T11154] ? netif_state_change+0x256/0x3a0 [ 481.259568][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 481.259583][T11154] ? kernel_text_address+0xa5/0xe0 [ 481.259606][T11154] netif_change_flags+0xe8/0x1a0 [ 481.259628][T11154] do_setlink+0xcb9/0x40d0 [ 481.259658][T11154] ? __pfx_do_setlink+0x10/0x10 [ 481.259678][T11154] ? __lock_acquire+0xaac/0xd20 [ 481.259703][T11154] ? __mutex_trylock_common+0x153/0x260 [ 481.259721][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 481.259739][T11154] ? rcu_is_watching+0x15/0xb0 [ 481.259762][T11154] ? trace_contention_end+0x39/0x120 [ 481.259777][T11154] ? __mutex_lock+0x330/0xe80 [ 481.259797][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 481.259817][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 481.259831][T11154] ? rcu_is_watching+0x15/0xb0 [ 481.259854][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 481.259879][T11154] ? ns_capable+0x8a/0xf0 [ 481.259894][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 481.259914][T11154] rtnl_newlink+0x149f/0x1c70 [ 481.259929][T11154] ? kasan_save_track+0x3e/0x80 [ 481.259954][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 481.259991][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 481.260007][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.260029][T11154] ? nlmon_xmit+0xb0/0x100 [ 481.260048][T11154] ? kmem_cache_free+0x192/0x3f0 [ 481.260072][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.260095][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.260113][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.260151][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 481.260180][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 481.260198][T11154] ? __lock_acquire+0xaac/0xd20 [ 481.260235][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 481.260250][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 481.260269][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 481.260284][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.260302][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 481.260317][T11154] ? __copy_skb_header+0xa7/0x550 [ 481.260344][T11154] netlink_rcv_skb+0x219/0x490 [ 481.260365][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.260381][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.260411][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.260427][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.260447][T11154] netlink_unicast+0x758/0x8d0 [ 481.260478][T11154] netlink_sendmsg+0x805/0xb30 [ 481.260502][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.260521][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 481.260538][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.260554][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.260590][T11154] __sock_sendmsg+0x219/0x270 [ 481.260617][T11154] ____sys_sendmsg+0x505/0x830 [ 481.260642][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.260669][T11154] ? import_iovec+0x74/0xa0 [ 481.260693][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 481.260715][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.260763][T11154] ? __fget_files+0x2a/0x420 [ 481.260782][T11154] ? __fget_files+0x3a0/0x420 [ 481.260810][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 481.260832][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.260865][T11154] ? do_syscall_64+0xba/0x210 [ 481.260887][T11154] do_syscall_64+0xf6/0x210 [ 481.260907][T11154] ? clear_bhb_loop+0x45/0xa0 [ 481.260926][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.260941][T11154] RIP: 0033:0x7f6f60b8e969 [ 481.260956][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.260970][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.260985][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 481.260997][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 481.261007][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 481.261016][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.261026][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 481.261049][T11154] [ 481.261056][T11154] [ 481.871076][T11154] ============================= [ 481.875950][T11154] WARNING: suspicious RCU usage [ 481.880796][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 481.887938][T11154] ----------------------------- [ 481.892806][T11154] net/ipv6/ip6_fib.c:1812 suspicious rcu_dereference_protected() usage! [ 481.901131][T11154] [ 481.901131][T11154] other info that might help us debug this: [ 481.901131][T11154] [ 481.911389][T11154] [ 481.911389][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 481.919471][T11154] 3 locks held by syz.2.1220/11154: [ 481.924688][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 481.933824][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 481.943386][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 481.953016][T11154] [ 481.953016][T11154] stack backtrace: [ 481.958915][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 481.958936][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 481.958946][T11154] Call Trace: [ 481.958955][T11154] [ 481.958963][T11154] dump_stack_lvl+0x189/0x250 [ 481.958991][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.959012][T11154] ? __pfx__printk+0x10/0x10 [ 481.959031][T11154] ? print_lock_name+0xde/0x100 [ 481.959058][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 481.959085][T11154] fib6_repair_tree+0xe28/0x11c0 [ 481.959117][T11154] fib6_del+0xed2/0x1550 [ 481.959133][T11154] ? fib6_del+0x681/0x1550 [ 481.959160][T11154] ? __pfx_fib6_del+0x10/0x10 [ 481.959173][T11154] ? unwind_get_return_address+0x4d/0x90 [ 481.959191][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 481.959208][T11154] ? arch_stack_walk+0xfc/0x150 [ 481.959243][T11154] fib6_clean_node+0x29f/0x590 [ 481.959263][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 481.959286][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.959314][T11154] fib6_walk_continue+0x678/0x910 [ 481.959341][T11154] fib6_walk+0x149/0x290 [ 481.959360][T11154] __fib6_clean_all+0x234/0x380 [ 481.959375][T11154] ? __fib6_clean_all+0x9b/0x380 [ 481.959391][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 481.959410][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 481.959429][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 481.959445][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 481.959464][T11154] ? __lock_acquire+0xaac/0xd20 [ 481.959492][T11154] rt6_disable_ip+0x120/0x720 [ 481.959516][T11154] ? rcu_is_watching+0x15/0xb0 [ 481.959539][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 481.959565][T11154] addrconf_ifdown+0x15d/0x1880 [ 481.959591][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 481.959613][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 481.959632][T11154] ? tls_dev_event+0x717/0xec0 [ 481.959654][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 481.959689][T11154] addrconf_notify+0x1bc/0x1010 [ 481.959711][T11154] notifier_call_chain+0x1b3/0x3e0 [ 481.959734][T11154] __dev_notify_flags+0x18d/0x2e0 [ 481.959756][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 481.959773][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 481.959796][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 481.959813][T11154] ? netif_state_change+0x256/0x3a0 [ 481.959830][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 481.959846][T11154] ? kernel_text_address+0xa5/0xe0 [ 481.959870][T11154] netif_change_flags+0xe8/0x1a0 [ 481.959893][T11154] do_setlink+0xcb9/0x40d0 [ 481.959924][T11154] ? __pfx_do_setlink+0x10/0x10 [ 481.959944][T11154] ? __lock_acquire+0xaac/0xd20 [ 481.959971][T11154] ? __mutex_trylock_common+0x153/0x260 [ 481.959989][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 481.960008][T11154] ? rcu_is_watching+0x15/0xb0 [ 481.960032][T11154] ? trace_contention_end+0x39/0x120 [ 481.960047][T11154] ? __mutex_lock+0x330/0xe80 [ 481.960068][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 481.960101][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 481.960116][T11154] ? rcu_is_watching+0x15/0xb0 [ 481.960140][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 481.960165][T11154] ? ns_capable+0x8a/0xf0 [ 481.960180][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 481.960201][T11154] rtnl_newlink+0x149f/0x1c70 [ 481.960216][T11154] ? kasan_save_track+0x3e/0x80 [ 481.960247][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 481.960286][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 481.960302][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.960324][T11154] ? nlmon_xmit+0xb0/0x100 [ 481.960344][T11154] ? kmem_cache_free+0x192/0x3f0 [ 481.960369][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.960393][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.960411][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.960435][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 481.960465][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 481.960483][T11154] ? __lock_acquire+0xaac/0xd20 [ 481.960522][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 481.960537][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 481.960556][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 481.960572][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.960591][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 481.960607][T11154] ? __copy_skb_header+0xa7/0x550 [ 481.960634][T11154] netlink_rcv_skb+0x219/0x490 [ 481.960652][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.960670][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.960700][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.960716][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.960737][T11154] netlink_unicast+0x758/0x8d0 [ 481.960770][T11154] netlink_sendmsg+0x805/0xb30 [ 481.960794][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.960814][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 481.960831][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.960849][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.960867][T11154] __sock_sendmsg+0x219/0x270 [ 481.960894][T11154] ____sys_sendmsg+0x505/0x830 [ 481.960919][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.960946][T11154] ? import_iovec+0x74/0xa0 [ 481.960970][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 481.960992][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.961039][T11154] ? __fget_files+0x2a/0x420 [ 481.961059][T11154] ? __fget_files+0x3a0/0x420 [ 481.961087][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 481.961109][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.961142][T11154] ? do_syscall_64+0xba/0x210 [ 481.961164][T11154] do_syscall_64+0xf6/0x210 [ 481.961184][T11154] ? clear_bhb_loop+0x45/0xa0 [ 481.961203][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.961223][T11154] RIP: 0033:0x7f6f60b8e969 [ 481.961239][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.961252][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.961268][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 481.961280][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 481.961290][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 481.961299][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.961309][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 481.961332][T11154] [ 481.961339][T11154] [ 482.571428][T11154] ============================= [ 482.576300][T11154] WARNING: suspicious RCU usage [ 482.581147][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 482.588285][T11154] ----------------------------- [ 482.593152][T11154] net/ipv6/ip6_fib.c:1814 suspicious rcu_dereference_protected() usage! [ 482.601477][T11154] [ 482.601477][T11154] other info that might help us debug this: [ 482.601477][T11154] [ 482.611735][T11154] [ 482.611735][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 482.619822][T11154] 3 locks held by syz.2.1220/11154: [ 482.625147][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 482.634252][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 482.643784][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 482.653397][T11154] [ 482.653397][T11154] stack backtrace: [ 482.659298][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 482.659320][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 482.659330][T11154] Call Trace: [ 482.659340][T11154] [ 482.659347][T11154] dump_stack_lvl+0x189/0x250 [ 482.659377][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.659399][T11154] ? __pfx__printk+0x10/0x10 [ 482.659419][T11154] ? print_lock_name+0xde/0x100 [ 482.659447][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 482.659475][T11154] fib6_repair_tree+0xe51/0x11c0 [ 482.659508][T11154] fib6_del+0xed2/0x1550 [ 482.659525][T11154] ? fib6_del+0x681/0x1550 [ 482.659552][T11154] ? __pfx_fib6_del+0x10/0x10 [ 482.659566][T11154] ? unwind_get_return_address+0x4d/0x90 [ 482.659585][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 482.659602][T11154] ? arch_stack_walk+0xfc/0x150 [ 482.659634][T11154] fib6_clean_node+0x29f/0x590 [ 482.659653][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 482.659676][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 482.659705][T11154] fib6_walk_continue+0x678/0x910 [ 482.659732][T11154] fib6_walk+0x149/0x290 [ 482.659751][T11154] __fib6_clean_all+0x234/0x380 [ 482.659766][T11154] ? __fib6_clean_all+0x9b/0x380 [ 482.659782][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 482.659800][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 482.659819][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 482.659836][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 482.659854][T11154] ? __lock_acquire+0xaac/0xd20 [ 482.659883][T11154] rt6_disable_ip+0x120/0x720 [ 482.659906][T11154] ? rcu_is_watching+0x15/0xb0 [ 482.659929][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 482.659955][T11154] addrconf_ifdown+0x15d/0x1880 [ 482.659982][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 482.660004][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 482.660034][T11154] ? tls_dev_event+0x717/0xec0 [ 482.660057][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 482.660092][T11154] addrconf_notify+0x1bc/0x1010 [ 482.660115][T11154] notifier_call_chain+0x1b3/0x3e0 [ 482.660137][T11154] __dev_notify_flags+0x18d/0x2e0 [ 482.660158][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 482.660175][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 482.660198][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 482.660215][T11154] ? netif_state_change+0x256/0x3a0 [ 482.660233][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 482.660254][T11154] ? kernel_text_address+0xa5/0xe0 [ 482.660277][T11154] netif_change_flags+0xe8/0x1a0 [ 482.660300][T11154] do_setlink+0xcb9/0x40d0 [ 482.660330][T11154] ? __pfx_do_setlink+0x10/0x10 [ 482.660351][T11154] ? __lock_acquire+0xaac/0xd20 [ 482.660377][T11154] ? __mutex_trylock_common+0x153/0x260 [ 482.660395][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 482.660415][T11154] ? rcu_is_watching+0x15/0xb0 [ 482.660438][T11154] ? trace_contention_end+0x39/0x120 [ 482.660455][T11154] ? __mutex_lock+0x330/0xe80 [ 482.660475][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 482.660495][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 482.660511][T11154] ? rcu_is_watching+0x15/0xb0 [ 482.660535][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 482.660560][T11154] ? ns_capable+0x8a/0xf0 [ 482.660575][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 482.660596][T11154] rtnl_newlink+0x149f/0x1c70 [ 482.660611][T11154] ? kasan_save_track+0x3e/0x80 [ 482.660638][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 482.660676][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 482.660693][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.660715][T11154] ? nlmon_xmit+0xb0/0x100 [ 482.660735][T11154] ? kmem_cache_free+0x192/0x3f0 [ 482.660761][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 482.660785][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.660803][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 482.660827][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 482.660857][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 482.660875][T11154] ? __lock_acquire+0xaac/0xd20 [ 482.660913][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 482.660929][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 482.660948][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 482.660964][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.660983][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 482.660998][T11154] ? __copy_skb_header+0xa7/0x550 [ 482.661025][T11154] netlink_rcv_skb+0x219/0x490 [ 482.661043][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.661061][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.661092][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.661108][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.661128][T11154] netlink_unicast+0x758/0x8d0 [ 482.661161][T11154] netlink_sendmsg+0x805/0xb30 [ 482.661185][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.661205][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 482.661222][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.661249][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.661267][T11154] __sock_sendmsg+0x219/0x270 [ 482.661294][T11154] ____sys_sendmsg+0x505/0x830 [ 482.661319][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.661347][T11154] ? import_iovec+0x74/0xa0 [ 482.661371][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 482.661392][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.661440][T11154] ? __fget_files+0x2a/0x420 [ 482.661459][T11154] ? __fget_files+0x3a0/0x420 [ 482.661487][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 482.661509][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.661542][T11154] ? do_syscall_64+0xba/0x210 [ 482.661564][T11154] do_syscall_64+0xf6/0x210 [ 482.661584][T11154] ? clear_bhb_loop+0x45/0xa0 [ 482.661604][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.661619][T11154] RIP: 0033:0x7f6f60b8e969 [ 482.661635][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.661648][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.661664][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 482.661676][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 482.661686][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 482.661696][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.661705][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 482.661728][T11154] [ 482.661736][T11154] [ 483.272106][T11154] ============================= [ 483.276985][T11154] WARNING: suspicious RCU usage [ 483.281850][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 483.289051][T11154] ----------------------------- [ 483.293924][T11154] net/ipv6/ip6_fib.c:1816 suspicious rcu_dereference_protected() usage! [ 483.302291][T11154] [ 483.302291][T11154] other info that might help us debug this: [ 483.302291][T11154] [ 483.312558][T11154] [ 483.312558][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 483.320623][T11154] 3 locks held by syz.2.1220/11154: [ 483.325846][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 483.334944][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 483.344522][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 483.354175][T11154] [ 483.354175][T11154] stack backtrace: [ 483.360082][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 483.360104][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 483.360115][T11154] Call Trace: [ 483.360124][T11154] [ 483.360132][T11154] dump_stack_lvl+0x189/0x250 [ 483.360162][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.360185][T11154] ? __pfx__printk+0x10/0x10 [ 483.360205][T11154] ? print_lock_name+0xde/0x100 [ 483.360234][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 483.360262][T11154] fib6_repair_tree+0xe7a/0x11c0 [ 483.360296][T11154] fib6_del+0xed2/0x1550 [ 483.360313][T11154] ? fib6_del+0x681/0x1550 [ 483.360340][T11154] ? __pfx_fib6_del+0x10/0x10 [ 483.360354][T11154] ? unwind_get_return_address+0x4d/0x90 [ 483.360373][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 483.360390][T11154] ? arch_stack_walk+0xfc/0x150 [ 483.360422][T11154] fib6_clean_node+0x29f/0x590 [ 483.360441][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 483.360464][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 483.360493][T11154] fib6_walk_continue+0x678/0x910 [ 483.360520][T11154] fib6_walk+0x149/0x290 [ 483.360539][T11154] __fib6_clean_all+0x234/0x380 [ 483.360554][T11154] ? __fib6_clean_all+0x9b/0x380 [ 483.360571][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 483.360590][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 483.360613][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 483.360630][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 483.360649][T11154] ? __lock_acquire+0xaac/0xd20 [ 483.360678][T11154] rt6_disable_ip+0x120/0x720 [ 483.360702][T11154] ? rcu_is_watching+0x15/0xb0 [ 483.360725][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 483.360751][T11154] addrconf_ifdown+0x15d/0x1880 [ 483.360777][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 483.360799][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 483.360818][T11154] ? tls_dev_event+0x717/0xec0 [ 483.360840][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 483.360876][T11154] addrconf_notify+0x1bc/0x1010 [ 483.360898][T11154] notifier_call_chain+0x1b3/0x3e0 [ 483.360920][T11154] __dev_notify_flags+0x18d/0x2e0 [ 483.360942][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 483.360959][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 483.360982][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 483.360999][T11154] ? netif_state_change+0x256/0x3a0 [ 483.361017][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 483.361033][T11154] ? kernel_text_address+0xa5/0xe0 [ 483.361057][T11154] netif_change_flags+0xe8/0x1a0 [ 483.361086][T11154] do_setlink+0xcb9/0x40d0 [ 483.361117][T11154] ? __pfx_do_setlink+0x10/0x10 [ 483.361138][T11154] ? __lock_acquire+0xaac/0xd20 [ 483.361164][T11154] ? __mutex_trylock_common+0x153/0x260 [ 483.361182][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 483.361202][T11154] ? rcu_is_watching+0x15/0xb0 [ 483.361225][T11154] ? trace_contention_end+0x39/0x120 [ 483.361241][T11154] ? __mutex_lock+0x330/0xe80 [ 483.361262][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 483.361282][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 483.361297][T11154] ? rcu_is_watching+0x15/0xb0 [ 483.361321][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 483.361349][T11154] ? ns_capable+0x8a/0xf0 [ 483.361364][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 483.361385][T11154] rtnl_newlink+0x149f/0x1c70 [ 483.361400][T11154] ? kasan_save_track+0x3e/0x80 [ 483.361426][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 483.361466][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 483.361482][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.361505][T11154] ? nlmon_xmit+0xb0/0x100 [ 483.361525][T11154] ? kmem_cache_free+0x192/0x3f0 [ 483.361550][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 483.361574][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.361592][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 483.361616][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 483.361646][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 483.361664][T11154] ? __lock_acquire+0xaac/0xd20 [ 483.361703][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 483.361718][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 483.361738][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 483.361753][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.361772][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 483.361788][T11154] ? __copy_skb_header+0xa7/0x550 [ 483.361816][T11154] netlink_rcv_skb+0x219/0x490 [ 483.361834][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.361851][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.361882][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.361898][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.361919][T11154] netlink_unicast+0x758/0x8d0 [ 483.361952][T11154] netlink_sendmsg+0x805/0xb30 [ 483.361976][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.361996][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 483.362013][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.362031][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.362049][T11154] __sock_sendmsg+0x219/0x270 [ 483.362083][T11154] ____sys_sendmsg+0x505/0x830 [ 483.362107][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.362134][T11154] ? import_iovec+0x74/0xa0 [ 483.362158][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 483.362180][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.362228][T11154] ? __fget_files+0x2a/0x420 [ 483.362256][T11154] ? __fget_files+0x3a0/0x420 [ 483.362291][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 483.362320][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.362359][T11154] ? do_syscall_64+0xba/0x210 [ 483.362382][T11154] do_syscall_64+0xf6/0x210 [ 483.362402][T11154] ? clear_bhb_loop+0x45/0xa0 [ 483.362422][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.362437][T11154] RIP: 0033:0x7f6f60b8e969 [ 483.362453][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.362479][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.362496][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 483.362507][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 483.362517][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 483.362526][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.362535][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 483.362557][T11154] [ 483.968164][T11154] [ 483.970494][T11154] ============================= [ 483.975354][T11154] WARNING: suspicious RCU usage [ 483.980198][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 483.987320][T11154] ----------------------------- [ 483.992166][T11154] net/ipv6/ip6_fib.c:1818 suspicious rcu_dereference_protected() usage! [ 484.000506][T11154] [ 484.000506][T11154] other info that might help us debug this: [ 484.000506][T11154] [ 484.010752][T11154] [ 484.010752][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 484.018835][T11154] 3 locks held by syz.2.1220/11154: [ 484.024047][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 484.033139][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 484.042747][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 484.052438][T11154] [ 484.052438][T11154] stack backtrace: [ 484.058367][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 484.058390][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 484.058401][T11154] Call Trace: [ 484.058411][T11154] [ 484.058419][T11154] dump_stack_lvl+0x189/0x250 [ 484.058448][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.058471][T11154] ? __pfx__printk+0x10/0x10 [ 484.058491][T11154] ? print_lock_name+0xde/0x100 [ 484.058520][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 484.058548][T11154] fib6_repair_tree+0xea3/0x11c0 [ 484.058581][T11154] fib6_del+0xed2/0x1550 [ 484.058598][T11154] ? fib6_del+0x681/0x1550 [ 484.058626][T11154] ? __pfx_fib6_del+0x10/0x10 [ 484.058640][T11154] ? unwind_get_return_address+0x4d/0x90 [ 484.058659][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.058676][T11154] ? arch_stack_walk+0xfc/0x150 [ 484.058707][T11154] fib6_clean_node+0x29f/0x590 [ 484.058727][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 484.058751][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.058779][T11154] fib6_walk_continue+0x678/0x910 [ 484.058806][T11154] fib6_walk+0x149/0x290 [ 484.058825][T11154] __fib6_clean_all+0x234/0x380 [ 484.058840][T11154] ? __fib6_clean_all+0x9b/0x380 [ 484.058857][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 484.058875][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 484.058894][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 484.058911][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 484.058929][T11154] ? __lock_acquire+0xaac/0xd20 [ 484.058957][T11154] rt6_disable_ip+0x120/0x720 [ 484.058980][T11154] ? rcu_is_watching+0x15/0xb0 [ 484.059004][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 484.059029][T11154] addrconf_ifdown+0x15d/0x1880 [ 484.059055][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 484.059077][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 484.059104][T11154] ? tls_dev_event+0x717/0xec0 [ 484.059125][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 484.059160][T11154] addrconf_notify+0x1bc/0x1010 [ 484.059182][T11154] notifier_call_chain+0x1b3/0x3e0 [ 484.059204][T11154] __dev_notify_flags+0x18d/0x2e0 [ 484.059226][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 484.059244][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 484.059266][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 484.059283][T11154] ? netif_state_change+0x256/0x3a0 [ 484.059300][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 484.059316][T11154] ? kernel_text_address+0xa5/0xe0 [ 484.059340][T11154] netif_change_flags+0xe8/0x1a0 [ 484.059363][T11154] do_setlink+0xcb9/0x40d0 [ 484.059393][T11154] ? __pfx_do_setlink+0x10/0x10 [ 484.059414][T11154] ? __lock_acquire+0xaac/0xd20 [ 484.059440][T11154] ? __mutex_trylock_common+0x153/0x260 [ 484.059458][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 484.059478][T11154] ? rcu_is_watching+0x15/0xb0 [ 484.059501][T11154] ? trace_contention_end+0x39/0x120 [ 484.059517][T11154] ? __mutex_lock+0x330/0xe80 [ 484.059538][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 484.059558][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 484.059573][T11154] ? rcu_is_watching+0x15/0xb0 [ 484.059597][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 484.059623][T11154] ? ns_capable+0x8a/0xf0 [ 484.059638][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 484.059659][T11154] rtnl_newlink+0x149f/0x1c70 [ 484.059674][T11154] ? kasan_save_track+0x3e/0x80 [ 484.059700][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 484.059738][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 484.059755][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.059777][T11154] ? nlmon_xmit+0xb0/0x100 [ 484.059797][T11154] ? kmem_cache_free+0x192/0x3f0 [ 484.059823][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.059846][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.059864][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.059900][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.059930][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 484.059949][T11154] ? __lock_acquire+0xaac/0xd20 [ 484.059987][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 484.060003][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 484.060022][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 484.060037][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 484.060056][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 484.060072][T11154] ? __copy_skb_header+0xa7/0x550 [ 484.060103][T11154] netlink_rcv_skb+0x219/0x490 [ 484.060122][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 484.060139][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.060170][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.060185][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.060206][T11154] netlink_unicast+0x758/0x8d0 [ 484.060239][T11154] netlink_sendmsg+0x805/0xb30 [ 484.060264][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.060283][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 484.060301][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.060318][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.060335][T11154] __sock_sendmsg+0x219/0x270 [ 484.060363][T11154] ____sys_sendmsg+0x505/0x830 [ 484.060388][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.060418][T11154] ? import_iovec+0x74/0xa0 [ 484.060442][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 484.060464][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.060511][T11154] ? __fget_files+0x2a/0x420 [ 484.060530][T11154] ? __fget_files+0x3a0/0x420 [ 484.060557][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 484.060580][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.060613][T11154] ? do_syscall_64+0xba/0x210 [ 484.060635][T11154] do_syscall_64+0xf6/0x210 [ 484.060655][T11154] ? clear_bhb_loop+0x45/0xa0 [ 484.060674][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.060689][T11154] RIP: 0033:0x7f6f60b8e969 [ 484.060704][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.060718][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.060735][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 484.060746][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 484.060756][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 484.060766][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.060775][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 484.060798][T11154] [ 484.060853][T11154] [ 484.670367][T11154] ============================= [ 484.675233][T11154] WARNING: suspicious RCU usage [ 484.680084][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 484.687222][T11154] ----------------------------- [ 484.692073][T11154] net/ipv6/ip6_fib.c:1767 suspicious rcu_dereference_protected() usage! [ 484.700419][T11154] [ 484.700419][T11154] other info that might help us debug this: [ 484.700419][T11154] [ 484.710670][T11154] [ 484.710670][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 484.718755][T11154] 3 locks held by syz.2.1220/11154: [ 484.723970][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 484.733090][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 484.742619][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 484.752206][T11154] [ 484.752206][T11154] stack backtrace: [ 484.758124][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 484.758144][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 484.758155][T11154] Call Trace: [ 484.758165][T11154] [ 484.758173][T11154] dump_stack_lvl+0x189/0x250 [ 484.758200][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.758223][T11154] ? __pfx__printk+0x10/0x10 [ 484.758241][T11154] ? print_lock_name+0xde/0x100 [ 484.758270][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 484.758297][T11154] fib6_find_prefix+0x1e8/0x3f0 [ 484.758316][T11154] fib6_repair_tree+0x10bd/0x11c0 [ 484.758348][T11154] fib6_del+0xed2/0x1550 [ 484.758366][T11154] ? fib6_del+0x681/0x1550 [ 484.758393][T11154] ? __pfx_fib6_del+0x10/0x10 [ 484.758407][T11154] ? unwind_get_return_address+0x4d/0x90 [ 484.758426][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.758444][T11154] ? arch_stack_walk+0xfc/0x150 [ 484.758475][T11154] fib6_clean_node+0x29f/0x590 [ 484.758495][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 484.758518][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.758546][T11154] fib6_walk_continue+0x678/0x910 [ 484.758574][T11154] fib6_walk+0x149/0x290 [ 484.758592][T11154] __fib6_clean_all+0x234/0x380 [ 484.758607][T11154] ? __fib6_clean_all+0x9b/0x380 [ 484.758624][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 484.758642][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 484.758661][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 484.758678][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 484.758696][T11154] ? __lock_acquire+0xaac/0xd20 [ 484.758724][T11154] rt6_disable_ip+0x120/0x720 [ 484.758747][T11154] ? rcu_is_watching+0x15/0xb0 [ 484.758771][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 484.758797][T11154] addrconf_ifdown+0x15d/0x1880 [ 484.758822][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 484.758844][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 484.758864][T11154] ? tls_dev_event+0x717/0xec0 [ 484.758886][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 484.758921][T11154] addrconf_notify+0x1bc/0x1010 [ 484.758943][T11154] notifier_call_chain+0x1b3/0x3e0 [ 484.758965][T11154] __dev_notify_flags+0x18d/0x2e0 [ 484.758987][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 484.759004][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 484.759027][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 484.759044][T11154] ? netif_state_change+0x256/0x3a0 [ 484.759066][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 484.759082][T11154] ? kernel_text_address+0xa5/0xe0 [ 484.759106][T11154] netif_change_flags+0xe8/0x1a0 [ 484.759129][T11154] do_setlink+0xcb9/0x40d0 [ 484.759160][T11154] ? __pfx_do_setlink+0x10/0x10 [ 484.759180][T11154] ? __lock_acquire+0xaac/0xd20 [ 484.759206][T11154] ? __mutex_trylock_common+0x153/0x260 [ 484.759225][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 484.759245][T11154] ? rcu_is_watching+0x15/0xb0 [ 484.759268][T11154] ? trace_contention_end+0x39/0x120 [ 484.759284][T11154] ? __mutex_lock+0x330/0xe80 [ 484.759305][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 484.759326][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 484.759341][T11154] ? rcu_is_watching+0x15/0xb0 [ 484.759365][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 484.759391][T11154] ? ns_capable+0x8a/0xf0 [ 484.759406][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 484.759427][T11154] rtnl_newlink+0x149f/0x1c70 [ 484.759442][T11154] ? kasan_save_track+0x3e/0x80 [ 484.759468][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 484.759506][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 484.759523][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.759557][T11154] ? nlmon_xmit+0xb0/0x100 [ 484.759577][T11154] ? kmem_cache_free+0x192/0x3f0 [ 484.759601][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.759624][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.759642][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 484.759665][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.759694][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 484.759711][T11154] ? __lock_acquire+0xaac/0xd20 [ 484.759749][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 484.759764][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 484.759782][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 484.759797][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 484.759816][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 484.759844][T11154] ? __copy_skb_header+0xa7/0x550 [ 484.759890][T11154] netlink_rcv_skb+0x219/0x490 [ 484.759908][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 484.759926][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.759957][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.759973][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.759993][T11154] netlink_unicast+0x758/0x8d0 [ 484.760026][T11154] netlink_sendmsg+0x805/0xb30 [ 484.760055][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.760075][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 484.760092][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.760110][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.760127][T11154] __sock_sendmsg+0x219/0x270 [ 484.760155][T11154] ____sys_sendmsg+0x505/0x830 [ 484.760179][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.760207][T11154] ? import_iovec+0x74/0xa0 [ 484.760230][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 484.760253][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.760300][T11154] ? __fget_files+0x2a/0x420 [ 484.760319][T11154] ? __fget_files+0x3a0/0x420 [ 484.760347][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 484.760370][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.760403][T11154] ? do_syscall_64+0xba/0x210 [ 484.760424][T11154] do_syscall_64+0xf6/0x210 [ 484.760444][T11154] ? clear_bhb_loop+0x45/0xa0 [ 484.760463][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.760479][T11154] RIP: 0033:0x7f6f60b8e969 [ 484.760494][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.760507][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.760523][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 484.760535][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 484.760544][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 484.760554][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.760564][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 484.760587][T11154] [ 484.760594][T11154] [ 485.376102][T11154] ============================= [ 485.380955][T11154] WARNING: suspicious RCU usage [ 485.385821][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 485.392978][T11154] ----------------------------- [ 485.397830][T11154] net/ipv6/ip6_fib.c:1769 suspicious rcu_dereference_protected() usage! [ 485.406211][T11154] [ 485.406211][T11154] other info that might help us debug this: [ 485.406211][T11154] [ 485.416463][T11154] [ 485.416463][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 485.424544][T11154] 3 locks held by syz.2.1220/11154: [ 485.429739][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 485.438832][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 485.448362][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 485.457999][T11154] [ 485.457999][T11154] stack backtrace: [ 485.464285][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 485.464308][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 485.464318][T11154] Call Trace: [ 485.464327][T11154] [ 485.464334][T11154] dump_stack_lvl+0x189/0x250 [ 485.464363][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.464386][T11154] ? __pfx__printk+0x10/0x10 [ 485.464403][T11154] ? print_lock_name+0xde/0x100 [ 485.464433][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 485.464461][T11154] fib6_find_prefix+0x211/0x3f0 [ 485.464480][T11154] fib6_repair_tree+0x10bd/0x11c0 [ 485.464512][T11154] fib6_del+0xed2/0x1550 [ 485.464529][T11154] ? fib6_del+0x681/0x1550 [ 485.464556][T11154] ? __pfx_fib6_del+0x10/0x10 [ 485.464570][T11154] ? unwind_get_return_address+0x4d/0x90 [ 485.464595][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 485.464612][T11154] ? arch_stack_walk+0xfc/0x150 [ 485.464644][T11154] fib6_clean_node+0x29f/0x590 [ 485.464663][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 485.464686][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 485.464714][T11154] fib6_walk_continue+0x678/0x910 [ 485.464741][T11154] fib6_walk+0x149/0x290 [ 485.464760][T11154] __fib6_clean_all+0x234/0x380 [ 485.464775][T11154] ? __fib6_clean_all+0x9b/0x380 [ 485.464792][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 485.464809][T11154] ? __pfx___fib6_clean_all+0x10/0x10 [ 485.464829][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 485.464845][T11154] ? __pfx_fib6_ifdown+0x10/0x10 [ 485.464863][T11154] ? __lock_acquire+0xaac/0xd20 [ 485.464891][T11154] rt6_disable_ip+0x120/0x720 [ 485.464914][T11154] ? rcu_is_watching+0x15/0xb0 [ 485.464938][T11154] ? __pfx_rt6_disable_ip+0x10/0x10 [ 485.464964][T11154] addrconf_ifdown+0x15d/0x1880 [ 485.464998][T11154] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 485.465020][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 485.465040][T11154] ? tls_dev_event+0x717/0xec0 [ 485.465063][T11154] ? __pfx_addrconf_ifdown+0x10/0x10 [ 485.465098][T11154] addrconf_notify+0x1bc/0x1010 [ 485.465120][T11154] notifier_call_chain+0x1b3/0x3e0 [ 485.465142][T11154] __dev_notify_flags+0x18d/0x2e0 [ 485.465164][T11154] ? __pfx___dev_notify_flags+0x10/0x10 [ 485.465181][T11154] ? __dev_change_flags+0x4cc/0x6d0 [ 485.465204][T11154] ? __pfx___dev_change_flags+0x10/0x10 [ 485.465222][T11154] ? netif_state_change+0x256/0x3a0 [ 485.465239][T11154] ? __pfx_netif_state_change+0x10/0x10 [ 485.465255][T11154] ? kernel_text_address+0xa5/0xe0 [ 485.465278][T11154] netif_change_flags+0xe8/0x1a0 [ 485.465301][T11154] do_setlink+0xcb9/0x40d0 [ 485.465332][T11154] ? __pfx_do_setlink+0x10/0x10 [ 485.465353][T11154] ? __lock_acquire+0xaac/0xd20 [ 485.465379][T11154] ? __mutex_trylock_common+0x153/0x260 [ 485.465397][T11154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 485.465417][T11154] ? rcu_is_watching+0x15/0xb0 [ 485.465441][T11154] ? trace_contention_end+0x39/0x120 [ 485.465456][T11154] ? __mutex_lock+0x330/0xe80 [ 485.465477][T11154] ? __pfx_aa_get_newest_label+0x10/0x10 [ 485.465498][T11154] ? rtnl_newlink+0x8db/0x1c70 [ 485.465513][T11154] ? rcu_is_watching+0x15/0xb0 [ 485.465537][T11154] ? __pfx___mutex_lock+0x10/0x10 [ 485.465562][T11154] ? ns_capable+0x8a/0xf0 [ 485.465578][T11154] ? rtnl_link_get_net_capable+0x16a/0x350 [ 485.465599][T11154] rtnl_newlink+0x149f/0x1c70 [ 485.465614][T11154] ? kasan_save_track+0x3e/0x80 [ 485.465640][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 485.465679][T11154] ? kasan_quarantine_put+0xdd/0x220 [ 485.465695][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.465717][T11154] ? nlmon_xmit+0xb0/0x100 [ 485.465738][T11154] ? kmem_cache_free+0x192/0x3f0 [ 485.465763][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 485.465787][T11154] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.465805][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 485.465829][T11154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 485.465859][T11154] ? aa_get_newest_label+0xf7/0x5d0 [ 485.465877][T11154] ? __lock_acquire+0xaac/0xd20 [ 485.465916][T11154] ? __pfx_rtnl_newlink+0x10/0x10 [ 485.465933][T11154] rtnetlink_rcv_msg+0x7cc/0xb70 [ 485.465955][T11154] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 485.465971][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 485.465998][T11154] ? ref_tracker_free+0x63a/0x7d0 [ 485.466014][T11154] ? __copy_skb_header+0xa7/0x550 [ 485.466041][T11154] netlink_rcv_skb+0x219/0x490 [ 485.466060][T11154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 485.466078][T11154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.466112][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.466128][T11154] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.466150][T11154] netlink_unicast+0x758/0x8d0 [ 485.466187][T11154] netlink_sendmsg+0x805/0xb30 [ 485.466214][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.466234][T11154] ? aa_sock_msg_perm+0x94/0x160 [ 485.466251][T11154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.466268][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.466286][T11154] __sock_sendmsg+0x219/0x270 [ 485.466313][T11154] ____sys_sendmsg+0x505/0x830 [ 485.466338][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.466365][T11154] ? import_iovec+0x74/0xa0 [ 485.466389][T11154] ___sys_sendmsg+0x21f/0x2a0 [ 485.466411][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.466458][T11154] ? __fget_files+0x2a/0x420 [ 485.466478][T11154] ? __fget_files+0x3a0/0x420 [ 485.466505][T11154] __x64_sys_sendmsg+0x19b/0x260 [ 485.466528][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.466560][T11154] ? do_syscall_64+0xba/0x210 [ 485.466582][T11154] do_syscall_64+0xf6/0x210 [ 485.466602][T11154] ? clear_bhb_loop+0x45/0xa0 [ 485.466621][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.466637][T11154] RIP: 0033:0x7f6f60b8e969 [ 485.466652][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.466666][T11154] RSP: 002b:00007f6f619d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.466682][T11154] RAX: ffffffffffffffda RBX: 00007f6f60db6080 RCX: 00007f6f60b8e969 [ 485.466694][T11154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 485.466704][T11154] RBP: 00007f6f60c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 485.466714][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.466724][T11154] R13: 0000000000000000 R14: 00007f6f60db6080 R15: 00007f6f60edfa28 [ 485.466747][T11154] [ 485.466755][T11154] [ 486.082373][T11154] ============================= [ 486.087232][T11154] WARNING: suspicious RCU usage [ 486.092081][T11154] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted [ 486.099219][T11154] ----------------------------- [ 486.104083][T11154] net/ipv6/ip6_fib.c:1772 suspicious rcu_dereference_protected() usage! [ 486.112424][T11154] [ 486.112424][T11154] other info that might help us debug this: [ 486.112424][T11154] [ 486.122729][T11154] [ 486.122729][T11154] rcu_scheduler_active = 2, debug_locks = 1 [ 486.130791][T11154] 3 locks held by syz.2.1220/11154: [ 486.136041][T11154] #0: ffffffff8f2f47c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 486.145152][T11154] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 486.154670][T11154] #2: ffff888027db2030 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 486.164310][T11154] [ 486.164310][T11154] stack backtrace: [ 486.170206][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 486.170227][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 486.170238][T11154] Call Trace: [ 486.170246][T11154] [ 486.170254][T11154] dump_stack_lvl+0x189/0x250 [ 486.170283][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.170305][T11154] ? __pfx__printk+0x10/0x10 [ 486.170323][T11154] ? print_lock_name+0xde/0x100 [ 486.170352][T11154] lockdep_rcu_suspicious+0x140/0x1d0 [ 486.170380][T11154] fib6_find_prefix+0x399/0x3f0 [ 486.170399][T11154] fib6_repair_tree+0x10bd/0x11c0 [ 486.170443][T11154] fib6_del+0xed2/0x1550 [ 486.170459][T11154] ? fib6_del+0x681/0x1550 [ 486.170485][T11154] ? __pfx_fib6_del+0x10/0x10 [ 486.170517][T11154] ? unwind_get_return_address+0x4d/0x90 [ 486.170537][T11154] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.170554][T11154] ? arch_stack_walk+0xfc/0x150 [ 486.170586][T11154] fib6_clean_node+0x29f/0x590 [ 486.170605][T11154] ? __pfx_fib6_clean_node+0x10/0x10 [ 486.170628][T11154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 486.170656][T11154] fib6_walk_continue+0x678/0x910 [ 486.170684][T11154] fib6_walk+0x149/0x290 [ 486.170702][T11154] __fib6_clean_all+0x234/0x380