last executing test programs: 7m37.351426386s ago: executing program 3 (id=351): setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, 0x1403, 0x400, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0xa}, 0x1, 0x0, 0x0, 0x24040895}, 0x40800) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x80) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000380)="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", 0xe00}, {&(0x7f0000000180)}, {&(0x7f0000000240)="215f0bd0c5746d6ac6a9d99a46ec5e7c9cd4641630dc11d87f4f1aa1a780c7f102a57bbb7bc16c0b3e8c948a0b49c09716eff7c66237995efcb8d0b3f9d7a5d4bdc12d5908ea2ff8c07bd458dd1b8787cbc82e866372f9b358f671c9d8fa8a7fb015b59744f60b884c8f35986b9ae6f6510e04c83fcb27875f65ac80282d85f709435f8c5a0517e97ac477", 0x8b}], 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000180)={0x2, 0x4}) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) unshare(0x40000000) 7m36.845136226s ago: executing program 3 (id=353): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x74}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000001c0)=0x9b, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000340)={'security\x00', 0x25, "3e99d4c8c1ed6ac433fed30071343a528500abd63492819d18a3b45296e75cb1fb541866be"}, &(0x7f00000003c0)=0x49) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x1c}}, 0x8040) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x140c, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c086) r4 = memfd_create(&(0x7f0000000640)='batadv\x00', 0x6) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000680)) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendfile(r5, r0, &(0x7f0000000700)=0x3, 0x6) ftruncate(r0, 0x9) close(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0x2, 0x7f, 0x4, 0xffffa4e4}, {0x6252, 0x6, 0xd0, 0x7}]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/custom0\x00', 0x800, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) getsockname$packet(r0, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b40)={'erspan0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x10, 0x20, 0xbe32, 0x71, {{0x1c, 0x4, 0x1, 0x17, 0x70, 0x66, 0x0, 0xfc, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0xa4, [@loopback, @empty, @rand_addr=0x64010100, @empty, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x23, 0x3e, [@loopback, @private=0xa010100, @multicast1, @local, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x7, 0x43, [@multicast1]}, @lsrr={0x83, 0x7, 0x5b, [@dev={0xac, 0x14, 0x14, 0x40}]}]}}}}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000b80)={0x0, @private, @multicast1}, &(0x7f0000000bc0)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000c00)={0x0, @local, @loopback}, &(0x7f0000000c40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @remote, @dev}, &(0x7f0000000d00)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x0, 0x5, {{0x13, 0x4, 0x3, 0x5, 0x4c, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @local, {[@cipso={0x86, 0x1a, 0x3, [{0x5, 0x7, "3ea84ccf41"}, {0x5, 0xd, "1ae48ae37a9973f9f7d02b"}]}, @noop, @ssrr={0x89, 0x1b, 0x40, [@broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001000)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x14c09444}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x19c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 7m36.471498126s ago: executing program 3 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x24}}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x99ac, 0x80, 0xfffffffe, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x53ad, 0x1df9, 0x2c, 0x0, 0x0) (fail_nth: 8) 7m35.726856572s ago: executing program 3 (id=359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd27, 0x0, {0xa, 0x80, 0x0, 0x30}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = fanotify_init(0x202, 0x400) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYRES8=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) socket$inet(0x2, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000407e00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) sched_setattr(r4, 0x0, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) keyctl$link(0x8, r5, r5) 7m34.201744737s ago: executing program 3 (id=365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a0000000800000000000007000000005704781f40c170dd440bb48d6328823ab298728000"/69], &(0x7f00000000c0)=""/120, 0x2e, 0x78, 0x0, 0x245}, 0x28) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="5f9998271ace3658fa11fdd1c1c9ebddf0a26ae9019d86aa66a284f87e32f9", @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES64=r0], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x20, 0x14, 0xd9, "cc33b0c12d214a341164db834710f38e6fed351ac3c26c8eace8f5bed06077819a1acf57573215bbe3adc6c20ee7fb4e06a81b3179f59d3427038e2664f2b92800ca5d874f153e2f2add6a15c7ec2ca3a06c730c1cd1404c7df8da2ebaa1887b6e196355825f12affc66ab0c62519050cf4a5272121ed07d3c8a7c172c2144a470a69cc4dad6c00efa5c474583168209a2af4b800cdeec0b67a145837fa0252818e16c4b0e9fbf5ced22ffa4421b77cd703d071c6b1b2e96853b41045bc7472dae7ad21f9a43748121422e8dd72eb35199807bdb0000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x56, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x58, 0x7d, 0xea, 0x10, 0x586, 0x3417, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x80, 0x3, 0xb0, 0x96, [{{0x9, 0x4, 0xd8, 0x4, 0x4, 0xdb, 0xee, 0x3f, 0x24, [], [{{0x9, 0x5, 0x3, 0x3, 0x20, 0x7, 0x57, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x0, 0x2, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x0, 0xd, 0x8a}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0x1, 0x3, 0x20, 0x43}, 0x13, &(0x7f0000000380)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x8c, 0x8, 0x7}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x816}}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote, 0x3f}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {}, {}, {0xf, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xffdb, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3ff}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x20, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0) fsopen(&(0x7f0000000040)='hfsplus\x00', 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0100", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x1, {[@sack_perm={0x4, 0x2}, @nop]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000e09000009000000563f000020000000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000030000000000004000"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 7m30.986899847s ago: executing program 3 (id=373): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x40c0080) 7m15.86389041s ago: executing program 32 (id=373): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x40c0080) 6m12.882484179s ago: executing program 5 (id=664): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x2}, 0x18) close(r1) ustat(0x8000000000000000, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x2400c040) 6m12.703022796s ago: executing program 5 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f6, 0x29a7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff1000000008000600000000001800018014000200776c616e300000000000000000000000080007000008"], 0x3c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r10 = eventfd2(0x0, 0x1) io_submit(r9, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, r10}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) shutdown(r8, 0x0) 6m9.50434464s ago: executing program 5 (id=672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="0042f9bf3e1e4f6bfa37c027949e03303eb636751470e497ba24576754163bb953fe6e8d3a32494127b74686780869d9040094ebe63505d33f3076c5257f54849a33dff197f69d73b476a13bc7687325bb2202c8ac591b2e0bbd789002a446bcc60cc54327f0daf5be0bd915", 0x6c}, {&(0x7f00000002c0)="751a14809e02e45c2b483f71fee461c56847fe0665a4", 0x16}], 0x2, &(0x7f0000000540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x1, 0x80c4) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 6m8.808611087s ago: executing program 5 (id=677): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r3, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x46) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @local}, 0x8) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x2, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) 6m7.99615379s ago: executing program 5 (id=682): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f000045f000/0x2000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x8000}], 0x1, 0x80000001, 0x50}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='ramfs\x00', 0x0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000000011cc0000000000200000000020000"]) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b00"]) 6m7.405643046s ago: executing program 5 (id=687): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x2, [@typedef={0xb}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x9, 0x2}]}, @fwd={0x4}, @volatile={0x6}, @restrict={0x7}, @datasec={0xb, 0x0, 0x0, 0xf, 0x1, [], "da"}]}}, 0x0, 0x8e, 0x0, 0x1, 0xff, 0x10000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, &(0x7f0000000140)="f3ab660f221766b802008ed0b8da0000000f23d80f21f835c00000f00f23f8f30fc7b06000000066b818018ed80f20e035000040000f22e02e0ffe823b06000067360f01cfb8090000000f23d00f21f835300000060f23f8", 0x58}], 0x1, 0x20, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000040) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xc4, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) landlock_create_ruleset(&(0x7f0000000200)={0x1180, 0x1, 0x1}, 0x18, 0x2) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000002c0)={0xeeee0000, 0x8000}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000110f0000000000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0401000010a9000008000500", @ANYRES32=r2, @ANYBLOB="2c00128009000100766c616e000000001c0002800c000200100000000900000006000100000000000400048008000a00", @ANYRES32=r2, @ANYBLOB="74176986dd1cf3ff8f03a72411fd7cec8fb3f8a900"/32], 0x5c}}, 0x0) 6m6.522905683s ago: executing program 33 (id=687): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x2, [@typedef={0xb}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x9, 0x2}]}, @fwd={0x4}, @volatile={0x6}, @restrict={0x7}, @datasec={0xb, 0x0, 0x0, 0xf, 0x1, [], "da"}]}}, 0x0, 0x8e, 0x0, 0x1, 0xff, 0x10000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, &(0x7f0000000140)="f3ab660f221766b802008ed0b8da0000000f23d80f21f835c00000f00f23f8f30fc7b06000000066b818018ed80f20e035000040000f22e02e0ffe823b06000067360f01cfb8090000000f23d00f21f835300000060f23f8", 0x58}], 0x1, 0x20, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000040) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xc4, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) landlock_create_ruleset(&(0x7f0000000200)={0x1180, 0x1, 0x1}, 0x18, 0x2) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000002c0)={0xeeee0000, 0x8000}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000110f0000000000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0401000010a9000008000500", @ANYRES32=r2, @ANYBLOB="2c00128009000100766c616e000000001c0002800c000200100000000900000006000100000000000400048008000a00", @ANYRES32=r2, @ANYBLOB="74176986dd1cf3ff8f03a72411fd7cec8fb3f8a900"/32], 0x5c}}, 0x0) 3m49.114058511s ago: executing program 4 (id=1186): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSIG(r6, 0x40045436, 0x24) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 3m47.867023764s ago: executing program 4 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "7aae17ddd6b0414021b009b8c229a546"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x22044800) (fail_nth: 8) 3m47.744859315s ago: executing program 4 (id=1190): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x80000045}) 3m47.387184987s ago: executing program 4 (id=1192): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3m47.195053562s ago: executing program 4 (id=1193): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x1, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2, 0x0, 0x0, 0x800}, 0x0) 3m46.911041777s ago: executing program 4 (id=1196): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000006e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001800)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff93, 0x40000010, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000400)={0x2, 0x3, 0xffffffffffffffff}, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/151, 0x97) 3m46.595022439s ago: executing program 34 (id=1196): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000006e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001800)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff93, 0x40000010, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000400)={0x2, 0x3, 0xffffffffffffffff}, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/151, 0x97) 38.486942685s ago: executing program 2 (id=1926): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x8, 0x6, 0x7, 0x5}, {0x1, 0x5, 0x0, 0xb04c}, {0x9, 0x0, 0x7, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 36.236286017s ago: executing program 2 (id=1934): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x47, 0x35, 0xac, 0x40, 0x15ba, 0x2b, 0xd566, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0xa0, 0xd, [{{0x9, 0x4, 0x1, 0x6, 0x0, 0x78, 0x4b, 0x7e, 0xfc}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x11, &(0x7f0000000600)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fff088, 0xf000, 0x1}]}}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7, 0x101600) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000180)) 34.41847449s ago: executing program 2 (id=1940): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x83}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000200)={{&(0x7f00004a7000/0x4000)=nil, 0x4000}, 0x1}) 33.018074424s ago: executing program 2 (id=1947): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)={0x20, 0x11, 0x1, "f8"}, 0x0, 0x0}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa050003000200000024000100000000000000000000000000000000004100000000000000000000000000000008000500010000001400020077673100"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000580)=[{{0x3, 0x0, 0x1}, {0x4, 0x1}}], 0x8) bind$can_raw(r1, &(0x7f0000000480), 0x10) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="4005ee9313af0a217af0f69693195469020000000209ff805a00a247e26a574d746bad59c663e44af8634532994384539d7d1d7dbb27db257695fe9f8063a6ff8775feffda96079ca2154d9d0000b7365e2997efee3dac0ccc4cddc87d2f1809d256e669d2e0ae5eb94371f587424e942d0ae9c1c4dd337c0001137d92f5283cf6473411a25abb7c2c98fe9d7dab03bc9065a85ff97941107b30d51dbf5e42f63b99ec05dd4719e08ce51453b1c9a4f28a063d7b891e728459c0d59d318286b7a2f808fa"], &(0x7f0000000080)={0x0, 0x3, 0x31, @string={0x31, 0x3, "75df53a708d8da998731b697cd871463b7f8e1a73a29b0fe90f3ffbcbf345ff200"/47}}}, &(0x7f0000000340)={0x34, &(0x7f0000000240)={0x40, 0x5, 0x18, "c0b22fd2ae1b351119210edbdbc5bec9cb0559b5cffc6de6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000280)={0x20, 0x0, 0x66, {0x64, "3a0eee358f74a6da0af021b09ec1416b980324b7f3c013236871a7a9cf4a3392c0d675b25a4b0f515dac6d74fe9e8f4b51f4813c19328cf6a3213ddc3463b79644292c8adf81fe39b536929af17e559eaae6e87b34f487033ab03e88a8ad300fb63bf348"}}, &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x1a}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="204d496f29b590db4b070b21a726a69f8ce2b32d65a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000700)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000640)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r7, r7}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000040)={'sha512-avx2\x00'}}) ioprio_set$uid(0x0, 0x0, 0x2007) 28.531019413s ago: executing program 6 (id=1961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x82000) ioctl$I2C_SLAVE_FORCE(r5, 0x706, 0x3f6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000e00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x38, 0x1b, 0x400, 0x70bd2d, 0x25dfdbff, {0x4}, [@nested={0x4, 0xb5}, @generic="c0903276ec5dce018a49996e3d378087a2be7e08df0f9922261f3e5461"]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x8014) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) getresuid(&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0x2fb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x80000009, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x10004, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x464}}, 0x0) 27.78231447s ago: executing program 2 (id=1964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x66000080) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010429bd700000", @ANYRES32=0x0, @ANYBLOB="00030000003200011c0012800c0001006d6163766c616e000c000280080007000900000008000500510fc335ac9f632684c9f99c3f4f0a4c87bbab8cb210f5de01a83d6a1a472f87c14aa6201892e6e57225effb941a907641aa02e3994193dd7e50ce8cfd1044e8287e0687b4e30679e5e1900cc4c3d7237eb85dc4bea1c1c620532aa332bfb70f1b059667188b87352c0008335ee57652bf527ce856c1e803369d0c0c4dd4f3e3534b7fe7bc5790dc83190900000000000000", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) r7 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0xfe, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) 27.454966817s ago: executing program 2 (id=1966): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f6, 0x29a7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff1000000008000600000000001800018014000200776c616e300000000000000000000000080007000008"], 0x3c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = eventfd2(0x0, 0x1) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) shutdown(r7, 0x0) 26.944334658s ago: executing program 6 (id=1969): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x44f, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x10100, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x4007, @fd_index=0xa, 0x2, 0x7, 0x7, 0x1a, 0x0, {0x1, r7}}) io_uring_enter(r1, 0x2dbb, 0x0, 0x16, 0x0, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8469b66f", 0x4, 0x40004040, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r10, 0x3b82, &(0x7f00000000c0)={0x18, r11, 0x1, 0x0, &(0x7f0000000280)=[{0x7fff, 0x7fffffff}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r11, 0x0, 0xa, 0x2e}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x401) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r12, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x4, 0x5, 0x5, @private1, @loopback={0x0, 0x460c6}, 0x20, 0x8, 0x804, 0x40000}}) 26.710883772s ago: executing program 6 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911031000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x12, 0x0, @void}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008c"]) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a200000000000030000000008001e0001000000444e41cd15ee97979ebeeb57d3fa19e66a76d01776a1db9294bb6a7ae136061dda80a0653bcb39417024ab9c3cc4a2b50bc2684aa161bc478d1f239248774a48e3972d17fbc51865102158161a7014cc41f60341bd998a97589d4fecdaf0a0e8667a664d0699c3760335e964f6618ebd5ad144a820ac8f2ebd46ec938f3474296822d5e5b93964f0707b10e33b9b99b6c5cb346d7b874e06b387de24f3211e6fbb7c0740ce97074368dae6e92bcf3455265bfa57728ba200000000000fdbe7f1f033910000"], 0x24}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x0, 0x3, 0xd59f80, 0x5, 0x2800, 0x10, 0x3, 0x2, 0x2800, 0xf20, 0x0, 0x0, 0x1, 0x10, {0x401}, 0xce, 0x9}}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x40, 0x101040) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 25.521221673s ago: executing program 6 (id=1973): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x6, 0x92, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x30}}, 0x54) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x80, 0x190}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xfffffffa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect$uac1(0x2, 0xd0, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x40, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x4}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0x80, "2bbc23"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x286, 0x3, 0x5, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x2, "17f6cd4e2247"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x8a, "2afc56cd79"}, @mixer_unit={0x9, 0x24, 0x4, 0x8, 0x8, "f3c7f687"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0xf8, "d8", '1'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x6fe, 0x8, "0b921dcf493dd698"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x2, "1ea4485314a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x7, 0x5, {0x7, 0x25, 0x1, 0x3, 0x4, 0x13a0}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x2, 0x10, 0x40, 0x1}, 0x83, &(0x7f0000000100)={0x5, 0xf, 0x83, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x6, 0x11b8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "dd40be02c3e1b2f5e3897abd0c1616db"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x39, 0x5, 0x6, 0x6, 0x4}, @generic={0x55, 0x10, 0x3, "811a5ddaea3afb520a7eb7808926e1dd7035fc38174287fc7d79f3db61e2846c31e61cb6a276584c6ad52c6837d2809024d929a31309921fdfd703b6282b88da62241486835fdc5183a229e93739bb312918"}]}, 0x3, [{0x6d, &(0x7f0000000300)=@string={0x6d, 0x3, "d7b106a879d2634eb1866fbdcee90a42155fb62b08ba900fc1f12f807b53e06cdb74d0d254c1489278964460f6f6f1df48da6f6d33cf0c0a39f952c1ec91414439bddb3403b44fed62a36198070fd1344ece0ed8a61bf39d50cd3ec1d7859c83929537f167c80b30edf543"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x100, 0x5, 0x1, {0x22, 0x743}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x75, 0x3, 0x4, 0x8, 0xc6}, 0x117, &(0x7f00000004c0)={0x5, 0xf, 0x117, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffb176, 0xff00, 0x7, [0x0]}, @generic={0xd1, 0x10, 0x0, "3457698d0e0439f2f8fe8d73ef2efca58d6e57e4bd9bf6512b5ee03e0449846d8401c419f75a3152ba153ce6133b102c393ad4775fce46b252712d371ce9b32dfdab13925a76d36e6cb5d2d6cf6b0d8de6bbcc49c5e47e3d838aa8fc36c84e5c4d2de90b981bf8519db2643d9123ede48856c5a5abec4278d1582bd35cac5328efd9d713847471f177f33f346fdcba0bba3708d3a0d5a971faf5034597bdf2e30f39e53210d6ac4b2e5e6950b8aa7e3c9a78af1dc5b42464b1821781818e62d2eea81cae4bcbfb16ab070c5459f1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5d, 0xfb, 0xf1d}, @ssp_cap={0x24, 0x10, 0xa, 0xf9, 0x6, 0x80, 0xf00, 0x1e, [0x7, 0x7e30, 0x3f00, 0x3fff, 0xcf, 0xcf]}, @ptm_cap={0x3}]}, 0x8, [{0x54, &(0x7f0000000600)=@string={0x54, 0x3, "110697578cb7fa436bdf079930b1581bc2e7f001e5321c1ba276d69c14a4e3de4b4968e8a73f2b2583714150f69be059d429c200b255ee5334085ceb68dc1da2e6b6529955150876b1574c2624c74bb93a9c"}}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "5090f5586e903247cbc3e6a8c73098843d82632963c7c03139d3a9db5b1d8884bb4c1b2be5c26bd508f09e6c3cc449cf1b670049e3fe2a48eabeedd3d4b49bce3eb93c327fc6dbcfefb669abec0176a8aa837c0a3a2f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x100a}}, {0xca, &(0x7f0000000740)=@string={0xca, 0x3, "b0175aafb92d0506748f3843552efebe2bd21306363b30eeb36cf518159f42d20500e103d9c68e6a77219b388569b3e5b7fbc06b3092c9e9009b3de0d586c0f470c5c6bba5a2fd04c3a9a6130f2956feb2914293c4603eae2e64c0ac9472ca35539819426da8102761743a622e1c4e05ced07382b0a7fe5ab2bab61dbb7d0e97331058fd1c3f60c5d812ad4ca9af8cb6a1905589d47475389a375305fd92a62c6396dfa3ecc97337fcb26df721de6e6ea3b9e53145a4b6bb3cb55d9b07640860f78e1d606c9a6006"}}, {0x10, &(0x7f0000000900)=@string={0x10, 0x3, "88aa41cd92e396783d956ea69f95"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x9e, &(0x7f0000000980)=@string={0x9e, 0x3, "0db83f8e40979e5dddb07434909dd12970863f328fdfbcf8d6120c6b2f105445e5351fecb352293df910e47955f9d529830205a49e05db338a8cd239de13fc4cf43530a54657264db5544b091a9242e797626107d522dfaf8bb3d0e6cabf89ded52a99ad18a968ad86ad52f9fabb0ee240ea809394454b7d9453fc622337881ab85c60f6e0962667b3facbc5ede31411e961c619d801d2b9291d40c3"}}, {0xe6, &(0x7f0000000a40)=@string={0xe6, 0x3, "0bd99c6b368997653b05a529674a533510921c25549bc9314e6edff366e3f301f68834f0844d3be3ba896f4ca3fd81e467264ccd235531f625a6f18195f9bb6a0dead7e8394dd3b068184bb95f059beddccb4fbce0f93c90f8c9524ec60a077f6e42dc75d751ae7661f3973b05b73b88d061e5a250c0f55b8f42b7c755fe0fd79febffdf2451872e2aaa25ad9cb8646c46a9594ee26e7842c8e058fc06a1d48335bcbcc25983eacabd9c2a36fa535c11cd47ddf2ef07b20457e5a193ef06b720329ab50dd3b586dcee49b089b688fc16d1dc06a43a87d61c2a67372a405fc59e7c9fde2f"}}]}) syz_usb_control_io(r3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, r4, 0x0) 25.355852439s ago: executing program 7 (id=1975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000019000b091200000000000000021810000002fd010008000008000100ac141400040008"], 0x28}}, 0x0) 23.753084482s ago: executing program 7 (id=1976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000001050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket(0x22, 0x2, 0x1) sendto$l2tp6(r1, 0x0, 0x0, 0x2c62983d46685bf1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000760091", @ANYRESOCT=r6], 0xfe33) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) io_submit(r9, 0x1f, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x0, r8, &(0x7f0000000000)="98", 0x1, 0x3e7ffffffc, 0x0, 0x10}]) write$vga_arbiter(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x8) socket$rxrpc(0x21, 0x2, 0xa) unshare(0x26000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$vga_arbiter(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock mem'], 0xb) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000000)=ANY=[]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00'}) fsopen(&(0x7f0000000100)='udf\x00', 0x0) 23.430039922s ago: executing program 1 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d61637365630000", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x44}}, 0x8000) (fail_nth: 7) 22.894767962s ago: executing program 1 (id=1979): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="751a14809e02e45c2b483f71fee461c56847fe06", 0x14}], 0x2, &(0x7f0000000540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x1, 0x80c4) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 22.548174062s ago: executing program 1 (id=1980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x82000) ioctl$I2C_SLAVE_FORCE(r5, 0x706, 0x3f6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000e00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x38, 0x1b, 0x400, 0x70bd2d, 0x25dfdbff, {0x4}, [@nested={0x4, 0xb5}, @generic="c0903276ec5dce018a49996e3d378087a2be7e08df0f9922261f3e5461"]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x8014) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) getresuid(&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0x2fb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x80000009, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x10004, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x464}}, 0x0) 22.357352406s ago: executing program 7 (id=1981): r0 = socket(0x2c, 0x80000, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) close(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x96, 0x90, 0x34, 0x20, 0x2058, 0x1005, 0xb5f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0x51, 0x8e, 0x3f}}, {{0x9, 0x4, 0x62, 0x0, 0x0, 0xd1, 0xd8, 0xa3, 0xff}}]}}]}}, 0x0) 22.223052313s ago: executing program 6 (id=1982): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$tcp_mem(r5, &(0x7f0000000400)={0x8, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) msgget(0x2, 0x0) r6 = socket(0xf, 0x2, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000093c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000001780)=[{&(0x7f00000000c0)="79d2f3abdd62d624a16b72d8978706d74568f4d7eb599a1aff1f17"}, {&(0x7f0000000480)="c4c52b04e6512a3c19061ebee3074b5a0f12f5263015b9eb8b509415ddfd0ee7914cd3a4f1d30548b929b9e6b8afec20f1b6b57d72408449d6ccbf2779eff9f3da407b15610ade7e5f80f34b38a41b7b4b33ee31ecde91971cf6cbcc47731832604f2f710b73e11025f74f7b10d597c49fc01e41e7ea9dda7e8ba0a6b20e3a482d473afd4be92d522f2c9b759f3d8f64fecf08aaea09bdc793f663a5e9778ed2458c6fe8595cade33745e98d74f5e42739b93103e5a3ca8ddc2d10d96b458144cd56a9218e0d0cbd386da0"}, {&(0x7f00000002c0)="07a2df41364e5a1c7520a9c5871ef6ebe27283bc8065dfa0ad6887377c12bc973a38287120e62c8ae10a33400d885fe68e4ea87ebe2359b18e2d152084539b76aff439cca9a4e6c8d897a984f9ee17badbd149871023a47e5a684e0e0be4e693533c2c6b405cb1de21db9199"}, {&(0x7f0000000580)="1e6f28a60f5fc57a6628ba5c3deeb7e4024761b206000814d86d47c243807cc40cafcbd5d450fe7fb6bc1f66e621ba6c24e41ac9e2b8722f3f04075155edbb37c8a5c374a8ac958bac1b4e5f55d9f5e471de80bca979"}, {&(0x7f0000000140)="f3303361de139370869a2eb65ff56b6cbc1302d8322d"}, {&(0x7f0000000600)="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"}, {&(0x7f0000001600)="ced3b2b224d84c4a47b03cd3ad18a69ed861959a1996fed498b43c2e75f8453076b11eaf7be339187e8824e5feb67b08b05b78f446c3721ebae095c7969b9924c9bd640d6d9cb9a74dce93db3adf8c3ae0eda305358462db6f26b920305e021233c401369aea1665b3c6f830705c083160557de3dbaaa1dba876f4478772a71d7a53b499135532ab63d5987d216cd96d70e2d6431d3df114338c97f9e778686282ab5d93c67addab39255496e718c74916f3c05de9d6265c163cbc760d0de509bb3bae1d30addc"}, {&(0x7f0000001700)="b24a4f8ca52333edd058062c64eeccc150324611de3e13d0cca81c71ff383116f01bb3956cd349d4556a68a51b5fa3a8aa715750f63df48ca0a9421cc5bda8cfdb179653248c16d2ba1b1239bb29c0290a3444209b5b5a5dcd767f1218ab"}], 0x0, &(0x7f0000001c80)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred, @rights={{0x0, 0x1, 0x1, [r7, r3, r2, 0xffffffffffffffff, r9]}}, @rights={{0x0, 0x1, 0x1, [r0, r4, r6, r1, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [r8, r3, r9]}}, @rights={{0x0, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x0, 0x885}}, {{&(0x7f0000001dc0)=@file={0x1, './mnt\x00'}, 0x0, &(0x7f0000003000)=[{&(0x7f0000001e40)="2622d660734202cfdd58f8eac818f5c2b1191eb17ee14280a1d1d8994e044088d484875057912bc28b42eb42b068df1b5c919e0c1298da193fca818cd0062a1beb4cd02c3fb64a17ef4f3c4fec7aff468c3f3c32e35bce1dbd54e1d1aa414d61779c7b58a56f76db0fb1d877be9f53e23b1c5a2889045f6df018d2fe6de735b3f37e296e3c40ea69559eb5488340ecb7d6cb0e976073604e9e3f114d4bf41601a50fcf1bb609030781"}, {&(0x7f0000001f00)="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"}, {&(0x7f0000002f00)="fdc48f0b29c0bb578f1b891a16c81564afd42da4f3220e0a1640d3f36282cb4948655d1401a85058bb95ebe25a5de0e221847c8c90f68e65c9f371faa5b089b6cce3f187c3666abab7654cb1caad84752cbe23b66f61d4b1e797d19660305aca88dae8b36ee234b34766a87ab83f88009084e857bc7d84f474bd9a8b717297d1df56320c752a545c5e56a8a285cdd6a790bf5a1713d3c92e01af4cd47ed2f870849e43996e744873c0615633d859034115fc85ec93ae5a43c0a531a528deef4a34a7abef7df3da40fe9a14f22fcde55ca8fafbebd7e04186b8d61f0e012961a5fdf936f59a79a5f005e31f4860e7a370954aff2ae6"}], 0x0, &(0x7f0000003040)=[@cred], 0x0, 0x1}}, {{&(0x7f0000003080)=@file={0x1, './mnt\x00'}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003100)="40a9be260faa8272f42307a25b9394eaf7baa8742c7150a9a02bb11320f6cfc9bcbe99a5cc4012b0b23fab703eb03b578dd14450d4b948d9b359fe21c9cc67a55346f805784b3f67ba2a8faff7f237bab30370c5497c7db62e3629084cd2b97838acc3f36c74cf3a8e089b46948ed28086560a84b80e878b87095db1daa0b63e059aa19e6abb13dd4370b46932b59044f4e36035a2c5f5928af5b413b9c084b11475f147f5919bdd580881ae90bac228a62f5a9d4390ebe54ad501b00e55d7bfa6b8504ab44a8b3f9024e6c9fd349c680d62c0afaacba3fe17dcd4d49fe2991b42bd54b616352c5458ee5ca84e07cc3b75844dd350"}, {&(0x7f0000003200)="3b433785ae0bb986eb5a3cdaf6844855b32fdd14038d58227e4f280fc5a475ebfc2a04bfb6cedc15f085b8b432baa22499962976a22b209085134db42ee756dac616ef809de3a45e6698e78424c71ccba5fca1647edecd10f6ac018df15aa59d479c4c142c84832d4919cd633643212e3fe4020cfad39520e3f363293f1d3e7dbe033459694bfe3354383ea1554e6eb7e5529138998d0e9973b9e10846e4745265430138518a"}], 0x0, &(0x7f0000003300)=[@cred, @cred], 0x0, 0x48010}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e21}, 0x0, &(0x7f00000041c0)=[{&(0x7f0000008340)="dd9e59a94ae8de817630d8c2c45e283b0023c58e7ee046d3c57f108f2638035437663505adb6fe13b21e76bba902a9e2b41057a26c5aa59897d56beb8d5b62b3cfa6c2c9bea06875fd803c3ca3a0feeb9aef4bf5d3"}], 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f00000083c0)=@file={0x1, './mnt/file0\x00'}, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006280)}, {&(0x7f0000008440)="d01163182fd9f7e1b8279d888da5d5deba37a88cf9d80766c4da60ce958b093b6cfd5f9191b987b436e89353ac293a8039b2fbb5d6f61a3fb1879315b279816f00ee3cab7ef3a989a152aa8879031f383ec4bc2165a5"}, {&(0x7f00000084c0)="e54896e9480191dd98752546ef52ee37fe205c37430c1ea0fea844964270269cb65cdf1d6bae7486e454"}, {&(0x7f0000008500)="ef12c0d2793a44032589cd4c12581acf6d5f3efd943b2a276afaec7614e931b07001ceaa70441851ad9a51ed4268c8b09ae8e961781847"}, {&(0x7f0000008540)="70ac7e24c8a83c71b502b260f47dd703d2e92bcc788d46eebb9df7efd9109831f3b99d637778b2b017332675c63f77bc0bd6ac8b77f6dab80dd2a4054148e1ac092e02a1d59e1e56edfdaddab80c27bcd2f2329e"}, {&(0x7f00000085c0)="bcbded2bd0e6d9ca3063358a42ff025359de7d86a1812d5fc281bfe3626a1bf086dc426c03af8236eac4433e529ac352b914fc964e678fbe201936f763f02642a1698580111be6e7d544e7c5607854011472a034ae093e80b67d9600d0f314611cb98e726652ce0e8694afd9704daeca04cfdc1b4031e22dbb2903a043e50ee46f0ba996870551ca12a60509a3a079d59cf7d7250cbcda45874a5336f3fd8a38a85f777f662bd918ad4b4d5d12a59f4f5e41c0874e1a888c68cd015dd00adbec53a16d533faef13e9a285ffd9000"}], 0x0, &(0x7f0000008740)=[@rights={{0x0, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @cred, @cred, @cred], 0x0, 0x810}}, {{&(0x7f00000087c0)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008840)="6eca39127aedb3dd27928a7ac898054ce11e8f8d4f47388f65af6767ed7b8b63f1cdb9b2512da965ae1f368f9885c1b6320f8b258908d763276e48a5330081406e0e55bd6c231fc0787ce24f796fa67fd3b6a938f8b8acf491f35516c5eb149e9fa5b9c9fc134c21726e07faedad261aa89842d37b0be63bb818606ed721175023dac1692adaad9e853537b1fabd8df91e0fd64a9c9187c4021d3d6d32a4bb41b441767be9f0f46033a462dc5a063e800a9b2e5b9d92213f40d7198b6e83421f985497cbcb9b2b91906ba25d241706bb90e7"}, {&(0x7f0000008940)="d325b9020ad26c9839f3da8779f77d4288800c6806d36c6a5362ebba975a6873b881641b36580ca4c5"}, {0xfffffffffffffffe}, {&(0x7f0000008980)="812128d8962f73c08bd999447573f0f798d5fbad973f92ae7b01a5da714f91a1c677138b76e2ff73b920027822b1595c78d36b63a1c89e467930010b41c74ef672facef09cc3a0c24ab9a5a0b6ee774dd674eab920906b90436b32fd19e62685b7be8c688565dfa11f1a95c82fded187e6842516ed65587cec69f957bda2aee90ce62211f0df5891350acff93c5de0b507f1742de49282c06f5a59350d604ae9eef8e7dfe5d7a7bc8dcb74644290cfc903e3b7f251303e7f4e30fb7492bfb88d6cf6c6f21fcf414ffba52b6bf2b99783840255373018d2649141aef2fe402de9a6b1ab6c7a46d4"}, {&(0x7f0000008a80)="62d5edb7900e77c523975cc607ee24a838fd099c3e321aa0872de0f060b720b0cc6e637c098f8ff31555cbc1dae7c05f6fb4659c135ebfe7e2724073d172da9c3726131feb26201881dabcab3013d91e5ee25870f110420705e8b2c906864e74fa081a507e3ebb1507bb645bfc207d10a8770f80288ac7c327c7e1b31ae659db707fdf3775b3d4fff71ccd35cc468f9ba6f8bafc9883d9142e8ac40c9be715722aaf89cc2dd47315bd85385f27fdc4358c0f674bb39e212b1034a66174d239df00d909c40982"}, {&(0x7f0000001800)="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"}, {&(0x7f0000008c40)="efe00f370060e4ed9dead71b87fa16541debff78c05fc271bf06736195e8feb6e2cf70d93b2be88a6efecca986679114c8a9135910564478cf5363521418177d6c77d7c3a0ce42055a48d82272b66ad642fede9889120be531c511f2b8"}], 0x0, &(0x7f0000008dc0)=[@rights={{0x0, 0x1, 0x1, [r1, r1, r1, r1, r9]}}, @rights={{0x0, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r4, 0xffffffffffffffff, r4]}}, @rights={{0x0, 0x1, 0x1, [r2, r4, r8, r1, r4]}}], 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000008f80)=[{&(0x7f0000008e40)="03c7bc5ef706532822eed73186d979c1c5db189ecc68d5"}, {&(0x7f0000008e80)="a27ac1abb34df82539ad815f5237b81004697c73adf098318d6ce40a4871515118024ce48a7fd481179418e5f9480e963bbb223a3e177321cdb30b81320e8b23ffbffeb2a7d7ec9092fee758660066ea39c9afa34121614b62d40b20950695990c6f046c8cfe8ea44b03ed2d6860de550b676d4b5b1d3156a6655b615aba0847201c30154bd6e5dd668422240ee548b865ad6bd7869db4fd36d8b9ad6ebfdf28d700ae1088b03da7b5524f69744c1095275fe0d4b00d72ca34bb2428a9b7cfa046a713689fa0984da35a5e09b62f3f3c3cdc6c490d575f6301ce3fda8837"}], 0x0, &(0x7f0000009040)=[@cred, @cred], 0x0, 0x20000840}}, {{&(0x7f0000009080)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000009200)=[{&(0x7f0000009100)="79deb0988e4a20d555a76e03b5ae8c404886ba97bcb2a7f5d1aeb841b9bab1b3512448a2ea7e2a1b4b931c12b4d9b4c93c156a8f575150040fd41e848037d06fd03dd225e02ed9e5e11c4cf13afda2592d093d21bd8799f1b659bff3103b3ed370703060523f1ebd63d99a639e51466f371fe56a1e1ef7d667c3fb18ffbf1ad0fb5a7bc4468c2893bae3ccd64cad481a3abd820207ee6a29823bdb4c2bd7e42e7f8e7df7981ae1e7f184b429c88851d54a7689175762910cecbf4ee2626c408f4c4aeec947b52f0d9c959f1906bfe71e926ac936a0fa27ddab4ab9fcae6effba4bc03c"}], 0x0, &(0x7f0000009380)=[@cred], 0x0, 0x10000}}], 0x2e, 0x8000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000080000000010000000a5c000000060a0b04000000000000000002000000300004802c0001800b00010065787468647200001c000280080001400000000d050002009400000008000640000000040900010073797a30000000000900020073797a32000000001400000000000000000000000a"], 0x84}}, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) dup2(r11, r11) 19.960605661s ago: executing program 6 (id=1985): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0x2b}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 19.933494276s ago: executing program 1 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="0042f9bf3e1e4f6bfa37c027949e03303eb636751470e497ba24576754163bb953fe6e8d3a32494127b74686780869d9040094ebe63505d33f3076c5257f54849a33dff197f69d73b476a13bc7687325bb2202c8ac591b2e0bbd789002a446bcc60cc54327f0daf5be0bd915", 0x6c}, {&(0x7f00000002c0)="751a14809e02e45c2b483f71fee461c56847fe06", 0x14}], 0x2}}], 0x1, 0x80c4) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 19.842980463s ago: executing program 0 (id=1987): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x6}}], 0x1, 0x8094) (async, rerun: 64) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) (async, rerun: 64) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) 19.10569116s ago: executing program 7 (id=1988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x35}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c2000000082f00450000200000000000119078000000000040000000004e20000c90780100e8cd0000"], 0x0) 18.510629157s ago: executing program 1 (id=1989): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x7fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0xd9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5b23, 0x5, 0x8, 0x2, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x7, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x0, 0x1, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x6, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x4, 0x2, 0xffff, 0xb37, 0x7fff, 0xbec, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0xe6, 0xb, 0x18000000, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x800, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0xa, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x9, 0x6, 0xffffff7f, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r4, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, 0x0) recvmsg(r5, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xcf, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b1000040"]) 18.035080436s ago: executing program 7 (id=1990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="751a14809e02e45c2b483f71fee461c56847fe06", 0x14}], 0x2, &(0x7f0000000540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x1, 0x80c4) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 17.397905041s ago: executing program 7 (id=1991): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000000b4b, 0x9, 0x8, 0x0, 0x7fff}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000140)=""/18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r8, 0x0, r8, 0x0, 0x4, 0x0) prlimit64(r5, 0xe, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48802) ioctl$SG_SET_TIMEOUT(r10, 0x2201, &(0x7f0000000080)=0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 16.885042005s ago: executing program 1 (id=1992): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x6, 0x92, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x30}}, 0x54) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x80, 0x190}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xfffffffa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect$uac1(0x2, 0xd0, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x40, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x4}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0x80, "2bbc23"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x286, 0x3, 0x5, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x2, "17f6cd4e2247"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x8a, "2afc56cd79"}, @mixer_unit={0x9, 0x24, 0x4, 0x8, 0x8, "f3c7f687"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0xf8, "d8", '1'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x6fe, 0x8, "0b921dcf493dd698"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x2, "1ea4485314a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x7, 0x5, {0x7, 0x25, 0x1, 0x3, 0x4, 0x13a0}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x2, 0x10, 0x40, 0x1}, 0x83, &(0x7f0000000100)={0x5, 0xf, 0x83, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x6, 0x11b8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "dd40be02c3e1b2f5e3897abd0c1616db"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x39, 0x5, 0x6, 0x6, 0x4}, @generic={0x55, 0x10, 0x3, "811a5ddaea3afb520a7eb7808926e1dd7035fc38174287fc7d79f3db61e2846c31e61cb6a276584c6ad52c6837d2809024d929a31309921fdfd703b6282b88da62241486835fdc5183a229e93739bb312918"}]}, 0x3, [{0x6d, &(0x7f0000000300)=@string={0x6d, 0x3, "d7b106a879d2634eb1866fbdcee90a42155fb62b08ba900fc1f12f807b53e06cdb74d0d254c1489278964460f6f6f1df48da6f6d33cf0c0a39f952c1ec91414439bddb3403b44fed62a36198070fd1344ece0ed8a61bf39d50cd3ec1d7859c83929537f167c80b30edf543"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x100, 0x5, 0x1, {0x22, 0x743}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x75, 0x3, 0x4, 0x8, 0xc6}, 0x117, &(0x7f00000004c0)={0x5, 0xf, 0x117, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffb176, 0xff00, 0x7, [0x0]}, @generic={0xd1, 0x10, 0x0, "3457698d0e0439f2f8fe8d73ef2efca58d6e57e4bd9bf6512b5ee03e0449846d8401c419f75a3152ba153ce6133b102c393ad4775fce46b252712d371ce9b32dfdab13925a76d36e6cb5d2d6cf6b0d8de6bbcc49c5e47e3d838aa8fc36c84e5c4d2de90b981bf8519db2643d9123ede48856c5a5abec4278d1582bd35cac5328efd9d713847471f177f33f346fdcba0bba3708d3a0d5a971faf5034597bdf2e30f39e53210d6ac4b2e5e6950b8aa7e3c9a78af1dc5b42464b1821781818e62d2eea81cae4bcbfb16ab070c5459f1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5d, 0xfb, 0xf1d}, @ssp_cap={0x24, 0x10, 0xa, 0xf9, 0x6, 0x80, 0xf00, 0x1e, [0x7, 0x7e30, 0x3f00, 0x3fff, 0xcf, 0xcf]}, @ptm_cap={0x3}]}, 0x8, [{0x54, &(0x7f0000000600)=@string={0x54, 0x3, "110697578cb7fa436bdf079930b1581bc2e7f001e5321c1ba276d69c14a4e3de4b4968e8a73f2b2583714150f69be059d429c200b255ee5334085ceb68dc1da2e6b6529955150876b1574c2624c74bb93a9c"}}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "5090f5586e903247cbc3e6a8c73098843d82632963c7c03139d3a9db5b1d8884bb4c1b2be5c26bd508f09e6c3cc449cf1b670049e3fe2a48eabeedd3d4b49bce3eb93c327fc6dbcfefb669abec0176a8aa837c0a3a2f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x100a}}, {0xca, &(0x7f0000000740)=@string={0xca, 0x3, "b0175aafb92d0506748f3843552efebe2bd21306363b30eeb36cf518159f42d20500e103d9c68e6a77219b388569b3e5b7fbc06b3092c9e9009b3de0d586c0f470c5c6bba5a2fd04c3a9a6130f2956feb2914293c4603eae2e64c0ac9472ca35539819426da8102761743a622e1c4e05ced07382b0a7fe5ab2bab61dbb7d0e97331058fd1c3f60c5d812ad4ca9af8cb6a1905589d47475389a375305fd92a62c6396dfa3ecc97337fcb26df721de6e6ea3b9e53145a4b6bb3cb55d9b07640860f78e1d606c9a6006"}}, {0x10, &(0x7f0000000900)=@string={0x10, 0x3, "88aa41cd92e396783d956ea69f95"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x9e, &(0x7f0000000980)=@string={0x9e, 0x3, "0db83f8e40979e5dddb07434909dd12970863f328fdfbcf8d6120c6b2f105445e5351fecb352293df910e47955f9d529830205a49e05db338a8cd239de13fc4cf43530a54657264db5544b091a9242e797626107d522dfaf8bb3d0e6cabf89ded52a99ad18a968ad86ad52f9fabb0ee240ea809394454b7d9453fc622337881ab85c60f6e0962667b3facbc5ede31411e961c619d801d2b9291d40c3"}}, {0xe6, &(0x7f0000000a40)=@string={0xe6, 0x3, "0bd99c6b368997653b05a529674a533510921c25549bc9314e6edff366e3f301f68834f0844d3be3ba896f4ca3fd81e467264ccd235531f625a6f18195f9bb6a0dead7e8394dd3b068184bb95f059beddccb4fbce0f93c90f8c9524ec60a077f6e42dc75d751ae7661f3973b05b73b88d061e5a250c0f55b8f42b7c755fe0fd79febffdf2451872e2aaa25ad9cb8646c46a9594ee26e7842c8e058fc06a1d48335bcbcc25983eacabd9c2a36fa535c11cd47ddf2ef07b20457e5a193ef06b720329ab50dd3b586dcee49b089b688fc16d1dc06a43a87d61c2a67372a405fc59e7c9fde2f"}}]}) syz_usb_control_io(r3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, r4, 0x0) 16.717235893s ago: executing program 0 (id=1993): openat$mixer(0xffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pwrite64(r0, 0x0, 0x0, 0xd084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002023008000000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = creat(0x0, 0x0) write$qrtrtun(r1, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (fail_nth: 4) 16.051075869s ago: executing program 0 (id=1994): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 64) r3 = fanotify_init(0x200, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x40000019, r4, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000480)={0x6, 0x0, @ioapic={0x1, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x81}, {0x4, 0x4, 0x4, '\x00', 0xc}, {0x0, 0x8, 0xb0, '\x00', 0xd}, {0x9, 0xe, 0x6, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x6, 0x7, '\x00', 0x4c}, {0x6, 0x6, 0x1, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x6, 0x1, 0x6, '\x00', 0x7f}, {0x5, 0x6, 0x7, '\x00', 0x2}, {0x7, 0x10, 0x5, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xc}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x2, 0x6, 0x8e, '\x00', 0x1}, {0x81, 0x0, 0x12, '\x00', 0x8}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x1}]}}) (async, rerun: 32) fanotify_mark(r3, 0x102, 0x48001050, r2, 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) 15.964868197s ago: executing program 0 (id=1995): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x200000000000000}}, 0x1c) 15.874761481s ago: executing program 0 (id=1996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$tcp_mem(r5, &(0x7f0000000400)={0x8, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) msgget(0x2, 0x0) r6 = socket(0xf, 0x2, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000093c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000001780)=[{&(0x7f00000000c0)="79d2f3abdd62d624a16b72d8978706d74568f4d7eb599a1aff1f17"}, {&(0x7f0000000480)="c4c52b04e6512a3c19061ebee3074b5a0f12f5263015b9eb8b509415ddfd0ee7914cd3a4f1d30548b929b9e6b8afec20f1b6b57d72408449d6ccbf2779eff9f3da407b15610ade7e5f80f34b38a41b7b4b33ee31ecde91971cf6cbcc47731832604f2f710b73e11025f74f7b10d597c49fc01e41e7ea9dda7e8ba0a6b20e3a482d473afd4be92d522f2c9b759f3d8f64fecf08aaea09bdc793f663a5e9778ed2458c6fe8595cade33745e98d74f5e42739b93103e5a3ca8ddc2d10d96b458144cd56a9218e0d0cbd386da0"}, {&(0x7f00000002c0)="07a2df41364e5a1c7520a9c5871ef6ebe27283bc8065dfa0ad6887377c12bc973a38287120e62c8ae10a33400d885fe68e4ea87ebe2359b18e2d152084539b76aff439cca9a4e6c8d897a984f9ee17badbd149871023a47e5a684e0e0be4e693533c2c6b405cb1de21db9199"}, {&(0x7f0000000580)="1e6f28a60f5fc57a6628ba5c3deeb7e4024761b206000814d86d47c243807cc40cafcbd5d450fe7fb6bc1f66e621ba6c24e41ac9e2b8722f3f04075155edbb37c8a5c374a8ac958bac1b4e5f55d9f5e471de80bca979"}, {&(0x7f0000000140)="f3303361de139370869a2eb65ff56b6cbc1302d8322d"}, {&(0x7f0000000600)="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"}, {&(0x7f0000001600)="ced3b2b224d84c4a47b03cd3ad18a69ed861959a1996fed498b43c2e75f8453076b11eaf7be339187e8824e5feb67b08b05b78f446c3721ebae095c7969b9924c9bd640d6d9cb9a74dce93db3adf8c3ae0eda305358462db6f26b920305e021233c401369aea1665b3c6f830705c083160557de3dbaaa1dba876f4478772a71d7a53b499135532ab63d5987d216cd96d70e2d6431d3df114338c97f9e778686282ab5d93c67addab39255496e718c74916f3c05de9d6265c163cbc760d0de509bb3bae1d30addc"}, {&(0x7f0000001700)="b24a4f8ca52333edd058062c64eeccc150324611de3e13d0cca81c71ff383116f01bb3956cd349d4556a68a51b5fa3a8aa715750f63df48ca0a9421cc5bda8cfdb179653248c16d2ba1b1239bb29c0290a3444209b5b5a5dcd767f1218ab"}], 0x0, &(0x7f0000001c80)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred, @rights={{0x0, 0x1, 0x1, [r7, r3, r2, 0xffffffffffffffff, r9]}}, @rights={{0x0, 0x1, 0x1, [r0, r4, r6, r1, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [r8, r3, r9]}}, @rights={{0x0, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x0, 0x885}}, {{&(0x7f0000001dc0)=@file={0x1, './mnt\x00'}, 0x0, &(0x7f0000003000)=[{&(0x7f0000001e40)="2622d660734202cfdd58f8eac818f5c2b1191eb17ee14280a1d1d8994e044088d484875057912bc28b42eb42b068df1b5c919e0c1298da193fca818cd0062a1beb4cd02c3fb64a17ef4f3c4fec7aff468c3f3c32e35bce1dbd54e1d1aa414d61779c7b58a56f76db0fb1d877be9f53e23b1c5a2889045f6df018d2fe6de735b3f37e296e3c40ea69559eb5488340ecb7d6cb0e976073604e9e3f114d4bf41601a50fcf1bb609030781"}, {&(0x7f0000001f00)="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"}, {&(0x7f0000002f00)="fdc48f0b29c0bb578f1b891a16c81564afd42da4f3220e0a1640d3f36282cb4948655d1401a85058bb95ebe25a5de0e221847c8c90f68e65c9f371faa5b089b6cce3f187c3666abab7654cb1caad84752cbe23b66f61d4b1e797d19660305aca88dae8b36ee234b34766a87ab83f88009084e857bc7d84f474bd9a8b717297d1df56320c752a545c5e56a8a285cdd6a790bf5a1713d3c92e01af4cd47ed2f870849e43996e744873c0615633d859034115fc85ec93ae5a43c0a531a528deef4a34a7abef7df3da40fe9a14f22fcde55ca8fafbebd7e04186b8d61f0e012961a5fdf936f59a79a5f005e31f4860e7a370954aff2ae6"}], 0x0, &(0x7f0000003040)=[@cred], 0x0, 0x1}}, {{&(0x7f0000003080)=@file={0x1, './mnt\x00'}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003100)="40a9be260faa8272f42307a25b9394eaf7baa8742c7150a9a02bb11320f6cfc9bcbe99a5cc4012b0b23fab703eb03b578dd14450d4b948d9b359fe21c9cc67a55346f805784b3f67ba2a8faff7f237bab30370c5497c7db62e3629084cd2b97838acc3f36c74cf3a8e089b46948ed28086560a84b80e878b87095db1daa0b63e059aa19e6abb13dd4370b46932b59044f4e36035a2c5f5928af5b413b9c084b11475f147f5919bdd580881ae90bac228a62f5a9d4390ebe54ad501b00e55d7bfa6b8504ab44a8b3f9024e6c9fd349c680d62c0afaacba3fe17dcd4d49fe2991b42bd54b616352c5458ee5ca84e07cc3b75844dd350"}, {&(0x7f0000003200)="3b433785ae0bb986eb5a3cdaf6844855b32fdd14038d58227e4f280fc5a475ebfc2a04bfb6cedc15f085b8b432baa22499962976a22b209085134db42ee756dac616ef809de3a45e6698e78424c71ccba5fca1647edecd10f6ac018df15aa59d479c4c142c84832d4919cd633643212e3fe4020cfad39520e3f363293f1d3e7dbe033459694bfe3354383ea1554e6eb7e5529138998d0e9973b9e10846e4745265430138518a"}], 0x0, &(0x7f0000003300)=[@cred, @cred], 0x0, 0x48010}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e21}, 0x0, &(0x7f00000041c0)=[{&(0x7f0000008340)="dd9e59a94ae8de817630d8c2c45e283b0023c58e7ee046d3c57f108f2638035437663505adb6fe13b21e76bba902a9e2b41057a26c5aa59897d56beb8d5b62b3cfa6c2c9bea06875fd803c3ca3a0feeb9aef4bf5d3"}], 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f00000083c0)=@file={0x1, './mnt/file0\x00'}, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006280)}, {&(0x7f0000008440)="d01163182fd9f7e1b8279d888da5d5deba37a88cf9d80766c4da60ce958b093b6cfd5f9191b987b436e89353ac293a8039b2fbb5d6f61a3fb1879315b279816f00ee3cab7ef3a989a152aa8879031f383ec4bc2165a5"}, {&(0x7f00000084c0)="e54896e9480191dd98752546ef52ee37fe205c37430c1ea0fea844964270269cb65cdf1d6bae7486e454"}, {&(0x7f0000008500)="ef12c0d2793a44032589cd4c12581acf6d5f3efd943b2a276afaec7614e931b07001ceaa70441851ad9a51ed4268c8b09ae8e961781847"}, {&(0x7f0000008540)="70ac7e24c8a83c71b502b260f47dd703d2e92bcc788d46eebb9df7efd9109831f3b99d637778b2b017332675c63f77bc0bd6ac8b77f6dab80dd2a4054148e1ac092e02a1d59e1e56edfdaddab80c27bcd2f2329e"}, {&(0x7f00000085c0)="bcbded2bd0e6d9ca3063358a42ff025359de7d86a1812d5fc281bfe3626a1bf086dc426c03af8236eac4433e529ac352b914fc964e678fbe201936f763f02642a1698580111be6e7d544e7c5607854011472a034ae093e80b67d9600d0f314611cb98e726652ce0e8694afd9704daeca04cfdc1b4031e22dbb2903a043e50ee46f0ba996870551ca12a60509a3a079d59cf7d7250cbcda45874a5336f3fd8a38a85f777f662bd918ad4b4d5d12a59f4f5e41c0874e1a888c68cd015dd00adbec53a16d533faef13e9a285ffd9000"}], 0x0, &(0x7f0000008740)=[@rights={{0x0, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @cred, @cred, @cred], 0x0, 0x810}}, {{&(0x7f00000087c0)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008840)="6eca39127aedb3dd27928a7ac898054ce11e8f8d4f47388f65af6767ed7b8b63f1cdb9b2512da965ae1f368f9885c1b6320f8b258908d763276e48a5330081406e0e55bd6c231fc0787ce24f796fa67fd3b6a938f8b8acf491f35516c5eb149e9fa5b9c9fc134c21726e07faedad261aa89842d37b0be63bb818606ed721175023dac1692adaad9e853537b1fabd8df91e0fd64a9c9187c4021d3d6d32a4bb41b441767be9f0f46033a462dc5a063e800a9b2e5b9d92213f40d7198b6e83421f985497cbcb9b2b91906ba25d241706bb90e7"}, {&(0x7f0000008940)="d325b9020ad26c9839f3da8779f77d4288800c6806d36c6a5362ebba975a6873b881641b36580ca4c5"}, {0xfffffffffffffffe}, {&(0x7f0000008980)="812128d8962f73c08bd999447573f0f798d5fbad973f92ae7b01a5da714f91a1c677138b76e2ff73b920027822b1595c78d36b63a1c89e467930010b41c74ef672facef09cc3a0c24ab9a5a0b6ee774dd674eab920906b90436b32fd19e62685b7be8c688565dfa11f1a95c82fded187e6842516ed65587cec69f957bda2aee90ce62211f0df5891350acff93c5de0b507f1742de49282c06f5a59350d604ae9eef8e7dfe5d7a7bc8dcb74644290cfc903e3b7f251303e7f4e30fb7492bfb88d6cf6c6f21fcf414ffba52b6bf2b99783840255373018d2649141aef2fe402de9a6b1ab6c7a46d4"}, {&(0x7f0000008a80)="62d5edb7900e77c523975cc607ee24a838fd099c3e321aa0872de0f060b720b0cc6e637c098f8ff31555cbc1dae7c05f6fb4659c135ebfe7e2724073d172da9c3726131feb26201881dabcab3013d91e5ee25870f110420705e8b2c906864e74fa081a507e3ebb1507bb645bfc207d10a8770f80288ac7c327c7e1b31ae659db707fdf3775b3d4fff71ccd35cc468f9ba6f8bafc9883d9142e8ac40c9be715722aaf89cc2dd47315bd85385f27fdc4358c0f674bb39e212b1034a66174d239df00d909c40982"}, {&(0x7f0000001800)="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"}, {&(0x7f0000008c40)="efe00f370060e4ed9dead71b87fa16541debff78c05fc271bf06736195e8feb6e2cf70d93b2be88a6efecca986679114c8a9135910564478cf5363521418177d6c77d7c3a0ce42055a48d82272b66ad642fede9889120be531c511f2b8"}], 0x0, &(0x7f0000008dc0)=[@rights={{0x0, 0x1, 0x1, [r1, r1, r1, r1, r9]}}, @rights={{0x0, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r4, 0xffffffffffffffff, r4]}}, @rights={{0x0, 0x1, 0x1, [r2, r4, r8, r1, r4]}}], 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000008f80)=[{&(0x7f0000008e40)="03c7bc5ef706532822eed73186d979c1c5db189ecc68d5"}, {&(0x7f0000008e80)="a27ac1abb34df82539ad815f5237b81004697c73adf098318d6ce40a4871515118024ce48a7fd481179418e5f9480e963bbb223a3e177321cdb30b81320e8b23ffbffeb2a7d7ec9092fee758660066ea39c9afa34121614b62d40b20950695990c6f046c8cfe8ea44b03ed2d6860de550b676d4b5b1d3156a6655b615aba0847201c30154bd6e5dd668422240ee548b865ad6bd7869db4fd36d8b9ad6ebfdf28d700ae1088b03da7b5524f69744c1095275fe0d4b00d72ca34bb2428a9b7cfa046a713689fa0984da35a5e09b62f3f3c3cdc6c490d575f6301ce3fda8837"}], 0x0, &(0x7f0000009040)=[@cred, @cred], 0x0, 0x20000840}}, {{&(0x7f0000009080)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000009200)=[{&(0x7f0000009100)="79deb0988e4a20d555a76e03b5ae8c404886ba97bcb2a7f5d1aeb841b9bab1b3512448a2ea7e2a1b4b931c12b4d9b4c93c156a8f575150040fd41e848037d06fd03dd225e02ed9e5e11c4cf13afda2592d093d21bd8799f1b659bff3103b3ed370703060523f1ebd63d99a639e51466f371fe56a1e1ef7d667c3fb18ffbf1ad0fb5a7bc4468c2893bae3ccd64cad481a3abd820207ee6a29823bdb4c2bd7e42e7f8e7df7981ae1e7f184b429c88851d54a7689175762910cecbf4ee2626c408f4c4aeec947b52f0d9c959f1906bfe71e926ac936a0fa27ddab4ab9fcae6effba4bc03c"}], 0x0, &(0x7f0000009380)=[@cred], 0x0, 0x10000}}], 0x2e, 0x8000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000080000000010000000a5c000000060a0b04000000000000000002000000300004802c0001800b00010065787468647200001c000280080001400000000d050002009400000008000640000000040900010073797a30000000000900020073797a32000000001400000000000000000000000a"], 0x84}}, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) dup2(r11, r11) 15.169258548s ago: executing program 0 (id=1997): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x234, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1f8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1d8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xbc, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x85, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4b"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x38, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "4ac6768e05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 9) 4.01050447s ago: executing program 35 (id=1985): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0x2b}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.99418787s ago: executing program 36 (id=1991): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000000b4b, 0x9, 0x8, 0x0, 0x7fff}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000140)=""/18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r8, 0x0, r8, 0x0, 0x4, 0x0) prlimit64(r5, 0xe, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48802) ioctl$SG_SET_TIMEOUT(r10, 0x2201, &(0x7f0000000080)=0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 1.502595959s ago: executing program 37 (id=1992): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x6, 0x92, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x30}}, 0x54) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x80, 0x190}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xfffffffa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect$uac1(0x2, 0xd0, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x40, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x4}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0x80, "2bbc23"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x286, 0x3, 0x5, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x2, "17f6cd4e2247"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x8a, "2afc56cd79"}, @mixer_unit={0x9, 0x24, 0x4, 0x8, 0x8, "f3c7f687"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0xf8, "d8", '1'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x6fe, 0x8, "0b921dcf493dd698"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x2, "1ea4485314a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x7, 0x5, {0x7, 0x25, 0x1, 0x3, 0x4, 0x13a0}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x2, 0x10, 0x40, 0x1}, 0x83, &(0x7f0000000100)={0x5, 0xf, 0x83, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x6, 0x11b8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "dd40be02c3e1b2f5e3897abd0c1616db"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x39, 0x5, 0x6, 0x6, 0x4}, @generic={0x55, 0x10, 0x3, "811a5ddaea3afb520a7eb7808926e1dd7035fc38174287fc7d79f3db61e2846c31e61cb6a276584c6ad52c6837d2809024d929a31309921fdfd703b6282b88da62241486835fdc5183a229e93739bb312918"}]}, 0x3, [{0x6d, &(0x7f0000000300)=@string={0x6d, 0x3, "d7b106a879d2634eb1866fbdcee90a42155fb62b08ba900fc1f12f807b53e06cdb74d0d254c1489278964460f6f6f1df48da6f6d33cf0c0a39f952c1ec91414439bddb3403b44fed62a36198070fd1344ece0ed8a61bf39d50cd3ec1d7859c83929537f167c80b30edf543"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x100, 0x5, 0x1, {0x22, 0x743}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x75, 0x3, 0x4, 0x8, 0xc6}, 0x117, &(0x7f00000004c0)={0x5, 0xf, 0x117, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffb176, 0xff00, 0x7, [0x0]}, @generic={0xd1, 0x10, 0x0, "3457698d0e0439f2f8fe8d73ef2efca58d6e57e4bd9bf6512b5ee03e0449846d8401c419f75a3152ba153ce6133b102c393ad4775fce46b252712d371ce9b32dfdab13925a76d36e6cb5d2d6cf6b0d8de6bbcc49c5e47e3d838aa8fc36c84e5c4d2de90b981bf8519db2643d9123ede48856c5a5abec4278d1582bd35cac5328efd9d713847471f177f33f346fdcba0bba3708d3a0d5a971faf5034597bdf2e30f39e53210d6ac4b2e5e6950b8aa7e3c9a78af1dc5b42464b1821781818e62d2eea81cae4bcbfb16ab070c5459f1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5d, 0xfb, 0xf1d}, @ssp_cap={0x24, 0x10, 0xa, 0xf9, 0x6, 0x80, 0xf00, 0x1e, [0x7, 0x7e30, 0x3f00, 0x3fff, 0xcf, 0xcf]}, @ptm_cap={0x3}]}, 0x8, [{0x54, &(0x7f0000000600)=@string={0x54, 0x3, "110697578cb7fa436bdf079930b1581bc2e7f001e5321c1ba276d69c14a4e3de4b4968e8a73f2b2583714150f69be059d429c200b255ee5334085ceb68dc1da2e6b6529955150876b1574c2624c74bb93a9c"}}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "5090f5586e903247cbc3e6a8c73098843d82632963c7c03139d3a9db5b1d8884bb4c1b2be5c26bd508f09e6c3cc449cf1b670049e3fe2a48eabeedd3d4b49bce3eb93c327fc6dbcfefb669abec0176a8aa837c0a3a2f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x100a}}, {0xca, &(0x7f0000000740)=@string={0xca, 0x3, "b0175aafb92d0506748f3843552efebe2bd21306363b30eeb36cf518159f42d20500e103d9c68e6a77219b388569b3e5b7fbc06b3092c9e9009b3de0d586c0f470c5c6bba5a2fd04c3a9a6130f2956feb2914293c4603eae2e64c0ac9472ca35539819426da8102761743a622e1c4e05ced07382b0a7fe5ab2bab61dbb7d0e97331058fd1c3f60c5d812ad4ca9af8cb6a1905589d47475389a375305fd92a62c6396dfa3ecc97337fcb26df721de6e6ea3b9e53145a4b6bb3cb55d9b07640860f78e1d606c9a6006"}}, {0x10, &(0x7f0000000900)=@string={0x10, 0x3, "88aa41cd92e396783d956ea69f95"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x9e, &(0x7f0000000980)=@string={0x9e, 0x3, "0db83f8e40979e5dddb07434909dd12970863f328fdfbcf8d6120c6b2f105445e5351fecb352293df910e47955f9d529830205a49e05db338a8cd239de13fc4cf43530a54657264db5544b091a9242e797626107d522dfaf8bb3d0e6cabf89ded52a99ad18a968ad86ad52f9fabb0ee240ea809394454b7d9453fc622337881ab85c60f6e0962667b3facbc5ede31411e961c619d801d2b9291d40c3"}}, {0xe6, &(0x7f0000000a40)=@string={0xe6, 0x3, "0bd99c6b368997653b05a529674a533510921c25549bc9314e6edff366e3f301f68834f0844d3be3ba896f4ca3fd81e467264ccd235531f625a6f18195f9bb6a0dead7e8394dd3b068184bb95f059beddccb4fbce0f93c90f8c9524ec60a077f6e42dc75d751ae7661f3973b05b73b88d061e5a250c0f55b8f42b7c755fe0fd79febffdf2451872e2aaa25ad9cb8646c46a9594ee26e7842c8e058fc06a1d48335bcbcc25983eacabd9c2a36fa535c11cd47ddf2ef07b20457e5a193ef06b720329ab50dd3b586dcee49b089b688fc16d1dc06a43a87d61c2a67372a405fc59e7c9fde2f"}}]}) syz_usb_control_io(r3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, r4, 0x0) 0s ago: executing program 38 (id=1997): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x234, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1f8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1d8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xbc, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x85, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4b"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x38, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "4ac6768e05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 9) kernel console output (not intermixed with test programs): with_ifid+0x14ac/0x1a70 [ 523.029717][T13055] ? __lock_acquire+0xab9/0xd20 [ 523.029743][T13055] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 523.029775][T13055] ? ip6_mtu+0x7d/0x3f0 [ 523.029799][T13055] ? __pfx___ip6_append_data+0x10/0x10 [ 523.029818][T13055] ? __pfx_ip6_mtu+0x10/0x10 [ 523.029848][T13055] ip6_append_data+0x1c4/0x380 [ 523.029875][T13055] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 523.029894][T13055] icmp6_send+0x1205/0x1940 [ 523.029921][T13055] ? icmp6_send+0x1e9/0x1940 [ 523.029963][T13055] ? __pfx_icmp6_send+0x10/0x10 [ 523.030005][T13055] ? __ip6_local_out+0x609/0x870 [ 523.030033][T13055] ? __ip6_local_out+0x609/0x870 [ 523.030050][T13055] ? __pfx___ip6_local_out+0x10/0x10 [ 523.030073][T13055] ip6_pkt_drop+0x4dc/0x640 [ 523.030104][T13055] ip6_pkt_discard_out+0xf2/0x120 [ 523.030125][T13055] ? ip6_send_skb+0x10f/0x390 [ 523.030147][T13055] ip6_send_skb+0x1d5/0x390 [ 523.030172][T13055] rawv6_push_pending_frames+0x6e9/0x8d0 [ 523.030204][T13055] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 523.030231][T13055] ? __pfx_raw6_getfrag+0x10/0x10 [ 523.030260][T13055] rawv6_sendmsg+0x12ff/0x17f0 [ 523.030296][T13055] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 523.030344][T13055] ? __pfx_aa_sk_perm+0x10/0x10 [ 523.030367][T13055] ? sock_rps_record_flow+0x19/0x410 [ 523.030396][T13055] ? inet_sendmsg+0x2f4/0x370 [ 523.030410][T13055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.030434][T13055] __sock_sendmsg+0x19c/0x270 [ 523.030463][T13055] ____sys_sendmsg+0x52d/0x830 [ 523.030490][T13055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.030521][T13055] ? import_iovec+0x74/0xa0 [ 523.030541][T13055] ___sys_sendmsg+0x21f/0x2a0 [ 523.030565][T13055] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.030624][T13055] ? __fget_files+0x2a/0x420 [ 523.030643][T13055] ? __fget_files+0x3a0/0x420 [ 523.030672][T13055] __sys_sendmmsg+0x227/0x430 [ 523.030707][T13055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 523.030724][T13055] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 523.030777][T13055] ? ksys_write+0x22a/0x250 [ 523.030796][T13055] ? __pfx_ksys_write+0x10/0x10 [ 523.030810][T13055] ? rcu_is_watching+0x15/0xb0 [ 523.030840][T13055] __x64_sys_sendmmsg+0xa0/0xc0 [ 523.030864][T13055] do_syscall_64+0xfa/0x3b0 [ 523.030879][T13055] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.030902][T13055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.030919][T13055] ? clear_bhb_loop+0x60/0xb0 [ 523.030940][T13055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.030957][T13055] RIP: 0033:0x7f5cc9d8e929 [ 523.030974][T13055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.030989][T13055] RSP: 002b:00007f5ccac79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 523.031008][T13055] RAX: ffffffffffffffda RBX: 00007f5cc9fb5fa0 RCX: 00007f5cc9d8e929 [ 523.031022][T13055] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 523.031033][T13055] RBP: 00007f5ccac79090 R08: 0000000000000000 R09: 0000000000000000 [ 523.031044][T13055] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 523.031054][T13055] R13: 0000000000000000 R14: 00007f5cc9fb5fa0 R15: 00007f5cca0dfa28 [ 523.031082][T13055] [ 523.082500][ T10] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 523.739493][ T10] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 523.854019][ T10] usb 7-1: USB disconnect, device number 33 [ 523.905123][ T978] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 524.079715][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 524.098760][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 524.112281][ T978] usb 3-1: config 7 has an invalid interface number: 109 but max is 0 [ 524.161922][ T978] usb 3-1: config 7 has no interface number 0 [ 524.214343][ T978] usb 3-1: config 7 interface 109 has no altsetting 0 [ 524.252164][ T978] usb 3-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=73.6c [ 524.279809][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.305943][ T978] usb 3-1: Product: syz [ 524.310160][ T978] usb 3-1: Manufacturer: syz [ 524.325176][ T978] usb 3-1: SerialNumber: syz [ 524.423293][T13068] fido_id[13068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 524.424724][ T5922] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 524.639778][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.665570][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.670621][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.683192][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 524.700423][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 524.703094][ T978] snd-usb-audio 3-1:7.109: probe with driver snd-usb-audio failed with error -2 [ 524.740249][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.794778][ T5922] usb 2-1: config 0 descriptor?? [ 524.810791][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 524.831366][ T978] usb 3-1: USB disconnect, device number 68 [ 524.908212][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.109/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.010101][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.021389][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.113025][ T5184] bcm5974 2-1:0.0: could not read from device [ 525.191322][ T5184] bcm5974 2-1:0.0: could not read from device [ 525.200012][ T5922] usb 2-1: USB disconnect, device number 65 [ 525.250396][ T6066] bcm5974 2-1:0.0: could not read from device [ 525.287172][ T5184] bcm5974 2-1:0.0: could not read from device [ 525.376389][ T6066] udevd[6066]: Error opening device "/dev/input/event4": No such device [ 525.395738][ T6066] udevd[6066]: Unable to EVIOCGABS device "/dev/input/event4" [ 525.440967][ T6066] udevd[6066]: Unable to EVIOCGABS device "/dev/input/event4" [ 525.478828][ T6066] udevd[6066]: Unable to EVIOCGABS device "/dev/input/event4" [ 525.502888][ T6066] udevd[6066]: Unable to EVIOCGABS device "/dev/input/event4" [ 525.534442][ T6066] udevd[6066]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 525.608235][ T5199] udevd[5199]: worker [6066] terminated by signal 6 (Aborted) [ 525.616678][ T5199] udevd[5199]: worker [6066] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46/event4' [ 525.662391][T13097] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 525.768649][T13098] syzkaller0: entered promiscuous mode [ 525.803062][T13098] syzkaller0: entered allmulticast mode [ 525.986699][ T978] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 526.154353][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 526.163478][ T978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 526.172962][ T978] usb 1-1: config 7 has an invalid interface number: 109 but max is 0 [ 526.184373][ T978] usb 1-1: config 7 has no interface number 0 [ 526.190889][ T978] usb 1-1: config 7 interface 109 has no altsetting 0 [ 526.758239][ T978] usb 1-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=73.6c [ 526.768089][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.800503][ T978] usb 1-1: Product: syz [ 526.805963][ T978] usb 1-1: Manufacturer: syz [ 526.810909][ T978] usb 1-1: SerialNumber: syz [ 527.040109][ T978] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.218372][ T978] snd-usb-audio 1-1:7.109: probe with driver snd-usb-audio failed with error -2 [ 527.236995][ T978] usb 1-1: USB disconnect, device number 68 [ 527.296659][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.109/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.479365][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 528.398134][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 530.494895][ T978] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 530.685203][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 530.707197][ T978] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 530.721025][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.744086][ T978] usb 2-1: config 0 descriptor?? [ 530.754954][ T978] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 530.765671][ T978] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 531.976498][T13151] FAULT_INJECTION: forcing a failure. [ 531.976498][T13151] name failslab, interval 1, probability 0, space 0, times 0 [ 532.030372][T13151] CPU: 1 UID: 0 PID: 13151 Comm: syz.0.1695 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 532.030400][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.030410][T13151] Call Trace: [ 532.030418][T13151] [ 532.030426][T13151] dump_stack_lvl+0x189/0x250 [ 532.030457][T13151] ? __pfx____ratelimit+0x10/0x10 [ 532.030482][T13151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.030507][T13151] ? __pfx__printk+0x10/0x10 [ 532.030532][T13151] ? ref_tracker_alloc+0x318/0x460 [ 532.030557][T13151] should_fail_ex+0x414/0x560 [ 532.030584][T13151] should_failslab+0xa8/0x100 [ 532.030604][T13151] kmem_cache_alloc_noprof+0x73/0x3c0 [ 532.030630][T13151] ? skb_clone+0x212/0x3a0 [ 532.030655][T13151] skb_clone+0x212/0x3a0 [ 532.030680][T13151] __netlink_deliver_tap+0x404/0x850 [ 532.030713][T13151] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.030734][T13151] netlink_deliver_tap+0x19c/0x1b0 [ 532.030754][T13151] netlink_unicast+0x72f/0x8d0 [ 532.030783][T13151] netlink_sendmsg+0x805/0xb30 [ 532.030812][T13151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.030835][T13151] ? aa_sock_msg_perm+0x94/0x160 [ 532.030858][T13151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.030880][T13151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.030900][T13151] __sock_sendmsg+0x219/0x270 [ 532.030927][T13151] ____sys_sendmsg+0x505/0x830 [ 532.030954][T13151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.030997][T13151] ? import_iovec+0x74/0xa0 [ 532.031018][T13151] ___sys_sendmsg+0x21f/0x2a0 [ 532.031041][T13151] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.031090][T13151] ? __fget_files+0x2a/0x420 [ 532.031108][T13151] ? __fget_files+0x3a0/0x420 [ 532.031137][T13151] __x64_sys_sendmsg+0x19b/0x260 [ 532.031159][T13151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.031186][T13151] ? __pfx_ksys_write+0x10/0x10 [ 532.031199][T13151] ? rcu_is_watching+0x15/0xb0 [ 532.031226][T13151] ? do_syscall_64+0xbe/0x3b0 [ 532.031243][T13151] do_syscall_64+0xfa/0x3b0 [ 532.031254][T13151] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.031274][T13151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.031291][T13151] ? clear_bhb_loop+0x60/0xb0 [ 532.031330][T13151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.031346][T13151] RIP: 0033:0x7fbccd18e929 [ 532.031366][T13151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.031381][T13151] RSP: 002b:00007fbcce0b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.031400][T13151] RAX: ffffffffffffffda RBX: 00007fbccd3b5fa0 RCX: 00007fbccd18e929 [ 532.031413][T13151] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 532.031424][T13151] RBP: 00007fbcce0b9090 R08: 0000000000000000 R09: 0000000000000000 [ 532.031435][T13151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.031446][T13151] R13: 0000000000000000 R14: 00007fbccd3b5fa0 R15: 00007fbccd4dfa28 [ 532.031474][T13151] [ 532.853245][T13165] FAULT_INJECTION: forcing a failure. [ 532.853245][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 532.968361][T13165] CPU: 1 UID: 0 PID: 13165 Comm: syz.7.1699 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 532.968381][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.968388][T13165] Call Trace: [ 532.968393][T13165] [ 532.968398][T13165] dump_stack_lvl+0x189/0x250 [ 532.968416][T13165] ? __pfx____ratelimit+0x10/0x10 [ 532.968430][T13165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.968444][T13165] ? __pfx__printk+0x10/0x10 [ 532.968457][T13165] ? __pfx___might_resched+0x10/0x10 [ 532.968470][T13165] ? fs_reclaim_acquire+0x7d/0x100 [ 532.968484][T13165] should_fail_ex+0x414/0x560 [ 532.968499][T13165] should_failslab+0xa8/0x100 [ 532.968510][T13165] __kmalloc_noprof+0xcb/0x4f0 [ 532.968519][T13165] ? security_sk_alloc+0x52/0x390 [ 532.968530][T13165] security_sk_alloc+0x52/0x390 [ 532.968540][T13165] sk_prot_alloc+0x101/0x220 [ 532.968550][T13165] ? sk_alloc+0x24/0x370 [ 532.968562][T13165] sk_alloc+0x3a/0x370 [ 532.968571][T13165] ? bpf_ctx_init+0x167/0x1d0 [ 532.968583][T13165] bpf_prog_test_run_skb+0x2ed/0x1560 [ 532.968593][T13165] ? __fget_files+0x2a/0x420 [ 532.968610][T13165] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 532.968621][T13165] bpf_prog_test_run+0x2c7/0x340 [ 532.968636][T13165] __sys_bpf+0x4a4/0x860 [ 532.968649][T13165] ? __pfx___sys_bpf+0x10/0x10 [ 532.968667][T13165] ? ksys_write+0x22a/0x250 [ 532.968677][T13165] ? __pfx_ksys_write+0x10/0x10 [ 532.968685][T13165] ? rcu_is_watching+0x15/0xb0 [ 532.968702][T13165] __x64_sys_bpf+0x7c/0x90 [ 532.968713][T13165] do_syscall_64+0xfa/0x3b0 [ 532.968721][T13165] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.968734][T13165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.968743][T13165] ? clear_bhb_loop+0x60/0xb0 [ 532.968754][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.968762][T13165] RIP: 0033:0x7fd43958e929 [ 532.968772][T13165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.968780][T13165] RSP: 002b:00007fd43a4d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.968791][T13165] RAX: ffffffffffffffda RBX: 00007fd4397b5fa0 RCX: 00007fd43958e929 [ 532.968798][T13165] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 532.968804][T13165] RBP: 00007fd43a4d0090 R08: 0000000000000000 R09: 0000000000000000 [ 532.968810][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.968816][T13165] R13: 0000000000000000 R14: 00007fd4397b5fa0 R15: 00007fd4398dfa28 [ 532.968830][T13165] [ 533.234220][ T978] usb 2-1: USB disconnect, device number 66 [ 533.447839][ T6796] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 533.606600][ T6796] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.655327][ T6796] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.677669][ T6796] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.687705][ T6796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.736636][T13163] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 533.747647][ T6796] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 533.906150][T13176] input: syz1 as /devices/virtual/input/input47 [ 534.101308][ T10] usb 1-1: USB disconnect, device number 69 [ 534.624375][ T5922] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 534.682999][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 534.734435][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 534.784431][ T5922] usb 2-1: device descriptor read/64, error -71 [ 535.044373][ T5922] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 535.194379][ T5922] usb 2-1: device descriptor read/64, error -71 [ 535.305033][ T5922] usb usb2-port1: attempt power cycle [ 535.645272][ T5922] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 535.742122][ T5922] usb 2-1: device descriptor read/8, error -71 [ 536.004682][ T5922] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 536.049921][ T5922] usb 2-1: device descriptor read/8, error -71 [ 536.292756][ T5922] usb usb2-port1: unable to enumerate USB device [ 536.770711][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 536.770730][ T30] audit: type=1326 audit(1750802612.960:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 536.877234][ T30] audit: type=1326 audit(1750802612.960:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 536.901325][ T30] audit: type=1326 audit(1750802612.970:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 536.924465][ T30] audit: type=1326 audit(1750802612.970:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 537.089829][ T30] audit: type=1326 audit(1750802612.970:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 537.184810][ T30] audit: type=1326 audit(1750802612.970:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 537.263680][ T30] audit: type=1326 audit(1750802612.970:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 537.286195][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.313794][ T30] audit: type=1326 audit(1750802612.970:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 537.336305][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.517377][ T30] audit: type=1326 audit(1750802612.970:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 537.571187][ T30] audit: type=1326 audit(1750802612.970:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.7.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 538.645396][T13258] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1729'. [ 539.139396][T13268] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 539.414426][ T6796] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 539.656334][ T6796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.764482][ T6796] usb 1-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 539.817113][ T6796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.864930][ T6796] usb 1-1: config 0 descriptor?? [ 539.935249][ T978] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 540.098334][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 540.118577][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 540.190276][ T6796] usbhid 1-1:0.0: can't add hid device: -71 [ 540.202634][ T978] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 540.206761][ T6796] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 540.230640][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.258226][ T978] usb 3-1: Product: syz [ 540.270134][ T978] usb 3-1: Manufacturer: syz [ 540.271474][ T6796] usb 1-1: USB disconnect, device number 70 [ 540.331701][ T978] usb 3-1: SerialNumber: syz [ 540.836113][T13282] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1735'. [ 541.052513][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1736'. [ 541.197640][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 541.280823][T13294] bridge1: entered promiscuous mode [ 542.157731][ T978] usb 3-1: selecting invalid altsetting 1 [ 542.215498][ T978] catc 3-1:8.0: Can't set altsetting 1. [ 542.221378][ T978] catc 3-1:8.0: probe with driver catc failed with error -5 [ 542.239620][T13303] netlink: 'syz.1.1739': attribute type 29 has an invalid length. [ 542.287964][T13303] netlink: 'syz.1.1739': attribute type 29 has an invalid length. [ 542.304980][ T978] usb 3-1: USB disconnect, device number 69 [ 542.437834][T13305] fuse: Unknown parameter '0xffffffffffffffff' [ 542.565759][T13310] veth1_macvtap: left promiscuous mode [ 542.724908][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1742'. [ 543.238608][T13324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 543.407043][T13331] FAULT_INJECTION: forcing a failure. [ 543.407043][T13331] name failslab, interval 1, probability 0, space 0, times 0 [ 543.439342][T13331] CPU: 1 UID: 0 PID: 13331 Comm: syz.7.1747 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 543.439368][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.439379][T13331] Call Trace: [ 543.439387][T13331] [ 543.439395][T13331] dump_stack_lvl+0x189/0x250 [ 543.439435][T13331] ? __pfx____ratelimit+0x10/0x10 [ 543.439459][T13331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.439484][T13331] ? __pfx__printk+0x10/0x10 [ 543.439509][T13331] ? __ip_dev_find+0x444/0x4e0 [ 543.439534][T13331] should_fail_ex+0x414/0x560 [ 543.439560][T13331] should_failslab+0xa8/0x100 [ 543.439581][T13331] kmem_cache_alloc_noprof+0x73/0x3c0 [ 543.439606][T13331] ? dst_alloc+0x105/0x170 [ 543.439632][T13331] dst_alloc+0x105/0x170 [ 543.439651][T13331] ? ip_check_mc_rcu+0x4c7/0x680 [ 543.439676][T13331] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 543.439710][T13331] ? ip_route_output_key_hash+0xde/0x2e0 [ 543.439734][T13331] ip_route_output_key_hash+0x1b9/0x2e0 [ 543.439756][T13331] ? __lock_acquire+0xab9/0xd20 [ 543.439779][T13331] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 543.439819][T13331] ip_route_output_flow+0x2a/0x150 [ 543.439839][T13331] ? security_sk_classify_flow+0x70/0x180 [ 543.439859][T13331] udp_sendmsg+0x1405/0x2300 [ 543.439880][T13331] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 543.439909][T13331] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 543.439933][T13331] ? __pfx_udp_sendmsg+0x10/0x10 [ 543.439956][T13331] ? count_memcg_event_mm+0x21/0x260 [ 543.439987][T13331] ? count_memcg_event_mm+0x21/0x260 [ 543.440022][T13331] ? __pfx_aa_sk_perm+0x10/0x10 [ 543.440039][T13331] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 543.440065][T13331] ? sock_rps_record_flow+0x19/0x410 [ 543.440092][T13331] ? inet_sendmsg+0x29c/0x370 [ 543.440106][T13331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.440131][T13331] __sock_sendmsg+0x19c/0x270 [ 543.440157][T13331] ____sys_sendmsg+0x52d/0x830 [ 543.440184][T13331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.440214][T13331] ? import_iovec+0x74/0xa0 [ 543.440235][T13331] ___sys_sendmsg+0x21f/0x2a0 [ 543.440258][T13331] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.440315][T13331] ? __fget_files+0x2a/0x420 [ 543.440333][T13331] ? __fget_files+0x3a0/0x420 [ 543.440362][T13331] __sys_sendmmsg+0x227/0x430 [ 543.440388][T13331] ? __pfx___sys_sendmmsg+0x10/0x10 [ 543.440412][T13331] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 543.440463][T13331] ? ksys_write+0x22a/0x250 [ 543.440482][T13331] ? __pfx_ksys_write+0x10/0x10 [ 543.440496][T13331] ? rcu_is_watching+0x15/0xb0 [ 543.440528][T13331] __x64_sys_sendmmsg+0xa0/0xc0 [ 543.440551][T13331] do_syscall_64+0xfa/0x3b0 [ 543.440565][T13331] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.440588][T13331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.440606][T13331] ? clear_bhb_loop+0x60/0xb0 [ 543.440627][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.440643][T13331] RIP: 0033:0x7fd43958e929 [ 543.440660][T13331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.440675][T13331] RSP: 002b:00007fd43a4d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 543.440694][T13331] RAX: ffffffffffffffda RBX: 00007fd4397b5fa0 RCX: 00007fd43958e929 [ 543.440706][T13331] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 543.440717][T13331] RBP: 00007fd43a4d0090 R08: 0000000000000000 R09: 0000000000000000 [ 543.440727][T13331] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 543.440737][T13331] R13: 0000000000000000 R14: 00007fd4397b5fa0 R15: 00007fd4398dfa28 [ 543.440765][T13331] [ 543.795643][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.078753][ T5901] IPVS: starting estimator thread 0... [ 544.265126][T13339] IPVS: using max 31 ests per chain, 74400 per kthread [ 544.314037][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1751'. [ 544.861251][T13361] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1754'. [ 544.922475][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 545.477408][T13371] xt_policy: too many policy elements [ 545.890096][ T30] kauditd_printk_skb: 730 callbacks suppressed [ 545.890113][ T30] audit: type=1326 audit(1750802622.100:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.000343][ T30] audit: type=1326 audit(1750802622.140:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.243795][ T30] audit: type=1326 audit(1750802622.140:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.266380][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.273448][ T30] audit: type=1326 audit(1750802622.140:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.299463][ T30] audit: type=1326 audit(1750802622.140:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.331826][ T30] audit: type=1326 audit(1750802622.140:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.376267][ T30] audit: type=1326 audit(1750802622.140:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.398679][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.490852][ T30] audit: type=1326 audit(1750802622.140:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.576388][ T30] audit: type=1326 audit(1750802622.140:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.7.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 546.576436][ T30] audit: type=1326 audit(1750802622.740:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.2.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f498e929 code=0x7ffc0000 [ 546.669311][ T978] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 546.673248][ T978] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 546.857184][T13400] fido_id[13400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 546.956708][T13402] FAULT_INJECTION: forcing a failure. [ 546.956708][T13402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.971416][T13402] CPU: 0 UID: 0 PID: 13402 Comm: syz.2.1764 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 546.971442][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.971453][T13402] Call Trace: [ 546.971461][T13402] [ 546.971470][T13402] dump_stack_lvl+0x189/0x250 [ 546.971500][T13402] ? __pfx____ratelimit+0x10/0x10 [ 546.971524][T13402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.971550][T13402] ? __pfx__printk+0x10/0x10 [ 546.971578][T13402] should_fail_ex+0x414/0x560 [ 546.971601][T13402] _copy_to_user+0x31/0xb0 [ 546.971619][T13402] simple_read_from_buffer+0xe1/0x170 [ 546.971639][T13402] proc_fail_nth_read+0x1df/0x250 [ 546.971661][T13402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.971685][T13402] ? rw_verify_area+0x258/0x650 [ 546.971708][T13402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.971730][T13402] vfs_read+0x200/0x980 [ 546.971760][T13402] ? __pfx___mutex_lock+0x10/0x10 [ 546.971785][T13402] ? __pfx_vfs_read+0x10/0x10 [ 546.971811][T13402] ? __fget_files+0x2a/0x420 [ 546.971835][T13402] ? __fget_files+0x3a0/0x420 [ 546.971852][T13402] ? __fget_files+0x2a/0x420 [ 546.971880][T13402] ksys_read+0x145/0x250 [ 546.971906][T13402] ? __pfx_ksys_read+0x10/0x10 [ 546.971927][T13402] ? rcu_is_watching+0x15/0xb0 [ 546.971956][T13402] ? do_syscall_64+0xbe/0x3b0 [ 546.971974][T13402] do_syscall_64+0xfa/0x3b0 [ 546.971990][T13402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.972005][T13402] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.972022][T13402] ? clear_bhb_loop+0x60/0xb0 [ 546.972043][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.972059][T13402] RIP: 0033:0x7fd1f498d33c [ 546.972075][T13402] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 546.972090][T13402] RSP: 002b:00007fd1f27f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.972108][T13402] RAX: ffffffffffffffda RBX: 00007fd1f4bb5fa0 RCX: 00007fd1f498d33c [ 546.972121][T13402] RDX: 000000000000000f RSI: 00007fd1f27f60a0 RDI: 0000000000000004 [ 546.972132][T13402] RBP: 00007fd1f27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.972142][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.972153][T13402] R13: 0000000000000000 R14: 00007fd1f4bb5fa0 R15: 00007fd1f4cdfa28 [ 546.972191][T13402] [ 548.629192][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1770'. [ 549.224978][ T5901] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 549.396484][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 549.399843][T13427] FAULT_INJECTION: forcing a failure. [ 549.399843][T13427] name failslab, interval 1, probability 0, space 0, times 0 [ 549.399881][T13427] CPU: 0 UID: 0 PID: 13427 Comm: syz.1.1772 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 549.399903][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.399912][T13427] Call Trace: [ 549.399920][T13427] [ 549.399928][T13427] dump_stack_lvl+0x189/0x250 [ 549.399960][T13427] ? __pfx____ratelimit+0x10/0x10 [ 549.399985][T13427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.400009][T13427] ? __pfx__printk+0x10/0x10 [ 549.400033][T13427] ? __pfx___might_resched+0x10/0x10 [ 549.400057][T13427] ? fs_reclaim_acquire+0x7d/0x100 [ 549.400081][T13427] should_fail_ex+0x414/0x560 [ 549.400107][T13427] should_failslab+0xa8/0x100 [ 549.400127][T13427] kmem_cache_alloc_noprof+0x73/0x3c0 [ 549.400151][T13427] ? __kernfs_new_node+0xd7/0x7e0 [ 549.400176][T13427] __kernfs_new_node+0xd7/0x7e0 [ 549.400196][T13427] ? __lock_acquire+0xab9/0xd20 [ 549.400226][T13427] ? __pfx___kernfs_new_node+0x10/0x10 [ 549.400246][T13427] ? kernfs_root+0x1c/0x230 [ 549.400271][T13427] ? kernfs_root+0x1c/0x230 [ 549.400289][T13427] ? kernfs_root+0x1c/0x230 [ 549.400306][T13427] ? kernfs_root+0x1c/0x230 [ 549.400329][T13427] kernfs_new_node+0x102/0x210 [ 549.400355][T13427] __kernfs_create_file+0x4b/0x2e0 [ 549.400382][T13427] sysfs_add_file_mode_ns+0x238/0x300 [ 549.400408][T13427] internal_create_group+0x66d/0x1110 [ 549.400445][T13427] ? __pfx_internal_create_group+0x10/0x10 [ 549.400470][T13427] ? loop_update_dio+0x256/0x3a0 [ 549.400495][T13427] loop_configure+0x912/0xfa0 [ 549.400531][T13427] ? __pfx_loop_configure+0x10/0x10 [ 549.400585][T13427] lo_ioctl+0x79b/0x2410 [ 549.400616][T13427] ? __pfx_lo_ioctl+0x10/0x10 [ 549.400634][T13427] ? ima_match_policy+0x10b/0x2150 [ 549.400658][T13427] ? look_up_lock_class+0x74/0x170 [ 549.400683][T13427] ? register_lock_class+0x51/0x320 [ 549.400711][T13427] ? __lock_acquire+0xab9/0xd20 [ 549.400744][T13427] ? process_measurement+0x3d8/0x1a40 [ 549.400771][T13427] ? irqentry_exit+0x74/0x90 [ 549.400793][T13427] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.400821][T13427] ? __lock_acquire+0xab9/0xd20 [ 549.400856][T13427] ? __lock_acquire+0xab9/0xd20 [ 549.400896][T13427] ? __lock_acquire+0xab9/0xd20 [ 549.400938][T13427] ? is_bpf_text_address+0x26/0x2b0 [ 549.400967][T13427] ? is_bpf_text_address+0x292/0x2b0 [ 549.400990][T13427] ? is_bpf_text_address+0x26/0x2b0 [ 549.401016][T13427] ? kernel_text_address+0xa5/0xe0 [ 549.401038][T13427] ? __kernel_text_address+0xd/0x40 [ 549.401058][T13427] ? unwind_get_return_address+0x4d/0x90 [ 549.401082][T13427] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 549.401101][T13427] ? arch_stack_walk+0xfc/0x150 [ 549.401130][T13427] ? stack_trace_save+0x9c/0xe0 [ 549.401151][T13427] ? stack_depot_save_flags+0x40/0x900 [ 549.401182][T13427] ? kasan_save_track+0x4f/0x80 [ 549.401204][T13427] ? kasan_save_track+0x3e/0x80 [ 549.401225][T13427] ? kasan_save_free_info+0x46/0x50 [ 549.401244][T13427] ? __kasan_slab_free+0x62/0x70 [ 549.401259][T13427] ? kfree+0x18e/0x440 [ 549.401279][T13427] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 549.401297][T13427] ? security_file_ioctl+0xcb/0x2d0 [ 549.401313][T13427] ? __se_sys_ioctl+0x47/0x170 [ 549.401334][T13427] ? do_syscall_64+0xfa/0x3b0 [ 549.401348][T13427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.401390][T13427] ? do_vfs_ioctl+0xf37/0x1990 [ 549.401416][T13427] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 549.401446][T13427] ? kasan_quarantine_put+0xdd/0x220 [ 549.401476][T13427] ? blkdev_common_ioctl+0xfc3/0x2450 [ 549.401499][T13427] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 549.401520][T13427] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 549.401539][T13427] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 549.401560][T13427] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 549.401578][T13427] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 549.401637][T13427] ? __pfx_lo_ioctl+0x10/0x10 [ 549.401658][T13427] blkdev_ioctl+0x5a5/0x6d0 [ 549.401684][T13427] ? __pfx_blkdev_ioctl+0x10/0x10 [ 549.401704][T13427] ? __fget_files+0x2a/0x420 [ 549.401727][T13427] ? bpf_lsm_file_ioctl+0x9/0x20 [ 549.401749][T13427] ? __pfx_blkdev_ioctl+0x10/0x10 [ 549.401772][T13427] __se_sys_ioctl+0xf9/0x170 [ 549.401798][T13427] do_syscall_64+0xfa/0x3b0 [ 549.401812][T13427] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.401835][T13427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.401852][T13427] ? clear_bhb_loop+0x60/0xb0 [ 549.401878][T13427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.401894][T13427] RIP: 0033:0x7f5cc9d8e929 [ 549.401911][T13427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.401926][T13427] RSP: 002b:00007f5ccac79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.401945][T13427] RAX: ffffffffffffffda RBX: 00007f5cc9fb5fa0 RCX: 00007f5cc9d8e929 [ 549.401958][T13427] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 549.401969][T13427] RBP: 00007f5ccac79090 R08: 0000000000000000 R09: 0000000000000000 [ 549.401981][T13427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.401991][T13427] R13: 0000000000000000 R14: 00007f5cc9fb5fa0 R15: 00007f5cca0dfa28 [ 549.402020][T13427] [ 549.402311][T13427] loop2: detected capacity change from 0 to 7 [ 549.406334][T13427] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 549.406354][T13427] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 549.406452][T13427] Dev loop2: unable to read RDB block 7 [ 549.406492][T13427] loop2: unable to read partition table [ 549.406687][T13427] loop2: partition table beyond EOD, truncated [ 549.406705][T13427] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 549.414786][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 549.414847][ T5901] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 549.425799][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 549.425838][ T5901] usb 2-1: can't read configurations, error -71 [ 550.178097][T13441] FAULT_INJECTION: forcing a failure. [ 550.178097][T13441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.178129][T13441] CPU: 0 UID: 0 PID: 13441 Comm: syz.1.1778 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 550.178150][T13441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 550.178161][T13441] Call Trace: [ 550.178168][T13441] [ 550.178176][T13441] dump_stack_lvl+0x189/0x250 [ 550.178204][T13441] ? __pfx____ratelimit+0x10/0x10 [ 550.178228][T13441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.178252][T13441] ? __pfx__printk+0x10/0x10 [ 550.178285][T13441] should_fail_ex+0x414/0x560 [ 550.178311][T13441] _copy_to_iter+0x575/0x16f0 [ 550.178346][T13441] ? __pfx__copy_to_iter+0x10/0x10 [ 550.178367][T13441] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 550.178396][T13441] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 550.178424][T13441] __skb_datagram_iter+0xf8/0x990 [ 550.178447][T13441] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 550.178478][T13441] skb_copy_datagram_iter+0xc5/0x230 [ 550.178504][T13441] netlink_recvmsg+0x2ab/0xa30 [ 550.178533][T13441] ? __pfx_netlink_recvmsg+0x10/0x10 [ 550.178558][T13441] ? aa_sock_msg_perm+0x94/0x160 [ 550.178579][T13441] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 550.178600][T13441] ? security_socket_recvmsg+0x7e/0x2e0 [ 550.178624][T13441] ? __pfx_netlink_recvmsg+0x10/0x10 [ 550.178643][T13441] sock_recvmsg+0x229/0x270 [ 550.178671][T13441] ____sys_recvmsg+0x1c9/0x460 [ 550.178701][T13441] ? __pfx_____sys_recvmsg+0x10/0x10 [ 550.178737][T13441] ? import_iovec+0x74/0xa0 [ 550.178757][T13441] ___sys_recvmsg+0x1b5/0x510 [ 550.178783][T13441] ? __pfx____sys_recvmsg+0x10/0x10 [ 550.178833][T13441] ? __fget_files+0x3a0/0x420 [ 550.178863][T13441] do_recvmmsg+0x307/0x770 [ 550.178891][T13441] ? __pfx_do_recvmmsg+0x10/0x10 [ 550.178925][T13441] ? _copy_from_user+0x94/0xb0 [ 550.178957][T13441] __x64_sys_recvmmsg+0x1af/0x240 [ 550.178981][T13441] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 550.179001][T13441] ? rcu_is_watching+0x15/0xb0 [ 550.179030][T13441] ? do_syscall_64+0xbe/0x3b0 [ 550.179049][T13441] do_syscall_64+0xfa/0x3b0 [ 550.179063][T13441] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.179085][T13441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.179103][T13441] ? clear_bhb_loop+0x60/0xb0 [ 550.179123][T13441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.179140][T13441] RIP: 0033:0x7f5cc9d8e929 [ 550.179155][T13441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.179170][T13441] RSP: 002b:00007f5ccac79038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 550.179189][T13441] RAX: ffffffffffffffda RBX: 00007f5cc9fb5fa0 RCX: 00007f5cc9d8e929 [ 550.179202][T13441] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 550.179214][T13441] RBP: 00007f5ccac79090 R08: 0000200000003700 R09: 0000000000000000 [ 550.179225][T13441] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 550.179236][T13441] R13: 0000000000000000 R14: 00007f5cc9fb5fa0 R15: 00007f5cca0dfa28 [ 550.179264][T13441] [ 551.224567][ T5941] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 551.402614][ T5941] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 551.404615][ T5941] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 551.404643][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.404663][ T5941] usb 2-1: Product: syz [ 551.404677][ T5941] usb 2-1: Manufacturer: syz [ 551.404691][ T5941] usb 2-1: SerialNumber: syz [ 551.410481][ T5941] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 552.218777][ T5892] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 552.384580][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 552.394874][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.410286][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.421210][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.466943][ T5941] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 552.482199][ T5892] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.506732][ T5941] usb 2-1: USB disconnect, device number 73 [ 552.522706][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.553405][ T5892] usb 3-1: config 0 descriptor?? [ 552.914636][ T6797] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 552.976111][ T5892] microsoft 0003:045E:07DA.0025: item fetching failed at offset 30/34 [ 552.990739][ T5892] microsoft 0003:045E:07DA.0025: parse failed [ 552.997918][ T5892] microsoft 0003:045E:07DA.0025: probe with driver microsoft failed with error -22 [ 553.010187][T13473] FAULT_INJECTION: forcing a failure. [ 553.010187][T13473] name failslab, interval 1, probability 0, space 0, times 0 [ 553.033175][T13473] CPU: 0 UID: 0 PID: 13473 Comm: syz.0.1790 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 553.033200][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.033210][T13473] Call Trace: [ 553.033217][T13473] [ 553.033225][T13473] dump_stack_lvl+0x189/0x250 [ 553.033255][T13473] ? __pfx____ratelimit+0x10/0x10 [ 553.033278][T13473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.033299][T13473] ? __pfx__printk+0x10/0x10 [ 553.033321][T13473] ? __pfx___might_resched+0x10/0x10 [ 553.033346][T13473] ? fs_reclaim_acquire+0x7d/0x100 [ 553.033371][T13473] should_fail_ex+0x414/0x560 [ 553.033406][T13473] should_failslab+0xa8/0x100 [ 553.033427][T13473] __kmalloc_cache_noprof+0x70/0x3d0 [ 553.033444][T13473] ? nf_tables_newtable+0x435/0x1890 [ 553.033464][T13473] ? nla_strcmp+0x106/0x140 [ 553.033490][T13473] nf_tables_newtable+0x435/0x1890 [ 553.033509][T13473] ? __pfx_nfnl_pernet+0x2/0x10 [ 553.033551][T13473] nfnetlink_rcv+0x1132/0x2520 [ 553.033606][T13473] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 553.033645][T13473] ? ref_tracker_free+0x63a/0x7d0 [ 553.033696][T13473] ? __netlink_deliver_tap+0x807/0x850 [ 553.033725][T13473] ? netlink_deliver_tap+0x2e/0x1b0 [ 553.033743][T13473] ? netlink_deliver_tap+0x2e/0x1b0 [ 553.033767][T13473] netlink_unicast+0x75b/0x8d0 [ 553.033796][T13473] netlink_sendmsg+0x805/0xb30 [ 553.033825][T13473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.033849][T13473] ? aa_sock_msg_perm+0x94/0x160 [ 553.033871][T13473] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.033893][T13473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.033913][T13473] __sock_sendmsg+0x219/0x270 [ 553.033939][T13473] ____sys_sendmsg+0x505/0x830 [ 553.033964][T13473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.033994][T13473] ? import_iovec+0x74/0xa0 [ 553.034015][T13473] ___sys_sendmsg+0x21f/0x2a0 [ 553.034039][T13473] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.034102][T13473] ? __fget_files+0x2a/0x420 [ 553.034120][T13473] ? __fget_files+0x3a0/0x420 [ 553.034149][T13473] __x64_sys_sendmsg+0x19b/0x260 [ 553.034172][T13473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.034203][T13473] ? __pfx_ksys_write+0x10/0x10 [ 553.034217][T13473] ? rcu_is_watching+0x15/0xb0 [ 553.034247][T13473] ? do_syscall_64+0xbe/0x3b0 [ 553.034268][T13473] do_syscall_64+0xfa/0x3b0 [ 553.034280][T13473] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.034301][T13473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.034316][T13473] ? clear_bhb_loop+0x60/0xb0 [ 553.034337][T13473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.034354][T13473] RIP: 0033:0x7fbccd18e929 [ 553.034370][T13473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.034384][T13473] RSP: 002b:00007fbcce0b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.034408][T13473] RAX: ffffffffffffffda RBX: 00007fbccd3b5fa0 RCX: 00007fbccd18e929 [ 553.034421][T13473] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 553.034433][T13473] RBP: 00007fbcce0b9090 R08: 0000000000000000 R09: 0000000000000000 [ 553.034443][T13473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.034454][T13473] R13: 0000000000000000 R14: 00007fbccd3b5fa0 R15: 00007fbccd4dfa28 [ 553.034481][T13473] [ 553.145488][ T6797] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 553.321544][ T978] usb 3-1: USB disconnect, device number 70 [ 553.432091][T13475] netlink: 'syz.1.1791': attribute type 21 has an invalid length. [ 553.445043][T13475] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 553.457203][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.464106][T13475] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1791'. [ 553.467484][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.480069][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 553.500767][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.515666][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.527760][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.574082][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.581966][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.598140][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.610312][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.640764][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.650621][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.661955][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.669907][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.678989][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.758407][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.784773][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.801360][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.869945][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.949098][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 553.958625][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 553.969793][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 554.159289][ T6797] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 554.178028][ T6797] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 554.207106][ T6797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 554.303232][ T6797] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 554.341749][ T5892] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 554.357298][ T6797] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 554.377612][ T6797] usb 7-1: Product: syz [ 554.382069][ T6797] usb 7-1: Manufacturer: syz [ 554.454532][ T6797] usb 7-1: SerialNumber: syz [ 554.489131][ T6797] usb 7-1: config 0 descriptor?? [ 554.513786][ T6797] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 554.545197][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 554.640320][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 554.640336][ T30] audit: type=1326 audit(1750802630.850:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.710206][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 554.738620][ T5901] usb 7-1: USB disconnect, device number 34 [ 554.746576][ T5901] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 554.768677][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.779587][ T5892] usb 3-1: config 0 descriptor?? [ 554.840112][ T30] audit: type=1326 audit(1750802630.900:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840157][ T30] audit: type=1326 audit(1750802630.920:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840197][ T30] audit: type=1326 audit(1750802630.920:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840237][ T30] audit: type=1326 audit(1750802630.940:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840284][ T30] audit: type=1326 audit(1750802630.940:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840323][ T30] audit: type=1326 audit(1750802630.940:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840359][ T30] audit: type=1326 audit(1750802630.940:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840399][ T30] audit: type=1326 audit(1750802630.940:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.840438][ T30] audit: type=1326 audit(1750802630.940:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.7.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd43958e929 code=0x7ffc0000 [ 554.940112][ T6797] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 555.139930][T13490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1795'. [ 555.179671][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.210159][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.256311][ T6797] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 555.288494][T13498] fido_id[13498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 555.327598][ T6797] usb 3-1: USB disconnect, device number 71 [ 556.975606][ T5901] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 557.165121][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 557.244584][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.286598][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 557.330892][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.418693][ T5901] usb 3-1: config 0 descriptor?? [ 557.448344][ T5901] hub 3-1:0.0: bad descriptor, ignoring hub [ 557.502213][ T5901] hub 3-1:0.0: probe with driver hub failed with error -5 [ 557.537733][ T5901] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 558.417889][ T5892] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 558.624854][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 558.656587][T13557] Invalid logical block size (510) [ 558.689003][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 558.713623][ T5892] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 558.771765][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 558.806956][ T5892] usb 2-1: can't read configurations, error -71 [ 560.724969][ T978] usb 3-1: USB disconnect, device number 72 [ 561.535038][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 561.699729][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.720868][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.855250][ T10] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 561.921252][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.937515][T13613] FAULT_INJECTION: forcing a failure. [ 561.937515][T13613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.957381][ T10] usb 7-1: Product: syz [ 561.974986][ T10] usb 7-1: Manufacturer: syz [ 561.984804][ T10] usb 7-1: SerialNumber: syz [ 561.992135][T13613] CPU: 0 UID: 0 PID: 13613 Comm: syz.0.1836 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 561.992152][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.992158][T13613] Call Trace: [ 561.992163][T13613] [ 561.992169][T13613] dump_stack_lvl+0x189/0x250 [ 561.992187][T13613] ? __pfx____ratelimit+0x10/0x10 [ 561.992202][T13613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.992215][T13613] ? __pfx__printk+0x10/0x10 [ 561.992232][T13613] should_fail_ex+0x414/0x560 [ 561.992247][T13613] _copy_to_user+0x31/0xb0 [ 561.992259][T13613] simple_read_from_buffer+0xe1/0x170 [ 561.992272][T13613] proc_fail_nth_read+0x1df/0x250 [ 561.992286][T13613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.992298][T13613] ? rw_verify_area+0x258/0x650 [ 561.992313][T13613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.992324][T13613] vfs_read+0x200/0x980 [ 561.992341][T13613] ? __pfx___mutex_lock+0x10/0x10 [ 561.992356][T13613] ? __pfx_vfs_read+0x10/0x10 [ 561.992369][T13613] ? __fget_files+0x2a/0x420 [ 561.992382][T13613] ? __fget_files+0x3a0/0x420 [ 561.992391][T13613] ? __fget_files+0x2a/0x420 [ 561.992405][T13613] ksys_read+0x145/0x250 [ 561.992420][T13613] ? __pfx_ksys_read+0x10/0x10 [ 561.992433][T13613] ? rcu_is_watching+0x15/0xb0 [ 561.992450][T13613] ? do_syscall_64+0xbe/0x3b0 [ 561.992460][T13613] do_syscall_64+0xfa/0x3b0 [ 561.992468][T13613] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.992481][T13613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.992490][T13613] ? clear_bhb_loop+0x60/0xb0 [ 561.992502][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.992511][T13613] RIP: 0033:0x7fbccd18d33c [ 561.992521][T13613] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 561.992529][T13613] RSP: 002b:00007fbcce0b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.992541][T13613] RAX: ffffffffffffffda RBX: 00007fbccd3b5fa0 RCX: 00007fbccd18d33c [ 561.992547][T13613] RDX: 000000000000000f RSI: 00007fbcce0b90a0 RDI: 0000000000000007 [ 561.992554][T13613] RBP: 00007fbcce0b9090 R08: 0000000000000000 R09: 0000000000000000 [ 561.992560][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.992566][T13613] R13: 0000000000000000 R14: 00007fbccd3b5fa0 R15: 00007fbccd4dfa28 [ 561.992581][T13613] [ 562.287859][ T10] usb 7-1: config 0 descriptor?? [ 562.296142][ T10] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 562.302671][ T10] usb 7-1: No valid video chain found. [ 562.528391][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 562.528402][ T30] audit: type=1326 audit(1750802638.740:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13602 comm="syz.6.1832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f840838e929 code=0x0 [ 562.903245][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.911185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.163967][T13627] netlink: 'syz.0.1841': attribute type 29 has an invalid length. [ 564.310588][T13642] loop2: detected capacity change from 0 to 7 [ 564.400886][ T5878] Dev loop2: unable to read RDB block 7 [ 564.415530][ T5878] loop2: AHDI p1 p2 p3 [ 564.419943][ T5878] loop2: partition table partially beyond EOD, truncated [ 564.436506][ T5878] loop2: p1 start 1601398130 is beyond EOD, truncated [ 564.494234][ T6797] usb 7-1: USB disconnect, device number 35 [ 564.539326][ T5878] loop2: p2 start 1702059890 is beyond EOD, truncated [ 564.549890][T13642] Dev loop2: unable to read RDB block 7 [ 564.609402][T13642] loop2: AHDI p1 p2 p3 [ 564.613737][T13642] loop2: partition table partially beyond EOD, truncated [ 564.622000][T13642] loop2: p1 start 1601398130 is beyond EOD, truncated [ 564.629581][T13642] loop2: p2 start 1702059890 is beyond EOD, truncated [ 564.790398][T13654] FAULT_INJECTION: forcing a failure. [ 564.790398][T13654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.792654][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1848'. [ 564.839829][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1850'. [ 564.845593][T13654] CPU: 1 UID: 0 PID: 13654 Comm: syz.0.1849 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 564.845621][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.845632][T13654] Call Trace: [ 564.845639][T13654] [ 564.845647][T13654] dump_stack_lvl+0x189/0x250 [ 564.845677][T13654] ? __pfx____ratelimit+0x10/0x10 [ 564.845700][T13654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.845734][T13654] ? __pfx__printk+0x10/0x10 [ 564.845766][T13654] should_fail_ex+0x414/0x560 [ 564.845791][T13654] _copy_to_user+0x31/0xb0 [ 564.845810][T13654] bpf_test_finish+0x24e/0x700 [ 564.845837][T13654] ? __pfx_bpf_test_finish+0x10/0x10 [ 564.845866][T13654] bpf_prog_test_run_skb+0xed5/0x1560 [ 564.845900][T13654] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 564.845918][T13654] bpf_prog_test_run+0x2c7/0x340 [ 564.845944][T13654] __sys_bpf+0x4a4/0x860 [ 564.845967][T13654] ? __pfx___sys_bpf+0x10/0x10 [ 564.846000][T13654] ? ksys_write+0x22a/0x250 [ 564.846018][T13654] ? __pfx_ksys_write+0x10/0x10 [ 564.846031][T13654] ? rcu_is_watching+0x15/0xb0 [ 564.846062][T13654] __x64_sys_bpf+0x7c/0x90 [ 564.846082][T13654] do_syscall_64+0xfa/0x3b0 [ 564.846096][T13654] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.846117][T13654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.846134][T13654] ? clear_bhb_loop+0x60/0xb0 [ 564.846154][T13654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.846170][T13654] RIP: 0033:0x7fbccd18e929 [ 564.846185][T13654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.846200][T13654] RSP: 002b:00007fbcce0b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.846218][T13654] RAX: ffffffffffffffda RBX: 00007fbccd3b5fa0 RCX: 00007fbccd18e929 [ 564.846230][T13654] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 564.846242][T13654] RBP: 00007fbcce0b9090 R08: 0000000000000000 R09: 0000000000000000 [ 564.846252][T13654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.846262][T13654] R13: 0000000000000000 R14: 00007fbccd3b5fa0 R15: 00007fbccd4dfa28 [ 564.846289][T13654] [ 564.909507][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1848'. [ 565.156957][T13662] bridge0: entered promiscuous mode [ 565.408623][T13673] netlink: 'syz.0.1857': attribute type 2 has an invalid length. [ 565.915671][T13688] FAULT_INJECTION: forcing a failure. [ 565.915671][T13688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.094538][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 566.214745][T13688] CPU: 0 UID: 0 PID: 13688 Comm: syz.6.1862 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 566.214763][T13688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.214769][T13688] Call Trace: [ 566.214774][T13688] [ 566.214780][T13688] dump_stack_lvl+0x189/0x250 [ 566.214800][T13688] ? __pfx____ratelimit+0x10/0x10 [ 566.214815][T13688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.214828][T13688] ? __pfx__printk+0x10/0x10 [ 566.214840][T13688] ? __might_fault+0xb0/0x130 [ 566.214855][T13688] should_fail_ex+0x414/0x560 [ 566.214870][T13688] _copy_from_user+0x2d/0xb0 [ 566.214881][T13688] kstrtouint_from_user+0xc4/0x170 [ 566.214895][T13688] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 566.214917][T13688] proc_fail_nth_write+0x88/0x240 [ 566.214929][T13688] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 566.214943][T13688] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 566.214955][T13688] vfs_write+0x27e/0xa90 [ 566.214974][T13688] ? __pfx_vfs_write+0x10/0x10 [ 566.214989][T13688] ? __fget_files+0x2a/0x420 [ 566.215002][T13688] ? __fget_files+0x3a0/0x420 [ 566.215011][T13688] ? __fget_files+0x2a/0x420 [ 566.215026][T13688] ksys_write+0x145/0x250 [ 566.215034][T13688] ? __fget_files+0x3a0/0x420 [ 566.215045][T13688] ? __pfx_ksys_write+0x10/0x10 [ 566.215056][T13688] ? do_syscall_64+0xbe/0x3b0 [ 566.215067][T13688] do_syscall_64+0xfa/0x3b0 [ 566.215075][T13688] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.215088][T13688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.215098][T13688] ? clear_bhb_loop+0x60/0xb0 [ 566.215110][T13688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.215119][T13688] RIP: 0033:0x7f840838d3df [ 566.215129][T13688] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 566.215137][T13688] RSP: 002b:00007f8409207030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 566.215149][T13688] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f840838d3df [ 566.215155][T13688] RDX: 0000000000000001 RSI: 00007f84092070a0 RDI: 0000000000000004 [ 566.215161][T13688] RBP: 00007f8409207090 R08: 0000000000000000 R09: 0000000000000000 [ 566.215167][T13688] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 566.215172][T13688] R13: 0000000000000000 R14: 00007f84085b5fa0 R15: 00007f84086dfa28 [ 566.215188][T13688] [ 567.613753][T13710] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 568.120188][ T978] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 568.286902][ T978] usb 2-1: config 26 has no interfaces? [ 568.296797][ T978] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 568.306437][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.314813][ T978] usb 2-1: Product: syz [ 568.321337][ T978] usb 2-1: Manufacturer: syz [ 568.339189][ T978] usb 2-1: SerialNumber: syz [ 568.603158][ T978] usb 2-1: USB disconnect, device number 76 [ 569.176869][T13739] FAULT_INJECTION: forcing a failure. [ 569.176869][T13739] name failslab, interval 1, probability 0, space 0, times 0 [ 569.194330][T13739] CPU: 1 UID: 0 PID: 13739 Comm: syz.6.1872 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 569.194357][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.194368][T13739] Call Trace: [ 569.194376][T13739] [ 569.194385][T13739] dump_stack_lvl+0x189/0x250 [ 569.194415][T13739] ? __pfx____ratelimit+0x10/0x10 [ 569.194440][T13739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.194465][T13739] ? __pfx__printk+0x10/0x10 [ 569.194487][T13739] ? __pfx___might_resched+0x10/0x10 [ 569.194511][T13739] ? fs_reclaim_acquire+0x7d/0x100 [ 569.194536][T13739] should_fail_ex+0x414/0x560 [ 569.194562][T13739] should_failslab+0xa8/0x100 [ 569.194582][T13739] __kmalloc_noprof+0xcb/0x4f0 [ 569.194599][T13739] ? security_task_alloc+0x4d/0x360 [ 569.194616][T13739] ? perf_event_init_task+0x12d/0x4b0 [ 569.194643][T13739] security_task_alloc+0x4d/0x360 [ 569.194666][T13739] copy_process+0x1530/0x3c00 [ 569.194699][T13739] ? copy_process+0x97f/0x3c00 [ 569.194725][T13739] ? __pfx_copy_process+0x10/0x10 [ 569.194748][T13739] ? __pfx_io_wq_worker+0x10/0x10 [ 569.194768][T13739] ? __pfx_io_wq_worker+0x10/0x10 [ 569.194787][T13739] create_io_thread+0xef/0x150 [ 569.194804][T13739] ? __pfx_create_io_thread+0x10/0x10 [ 569.194826][T13739] ? __pfx_io_wq_worker+0x10/0x10 [ 569.194851][T13739] ? __raw_spin_lock_init+0x45/0x100 [ 569.194870][T13739] ? __init_swait_queue_head+0xa9/0x150 [ 569.194890][T13739] ? create_io_worker+0x27/0x5d0 [ 569.194909][T13739] create_io_worker+0x182/0x5d0 [ 569.194928][T13739] io_wq_enqueue+0x62c/0x850 [ 569.194944][T13739] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 569.194964][T13739] io_poll_task_func+0xc08/0xff0 [ 569.194992][T13739] ? __pfx_io_poll_task_func+0x10/0x10 [ 569.195016][T13739] ? percpu_ref_get_many+0x18c/0x1e0 [ 569.195032][T13739] ? __pfx_io_poll_task_func+0x10/0x10 [ 569.195052][T13739] io_handle_tw_list+0x1f5/0x4c0 [ 569.195074][T13739] tctx_task_work_run+0x99/0x370 [ 569.195093][T13739] tctx_task_work+0x3f/0x90 [ 569.195109][T13739] task_work_run+0x1d1/0x260 [ 569.195132][T13739] ? __pfx_task_work_run+0x10/0x10 [ 569.195151][T13739] ? fput+0xa0/0xd0 [ 569.195171][T13739] ? do_recvmmsg+0x6aa/0x770 [ 569.195195][T13739] get_signal+0x11ed/0x1340 [ 569.195218][T13739] ? __pfx_do_recvmmsg+0x10/0x10 [ 569.195253][T13739] arch_do_signal_or_restart+0x9a/0x750 [ 569.195281][T13739] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 569.195327][T13739] ? exit_to_user_mode_loop+0x40/0x110 [ 569.195354][T13739] exit_to_user_mode_loop+0x75/0x110 [ 569.195383][T13739] do_syscall_64+0x2bd/0x3b0 [ 569.195398][T13739] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.195420][T13739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.195437][T13739] ? clear_bhb_loop+0x60/0xb0 [ 569.195458][T13739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.195474][T13739] RIP: 0033:0x7f840838e929 [ 569.195491][T13739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.195506][T13739] RSP: 002b:00007f84091e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 569.195525][T13739] RAX: fffffffffffffe00 RBX: 00007f84085b6080 RCX: 00007f840838e929 [ 569.195537][T13739] RDX: 0000000000000001 RSI: 0000200000004b40 RDI: 0000000000000007 [ 569.195548][T13739] RBP: 00007f84091e6090 R08: 0000000000000000 R09: 0000000000000000 [ 569.195558][T13739] R10: 0000000000002102 R11: 0000000000000246 R12: 0000000000000001 [ 569.195569][T13739] R13: 0000000000000000 R14: 00007f84085b6080 R15: 00007f84086dfa28 [ 569.195597][T13739] [ 569.549959][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.606088][T13774] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1882'. [ 572.133623][T13778] FAULT_INJECTION: forcing a failure. [ 572.133623][T13778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.172417][T13778] CPU: 1 UID: 0 PID: 13778 Comm: syz.1.1884 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 572.172445][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 572.172457][T13778] Call Trace: [ 572.172465][T13778] [ 572.172474][T13778] dump_stack_lvl+0x189/0x250 [ 572.172504][T13778] ? __pfx____ratelimit+0x10/0x10 [ 572.172529][T13778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.172554][T13778] ? __pfx__printk+0x10/0x10 [ 572.172573][T13778] ? __might_fault+0xb0/0x130 [ 572.172601][T13778] should_fail_ex+0x414/0x560 [ 572.172627][T13778] _copy_from_iter+0x1db/0x16f0 [ 572.172655][T13778] ? rcu_is_watching+0x15/0xb0 [ 572.172682][T13778] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 572.172701][T13778] ? __pfx__copy_from_iter+0x10/0x10 [ 572.172727][T13778] ? __build_skb_around+0x257/0x3e0 [ 572.172750][T13778] ? netlink_sendmsg+0x642/0xb30 [ 572.172767][T13778] ? skb_put+0x11b/0x210 [ 572.172790][T13778] netlink_sendmsg+0x6b2/0xb30 [ 572.172818][T13778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.172847][T13778] ? aa_sock_msg_perm+0x94/0x160 [ 572.172869][T13778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.172889][T13778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.172909][T13778] __sock_sendmsg+0x219/0x270 [ 572.172936][T13778] ____sys_sendmsg+0x505/0x830 [ 572.172962][T13778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.172991][T13778] ? import_iovec+0x74/0xa0 [ 572.173011][T13778] ___sys_sendmsg+0x21f/0x2a0 [ 572.173033][T13778] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.173094][T13778] ? __fget_files+0x2a/0x420 [ 572.173112][T13778] ? __fget_files+0x3a0/0x420 [ 572.173140][T13778] __x64_sys_sendmsg+0x19b/0x260 [ 572.173162][T13778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.173193][T13778] ? __pfx_ksys_write+0x10/0x10 [ 572.173207][T13778] ? rcu_is_watching+0x15/0xb0 [ 572.173236][T13778] ? do_syscall_64+0xbe/0x3b0 [ 572.173255][T13778] do_syscall_64+0xfa/0x3b0 [ 572.173269][T13778] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.173292][T13778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.173310][T13778] ? clear_bhb_loop+0x60/0xb0 [ 572.173331][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.173348][T13778] RIP: 0033:0x7f5cc9d8e929 [ 572.173364][T13778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.173380][T13778] RSP: 002b:00007f5ccac79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.173398][T13778] RAX: ffffffffffffffda RBX: 00007f5cc9fb5fa0 RCX: 00007f5cc9d8e929 [ 572.173411][T13778] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 572.173423][T13778] RBP: 00007f5ccac79090 R08: 0000000000000000 R09: 0000000000000000 [ 572.173434][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.173445][T13778] R13: 0000000000000000 R14: 00007f5cc9fb5fa0 R15: 00007f5cca0dfa28 [ 572.173472][T13778] [ 573.131250][ T30] audit: type=1326 audit(1750802649.320:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.2.1888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f498e929 code=0x0 [ 573.272953][T13798] FAULT_INJECTION: forcing a failure. [ 573.272953][T13798] name failslab, interval 1, probability 0, space 0, times 0 [ 573.303991][T13801] FAULT_INJECTION: forcing a failure. [ 573.303991][T13801] name failslab, interval 1, probability 0, space 0, times 0 [ 573.316694][T13801] CPU: 1 UID: 0 PID: 13801 Comm: syz.0.1890 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 573.316709][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.316716][T13801] Call Trace: [ 573.316722][T13801] [ 573.316728][T13801] dump_stack_lvl+0x189/0x250 [ 573.316748][T13801] ? __pfx____ratelimit+0x10/0x10 [ 573.316762][T13801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.316776][T13801] ? __pfx__printk+0x10/0x10 [ 573.316789][T13801] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 573.316809][T13801] should_fail_ex+0x414/0x560 [ 573.316823][T13801] should_failslab+0xa8/0x100 [ 573.316836][T13801] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 573.316846][T13801] ? __alloc_skb+0x112/0x2d0 [ 573.316860][T13801] __alloc_skb+0x112/0x2d0 [ 573.316872][T13801] alloc_skb_with_frags+0xca/0x890 [ 573.316886][T13801] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 573.316900][T13801] sock_alloc_send_pskb+0x857/0x990 [ 573.316923][T13801] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 573.316937][T13801] ? rcuref_put+0x1b7/0x210 [ 573.316949][T13801] ? __pfx_rcuref_put+0x10/0x10 [ 573.316961][T13801] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 573.316976][T13801] __ip6_append_data+0x2ab5/0x3de0 [ 573.316992][T13801] ? xfrm_lookup_with_ifid+0x14ac/0x1a70 [ 573.317005][T13801] ? __lock_acquire+0xab9/0xd20 [ 573.317021][T13801] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 573.317047][T13801] ? ip6_mtu+0x7d/0x3f0 [ 573.317060][T13801] ? __pfx___ip6_append_data+0x10/0x10 [ 573.317071][T13801] ? __pfx_ip6_mtu+0x10/0x10 [ 573.317086][T13801] ip6_append_data+0x1c4/0x380 [ 573.317101][T13801] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 573.317111][T13801] icmp6_send+0x1205/0x1940 [ 573.317126][T13801] ? icmp6_send+0x1e9/0x1940 [ 573.317149][T13801] ? __pfx_icmp6_send+0x10/0x10 [ 573.317172][T13801] ? __ip6_local_out+0x609/0x870 [ 573.317186][T13801] ? __ip6_local_out+0x609/0x870 [ 573.317195][T13801] ? __pfx___ip6_local_out+0x10/0x10 [ 573.317207][T13801] ip6_pkt_drop+0x4dc/0x640 [ 573.317223][T13801] ip6_pkt_discard_out+0xf2/0x120 [ 573.317235][T13801] ? ip6_send_skb+0x10f/0x390 [ 573.317247][T13801] ip6_send_skb+0x1d5/0x390 [ 573.317260][T13801] rawv6_push_pending_frames+0x6e9/0x8d0 [ 573.317277][T13801] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 573.317292][T13801] ? __pfx_raw6_getfrag+0x10/0x10 [ 573.317312][T13801] rawv6_sendmsg+0x12ff/0x17f0 [ 573.317345][T13801] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 573.317390][T13801] ? __pfx_aa_sk_perm+0x10/0x10 [ 573.317406][T13801] ? sock_rps_record_flow+0x19/0x410 [ 573.317423][T13801] ? inet_sendmsg+0x2f4/0x370 [ 573.317430][T13801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.317445][T13801] __sock_sendmsg+0x19c/0x270 [ 573.317461][T13801] ____sys_sendmsg+0x52d/0x830 [ 573.317475][T13801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.317491][T13801] ? import_iovec+0x74/0xa0 [ 573.317503][T13801] ___sys_sendmsg+0x21f/0x2a0 [ 573.317515][T13801] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.317546][T13801] ? __fget_files+0x2a/0x420 [ 573.317556][T13801] ? __fget_files+0x3a0/0x420 [ 573.317571][T13801] __sys_sendmmsg+0x227/0x430 [ 573.317585][T13801] ? __pfx___sys_sendmmsg+0x10/0x10 [ 573.317595][T13801] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 573.317623][T13801] ? ksys_write+0x22a/0x250 [ 573.317633][T13801] ? __pfx_ksys_write+0x10/0x10 [ 573.317641][T13801] ? rcu_is_watching+0x15/0xb0 [ 573.317658][T13801] __x64_sys_sendmmsg+0xa0/0xc0 [ 573.317671][T13801] do_syscall_64+0xfa/0x3b0 [ 573.317679][T13801] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.317693][T13801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.317702][T13801] ? clear_bhb_loop+0x60/0xb0 [ 573.317714][T13801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.317724][T13801] RIP: 0033:0x7fbccd18e929 [ 573.317733][T13801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.317742][T13801] RSP: 002b:00007fbcce0b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 573.317752][T13801] RAX: ffffffffffffffda RBX: 00007fbccd3b5fa0 RCX: 00007fbccd18e929 [ 573.317759][T13801] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 573.317766][T13801] RBP: 00007fbcce0b9090 R08: 0000000000000000 R09: 0000000000000000 [ 573.317772][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.317777][T13801] R13: 0000000000000000 R14: 00007fbccd3b5fa0 R15: 00007fbccd4dfa28 [ 573.317794][T13801] [ 573.320323][T13802] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 573.436186][T13798] CPU: 0 UID: 0 PID: 13798 Comm: syz.6.1889 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 573.436211][T13798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.436223][T13798] Call Trace: [ 573.436232][T13798] [ 573.436241][T13798] dump_stack_lvl+0x189/0x250 [ 573.436270][T13798] ? __pfx____ratelimit+0x10/0x10 [ 573.436294][T13798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.436317][T13798] ? __pfx__printk+0x10/0x10 [ 573.436349][T13798] should_fail_ex+0x414/0x560 [ 573.436375][T13798] should_failslab+0xa8/0x100 [ 573.436394][T13798] kmem_cache_alloc_noprof+0x73/0x3c0 [ 573.436419][T13798] ? skb_clone+0x212/0x3a0 [ 573.436444][T13798] skb_clone+0x212/0x3a0 [ 573.436467][T13798] __netlink_deliver_tap+0x404/0x850 [ 573.436499][T13798] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.436519][T13798] netlink_deliver_tap+0x19c/0x1b0 [ 573.436539][T13798] netlink_sendskb+0x68/0x140 [ 573.436557][T13798] netlink_rcv_skb+0x28c/0x470 [ 573.436576][T13798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.436596][T13798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.436627][T13798] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.436643][T13798] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.436667][T13798] netlink_unicast+0x75b/0x8d0 [ 573.436694][T13798] netlink_sendmsg+0x805/0xb30 [ 573.436730][T13798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.436752][T13798] ? aa_sock_msg_perm+0x94/0x160 [ 573.436774][T13798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.436795][T13798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.436814][T13798] __sock_sendmsg+0x219/0x270 [ 573.436841][T13798] ____sys_sendmsg+0x52d/0x830 [ 573.436866][T13798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.436895][T13798] ? import_iovec+0x74/0xa0 [ 573.436915][T13798] ___sys_sendmsg+0x21f/0x2a0 [ 573.436936][T13798] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.436989][T13798] ? __fget_files+0x2a/0x420 [ 573.437007][T13798] ? __fget_files+0x3a0/0x420 [ 573.437034][T13798] __sys_sendmmsg+0x227/0x430 [ 573.437059][T13798] ? __pfx___sys_sendmmsg+0x10/0x10 [ 573.437076][T13798] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 573.437125][T13798] ? ksys_write+0x22a/0x250 [ 573.437143][T13798] ? __pfx_ksys_write+0x10/0x10 [ 573.437155][T13798] ? rcu_is_watching+0x15/0xb0 [ 573.437187][T13798] __x64_sys_sendmmsg+0xa0/0xc0 [ 573.437208][T13798] do_syscall_64+0xfa/0x3b0 [ 573.437222][T13798] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.437244][T13798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.437260][T13798] ? clear_bhb_loop+0x60/0xb0 [ 573.437280][T13798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.437296][T13798] RIP: 0033:0x7f840838e929 [ 573.437311][T13798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.437326][T13798] RSP: 002b:00007f8409207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 573.437344][T13798] RAX: ffffffffffffffda RBX: 00007f84085b5fa0 RCX: 00007f840838e929 [ 573.437356][T13798] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 573.437367][T13798] RBP: 00007f8409207090 R08: 0000000000000000 R09: 0000000000000000 [ 573.437378][T13798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.437387][T13798] R13: 0000000000000000 R14: 00007f84085b5fa0 R15: 00007f84086dfa28 [ 573.437415][T13798] [ 575.352910][T13832] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1896'. [ 576.646909][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1901'. [ 576.668232][T13851] tc_dump_action: action bad kind [ 577.511848][T13861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.530122][T13861] program syz.6.1904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.225387][T13875] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 580.684718][ T5941] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 580.865881][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 580.925565][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.947622][ T5941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.981180][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=01ff, bcdDevice= 0.40 [ 581.036199][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.085912][ T5941] usb 2-1: Product: syz [ 581.102338][ T5941] usb 2-1: Manufacturer: syz [ 581.128805][ T5941] usb 2-1: SerialNumber: syz [ 581.370857][ T5941] usb 2-1: 0:2 : does not exist [ 581.442000][ T5941] usb 2-1: USB disconnect, device number 77 [ 582.004444][ T5941] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 582.134642][ T5941] usb 7-1: device descriptor read/64, error -71 [ 582.393319][ T5941] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 582.407472][T13919] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 582.427313][ T30] audit: type=1326 audit(1750802658.640:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.458862][ T30] audit: type=1326 audit(1750802658.640:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.487879][ T30] audit: type=1326 audit(1750802658.640:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.513762][ T30] audit: type=1326 audit(1750802658.640:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.549260][ T5941] usb 7-1: device descriptor read/64, error -71 [ 582.565389][ T30] audit: type=1326 audit(1750802658.640:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.624790][ T30] audit: type=1326 audit(1750802658.640:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.669876][ T5941] usb usb7-port1: attempt power cycle [ 582.685809][ T30] audit: type=1326 audit(1750802658.640:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.748353][ T30] audit: type=1326 audit(1750802658.640:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.824784][ T30] audit: type=1326 audit(1750802658.640:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 582.936076][ T30] audit: type=1326 audit(1750802658.640:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd18e929 code=0x7fc00000 [ 583.134446][ T5941] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 583.155154][ T5941] usb 7-1: device descriptor read/8, error -71 [ 583.394815][ T5941] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 583.573035][ T5941] usb 7-1: device descriptor read/8, error -71 [ 583.694925][ T5941] usb usb7-port1: unable to enumerate USB device [ 584.953712][ T5941] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 585.188907][ T10] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 585.209198][ T5941] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 585.221692][ T5941] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.233823][ T5941] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 585.248493][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 585.258248][ T5941] usb 1-1: Product: syz [ 585.461121][ T5941] usb 1-1: Manufacturer: syz [ 585.510564][ T5941] usb 1-1: SerialNumber: syz [ 585.548651][ T10] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 585.558560][ T5901] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 585.569176][ T5941] usb 1-1: config 0 descriptor?? [ 585.638187][ T5941] usb 1-1: selecting invalid altsetting 0 [ 585.725697][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.746905][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.783738][T13962] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1932'. [ 585.796528][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.837994][T13944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.863644][ T5901] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.939629][T13944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.978128][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.987218][T13962] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551610) [ 586.010888][T13962] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 586.027514][ T5901] usb 7-1: config 0 descriptor?? [ 586.103766][T13960] fido_id[13960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 586.322035][ T978] usb 1-1: USB disconnect, device number 71 [ 586.565339][ T5901] usbhid 7-1:0.0: can't add hid device: -71 [ 586.578341][ T5901] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 586.639184][ T5901] usb 7-1: USB disconnect, device number 40 [ 587.155861][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.163823][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.184578][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.235102][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 587.464052][ T10] usb 3-1: config 5 has an invalid interface number: 1 but max is 0 [ 587.558279][ T10] usb 3-1: config 5 has no interface number 0 [ 587.607502][ T10] usb 3-1: config 5 interface 1 has no altsetting 0 [ 587.624182][ T10] usb 3-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice=d5.66 [ 587.670051][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.678844][ T10] usb 3-1: Product: syz [ 587.683013][ T10] usb 3-1: Manufacturer: syz [ 587.688078][ T10] usb 3-1: SerialNumber: syz [ 587.701026][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.945152][ T10] ftdi_sio 3-1:5.1: FTDI USB Serial Device converter detected [ 587.984786][ T5901] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 588.204528][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.206868][ T10] ftdi_sio ttyUSB0: unknown device type: 0xd566 [ 588.400277][ T10] usb 3-1: USB disconnect, device number 73 [ 588.421588][ T10] ftdi_sio 3-1:5.1: device disconnected [ 588.542130][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 588.552839][ T5901] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 588.561884][ T5901] usb 1-1: config 0 has no interface number 0 [ 588.572431][ T5901] usb 1-1: New USB device found, idVendor=061d, idProduct=0050, bcdDevice=ce.6f [ 588.596152][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.606071][ T5901] usb 1-1: Product: syz [ 588.610328][ T5901] usb 1-1: Manufacturer: syz [ 588.632751][ T5901] usb 1-1: SerialNumber: syz [ 588.673576][ T5901] usb 1-1: config 0 descriptor?? [ 589.326988][T13982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.340858][T13982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.485423][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 590.485441][ T30] audit: type=1326 audit(1750802666.270:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 590.684147][ T30] audit: type=1326 audit(1750802666.270:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 590.694001][ T10] usb 1-1: USB disconnect, device number 72 [ 590.713469][ T30] audit: type=1326 audit(1750802666.270:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 590.741554][ T30] audit: type=1326 audit(1750802666.270:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 590.778739][ T30] audit: type=1326 audit(1750802666.270:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 590.930744][ T30] audit: type=1326 audit(1750802666.280:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 590.955361][ T5901] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 591.100515][ T30] audit: type=1326 audit(1750802667.030:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 591.168195][ T5901] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 591.178598][ T5901] usb 3-1: config 0 has no interface number 0 [ 591.193904][ T5901] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 591.214512][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 591.238292][ T5901] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 591.273928][ T5901] usb 3-1: config 0 interface 230 has no altsetting 0 [ 591.292425][ T30] audit: type=1326 audit(1750802667.030:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 591.293183][ T5901] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 591.351985][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.370933][ T5901] usb 3-1: Product: syz [ 591.385528][ T5901] usb 3-1: Manufacturer: syz [ 591.398132][ T5901] usb 3-1: SerialNumber: syz [ 591.552555][ T5901] usb 3-1: config 0 descriptor?? [ 591.575235][T14020] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 591.582965][T14020] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 591.591838][ T5901] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 591.622229][ T5901] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 591.675240][T14028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1949'. [ 591.789255][T14028] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551610) [ 591.831757][T14028] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 591.883501][T14033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'. [ 591.913462][T14033] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551610) [ 591.956507][T14033] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 592.104758][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 592.225891][ T978] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 592.264967][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 592.272667][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 592.284323][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 592.297972][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 592.311559][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 592.331834][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 592.343103][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 592.362591][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 592.372267][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.389148][ T10] usb 1-1: config 0 descriptor?? [ 592.418933][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 592.430563][ T978] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 592.446307][ T978] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 592.460834][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 592.471833][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 592.498194][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 592.514330][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 592.556990][ T978] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 592.600646][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.641644][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.669382][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.683909][ T978] usb 2-1: config 0 descriptor?? [ 592.738505][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.775656][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.848577][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 592.937516][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.950844][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.972784][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.045118][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.111200][ T978] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 593.254791][ T30] audit: type=1326 audit(1750802669.460:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840838e929 code=0x7ffc0000 [ 593.298698][T14052] [U]  [ 593.324779][ T30] audit: type=1326 audit(1750802669.460:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.6.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840838e929 code=0x7ffc0000 [ 593.542619][T14061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.896095][ T5901] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 594.660238][ T978] usb 1-1: USB disconnect, device number 73 [ 594.673090][ T978] usblp0: removed [ 594.868363][ T5922] usb 2-1: USB disconnect, device number 78 [ 594.889021][ T5922] usblp1: removed [ 594.960636][T14076] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 595.177099][ T5901] usb 3-1: USB disconnect, device number 74 [ 595.692592][T13032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.005969][T13032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.172716][T14086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1968'. [ 596.319527][T13032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.388596][T14092] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 596.619998][T13032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.774893][ T5901] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 596.918199][T13032] bridge_slave_1: left allmulticast mode [ 596.925786][T13032] bridge_slave_1: left promiscuous mode [ 596.932103][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.966384][T13032] bridge_slave_0: left allmulticast mode [ 596.973979][T13032] bridge_slave_0: left promiscuous mode [ 597.000130][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.042146][ T5901] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 597.090922][ T5901] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 597.174542][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.185721][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.194239][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.204983][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.224954][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.255474][ T5901] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.269532][ T5901] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.279531][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.344896][ T5901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.353084][ T5901] usb 2-1: invalid MIDI out EP 0 [ 597.511282][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 597.511295][ T30] audit: type=1804 audit(1750802673.720:5272): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1972" name="/newroot/415/file1" dev="fuse" ino=1 res=1 errno=0 [ 597.564693][ T30] audit: type=1804 audit(1750802673.720:5273): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1972" name="/newroot/415/file1" dev="fuse" ino=1 res=1 errno=0 [ 597.593425][ T5901] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 597.614135][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.735111][T14096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.743897][T14096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.772948][T14112] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1973'. [ 597.893118][T14096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.902626][T14096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.971309][ T5901] usb 2-1: USB disconnect, device number 79 [ 598.124413][ T5892] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 598.274377][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 598.281822][ T5892] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 598.290767][ T5892] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 598.299963][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 598.309639][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.326263][ T5892] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 598.347487][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 598.394495][ T5892] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 598.443296][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.460866][ T5892] usb 7-1: config 0 descriptor?? [ 598.770231][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.781242][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.867139][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.911623][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.007898][ T5892] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 599.121942][T13032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.140266][T13032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.152977][T13032] bond0 (unregistering): Released all slaves [ 599.175712][T13032] bond1 (unregistering): Released all slaves [ 599.207620][T14116] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551610) [ 599.237424][T14116] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 599.357174][T14124] netlink: 212364 bytes leftover after parsing attributes in process `syz.7.1976'. [ 599.374451][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 599.380979][ T5831] Bluetooth: hci2: command tx timeout [ 599.382618][T14124] openvswitch: netlink: Message has 5 unknown bytes. [ 599.602783][T14131] FAULT_INJECTION: forcing a failure. [ 599.602783][T14131] name failslab, interval 1, probability 0, space 0, times 0 [ 599.653170][T14131] CPU: 0 UID: 0 PID: 14131 Comm: syz.1.1978 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 599.653201][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.653212][T14131] Call Trace: [ 599.653220][T14131] [ 599.653229][T14131] dump_stack_lvl+0x189/0x250 [ 599.653259][T14131] ? __pfx____ratelimit+0x10/0x10 [ 599.653283][T14131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.653308][T14131] ? __pfx__printk+0x10/0x10 [ 599.653332][T14131] ? __pfx___might_resched+0x10/0x10 [ 599.653355][T14131] ? fs_reclaim_acquire+0x7d/0x100 [ 599.653380][T14131] should_fail_ex+0x414/0x560 [ 599.653405][T14131] should_failslab+0xa8/0x100 [ 599.653426][T14131] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 599.653444][T14131] ? __alloc_skb+0x112/0x2d0 [ 599.653466][T14131] __alloc_skb+0x112/0x2d0 [ 599.653489][T14131] netlink_ack+0x146/0xa50 [ 599.653505][T14131] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.653521][T14131] ? ref_tracker_free+0x63a/0x7d0 [ 599.653541][T14131] ? __copy_skb_header+0xa7/0x550 [ 599.653564][T14131] ? __pfx_ref_tracker_free+0x10/0x10 [ 599.653584][T14131] ? __skb_clone+0x63/0x7a0 [ 599.653612][T14131] netlink_rcv_skb+0x28c/0x470 [ 599.653632][T14131] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.653651][T14131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.653682][T14131] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.653700][T14131] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.653724][T14131] netlink_unicast+0x75b/0x8d0 [ 599.653752][T14131] netlink_sendmsg+0x805/0xb30 [ 599.653780][T14131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.653802][T14131] ? aa_sock_msg_perm+0x94/0x160 [ 599.653826][T14131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.653846][T14131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.653866][T14131] __sock_sendmsg+0x219/0x270 [ 599.653893][T14131] ____sys_sendmsg+0x505/0x830 [ 599.653918][T14131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.653953][T14131] ? import_iovec+0x74/0xa0 [ 599.653974][T14131] ___sys_sendmsg+0x21f/0x2a0 [ 599.653996][T14131] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.654051][T14131] ? __fget_files+0x2a/0x420 [ 599.654068][T14131] ? __fget_files+0x3a0/0x420 [ 599.654096][T14131] __x64_sys_sendmsg+0x19b/0x260 [ 599.654120][T14131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.654150][T14131] ? __pfx_ksys_write+0x10/0x10 [ 599.654163][T14131] ? rcu_is_watching+0x15/0xb0 [ 599.654193][T14131] ? do_syscall_64+0xbe/0x3b0 [ 599.654212][T14131] do_syscall_64+0xfa/0x3b0 [ 599.654227][T14131] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.654249][T14131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.654264][T14131] ? clear_bhb_loop+0x60/0xb0 [ 599.654281][T14131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.654297][T14131] RIP: 0033:0x7f5cc9d8e929 [ 599.654312][T14131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.654327][T14131] RSP: 002b:00007f5ccac79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.654346][T14131] RAX: ffffffffffffffda RBX: 00007f5cc9fb5fa0 RCX: 00007f5cc9d8e929 [ 599.654358][T14131] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 599.654369][T14131] RBP: 00007f5ccac79090 R08: 0000000000000000 R09: 0000000000000000 [ 599.654380][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.654390][T14131] R13: 0000000000000000 R14: 00007f5cc9fb5fa0 R15: 00007f5cca0dfa28 [ 599.654416][T14131] [ 600.738730][ T5901] usb 7-1: USB disconnect, device number 41 [ 600.771965][ T5901] usblp0: removed [ 600.978862][ T30] audit: type=1326 audit(1750802677.180:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 601.022284][T14160] delete_channel: no stack [ 601.058483][ T30] audit: type=1326 audit(1750802677.180:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 601.135771][ T30] audit: type=1326 audit(1750802677.180:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 601.203075][ T30] audit: type=1326 audit(1750802677.180:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 601.298575][ T30] audit: type=1326 audit(1750802677.180:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 601.459530][ T5841] Bluetooth: hci2: command tx timeout [ 601.477960][ T30] audit: type=1326 audit(1750802677.180:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 601.510916][ T30] audit: type=1326 audit(1750802677.180:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 602.170095][ T30] audit: type=1326 audit(1750802677.180:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.1.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5cc9d8e929 code=0x7ffc0000 [ 602.394828][T13032] hsr_slave_0: left promiscuous mode [ 602.406300][T13032] hsr_slave_1: left promiscuous mode [ 602.429115][T13032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.476304][T13032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.524928][T13032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.557142][T13032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.701012][T13032] veth0_macvtap: left promiscuous mode [ 602.715135][T13032] veth1_vlan: left promiscuous mode [ 602.727245][T13032] veth0_vlan: left promiscuous mode [ 603.168228][T14180] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1985'. [ 603.182548][T14180] netlink: 'syz.6.1985': attribute type 7 has an invalid length. [ 603.195687][T14180] netlink: 'syz.6.1985': attribute type 8 has an invalid length. [ 603.203651][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1985'. [ 603.394496][ T5922] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 603.524372][ T5922] usb 1-1: device descriptor read/64, error -71 [ 603.534411][ T5841] Bluetooth: hci2: command tx timeout [ 603.774400][ T5922] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 603.914801][ T5922] usb 1-1: device descriptor read/64, error -71 [ 604.024661][ T5922] usb usb1-port1: attempt power cycle [ 604.364376][ T5922] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 604.405044][ T5922] usb 1-1: device descriptor read/8, error -71 [ 604.644467][ T5922] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 604.675179][ T5922] usb 1-1: device descriptor read/8, error -71 [ 604.871393][ T5922] usb usb1-port1: unable to enumerate USB device [ 605.624539][ T5841] Bluetooth: hci2: command tx timeout [ 606.258315][T14207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1992'. [ 606.278526][T14209] FAULT_INJECTION: forcing a failure. [ 606.278526][T14209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.293543][T14209] CPU: 0 UID: 0 PID: 14209 Comm: syz.0.1993 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 606.293570][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.293581][T14209] Call Trace: [ 606.293590][T14209] [ 606.293599][T14209] dump_stack_lvl+0x189/0x250 [ 606.293632][T14209] ? __pfx____ratelimit+0x10/0x10 [ 606.293658][T14209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.293681][T14209] ? __pfx__printk+0x10/0x10 [ 606.293699][T14209] ? __might_fault+0xb0/0x130 [ 606.293724][T14209] should_fail_ex+0x414/0x560 [ 606.293747][T14209] _copy_from_iter+0x1db/0x16f0 [ 606.293774][T14209] ? rcu_is_watching+0x15/0xb0 [ 606.293800][T14209] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 606.293818][T14209] ? __pfx__copy_from_iter+0x10/0x10 [ 606.293842][T14209] ? __build_skb_around+0x257/0x3e0 [ 606.293866][T14209] ? netlink_sendmsg+0x642/0xb30 [ 606.293884][T14209] ? skb_put+0x11b/0x210 [ 606.293907][T14209] netlink_sendmsg+0x6b2/0xb30 [ 606.293940][T14209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.293963][T14209] ? aa_sock_msg_perm+0x94/0x160 [ 606.293986][T14209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.294007][T14209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.294026][T14209] __sock_sendmsg+0x219/0x270 [ 606.294050][T14209] ____sys_sendmsg+0x505/0x830 [ 606.294076][T14209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.294105][T14209] ? import_iovec+0x74/0xa0 [ 606.294126][T14209] ___sys_sendmsg+0x21f/0x2a0 [ 606.294148][T14209] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.294209][T14209] ? __fget_files+0x2a/0x420 [ 606.294228][T14209] ? __fget_files+0x3a0/0x420 [ 606.294256][T14209] __x64_sys_sendmsg+0x19b/0x260 [ 606.294276][T14209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.294302][T14209] ? __pfx_ksys_write+0x10/0x10 [ 606.294315][T14209] ? rcu_is_watching+0x15/0xb0 [ 606.294339][T14209] ? do_syscall_64+0xbe/0x3b0 [ 606.294359][T14209] do_syscall_64+0xfa/0x3b0 [ 606.294373][T14209] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.294401][T14209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.294418][T14209] ? clear_bhb_loop+0x60/0xb0 [ 606.294439][T14209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.294456][T14209] RIP: 0033:0x7fbccd18e929 [ 606.294473][T14209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.294489][T14209] RSP: 002b:00007fbcce0b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.294508][T14209] RAX: ffffffffffffffda RBX: 00007fbccd3b5fa0 RCX: 00007fbccd18e929 [ 606.294522][T14209] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 606.294533][T14209] RBP: 00007fbcce0b9090 R08: 0000000000000000 R09: 0000000000000000 [ 606.294544][T14209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.294556][T14209] R13: 0000000000000000 R14: 00007fbccd3b5fa0 R15: 00007fbccd4dfa28 [ 606.294582][T14209] [ 607.224828][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 607.384758][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 607.393317][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 607.414031][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 607.438895][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 607.463404][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 607.474137][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 607.485196][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 607.499072][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 607.508812][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.533160][ T10] usb 2-1: config 0 descriptor?? [ 607.742338][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.756711][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.777236][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.788641][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.813550][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 614.094806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.248628][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 619.258929][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 619.270612][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 619.281857][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 619.291090][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.215001][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 621.224692][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 621.238413][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 621.247956][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 621.257000][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 621.384555][ T5841] Bluetooth: hci5: command tx timeout [ 621.769890][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 621.780151][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 621.790036][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 621.806560][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 621.818054][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 623.294720][ T5831] Bluetooth: hci6: command tx timeout [ 623.422351][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 623.433587][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 623.442377][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 623.453236][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 623.463021][ T5841] Bluetooth: hci5: command tx timeout [ 623.470851][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 623.854955][ T5841] Bluetooth: hci7: command tx timeout [ 624.340123][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.346759][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.374734][ T5841] Bluetooth: hci6: command tx timeout [ 625.535415][ T5831] Bluetooth: hci8: command tx timeout [ 625.542562][ T5841] Bluetooth: hci5: command tx timeout [ 625.934621][ T5841] Bluetooth: hci7: command tx timeout [ 627.455000][ T5841] Bluetooth: hci6: command tx timeout [ 627.614611][ T5841] Bluetooth: hci5: command tx timeout [ 627.620080][ T5841] Bluetooth: hci8: command tx timeout [ 628.015248][ T5841] Bluetooth: hci7: command tx timeout [ 629.454600][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 629.534847][ T5841] Bluetooth: hci6: command tx timeout [ 629.695475][ T5841] Bluetooth: hci8: command tx timeout [ 630.096753][ T5841] Bluetooth: hci7: command tx timeout [ 631.777853][ T5841] Bluetooth: hci8: command tx timeout [ 644.174512][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.817502][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.885031][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 656.901380][ T5831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 656.911032][ T5831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 656.922786][ T5831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 656.932758][ T5831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 658.974637][ T5841] Bluetooth: hci9: command tx timeout [ 661.057776][ T5841] Bluetooth: hci9: command tx timeout [ 663.134816][ T5841] Bluetooth: hci9: command tx timeout [ 665.214741][ T5841] Bluetooth: hci9: command tx timeout [ 665.295303][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.324071][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 679.336762][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 679.345554][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 679.355807][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 679.364896][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 681.274203][ T5831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 681.282913][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 681.292673][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 681.304249][ T5831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 681.313943][ T5831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 681.454646][ T5841] Bluetooth: hci10: command tx timeout [ 682.283151][ T5831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 682.293804][ T5831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 682.306406][ T5831] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 682.319606][ T5831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 682.328586][ T5831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 683.374949][ T5841] Bluetooth: hci11: command tx timeout [ 683.535346][ T5841] Bluetooth: hci10: command tx timeout [ 683.783123][ T5831] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 683.799569][ T5831] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 683.808969][ T5831] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 683.819703][ T5831] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 683.830054][ T5831] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 684.414669][ T5831] Bluetooth: hci12: command tx timeout [ 685.454440][ T5831] Bluetooth: hci11: command tx timeout [ 685.615624][ T5831] Bluetooth: hci10: command tx timeout [ 685.781324][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.790348][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.854586][ T5831] Bluetooth: hci13: command tx timeout [ 686.494495][ T5831] Bluetooth: hci12: command tx timeout [ 687.534829][ T5831] Bluetooth: hci11: command tx timeout [ 687.695281][ T5831] Bluetooth: hci10: command tx timeout [ 687.934510][ T5831] Bluetooth: hci13: command tx timeout [ 688.574626][ T5831] Bluetooth: hci12: command tx timeout [ 689.614562][ T5831] Bluetooth: hci11: command tx timeout [ 690.014879][ T5831] Bluetooth: hci13: command tx timeout [ 690.654605][ T5831] Bluetooth: hci12: command tx timeout [ 692.097701][ T5831] Bluetooth: hci13: command tx timeout [ 706.254588][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.444424][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 717.458977][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 717.468772][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 717.479562][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 717.491258][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 719.534667][ T5831] Bluetooth: hci14: command tx timeout [ 721.615892][ T5831] Bluetooth: hci14: command tx timeout [ 723.699161][ T5831] Bluetooth: hci14: command tx timeout [ 723.699169][T14238] Bluetooth: hci2: command 0x0406 tx timeout [ 725.774601][ T5831] Bluetooth: hci14: command tx timeout [ 740.409919][ T5841] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 740.420548][ T5841] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 740.431385][ T5841] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 740.442232][ T5841] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 740.453000][ T5841] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 741.313415][ T5841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 741.328210][ T5841] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 741.337710][ T5841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 741.346473][ T5841] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 741.355821][ T5841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 742.364561][T14273] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 742.374019][T14273] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 742.386260][T14273] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 742.399981][T14273] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 742.410014][T14273] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 742.504673][T14270] Bluetooth: hci15: command tx timeout [ 743.376009][T14270] Bluetooth: hci16: command tx timeout [ 743.830785][T14273] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 743.842715][T14273] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 743.851441][T14273] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 743.872543][T14273] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 743.881180][T14273] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 744.179508][T14273] Bluetooth: hci5: command 0x0406 tx timeout [ 744.185640][T14270] Bluetooth: hci7: command 0x0406 tx timeout [ 744.186243][T14273] Bluetooth: hci6: command 0x0406 tx timeout [ 744.494731][ T5841] Bluetooth: hci17: command tx timeout [ 744.574893][ T5841] Bluetooth: hci15: command tx timeout [ 745.454439][ T5841] Bluetooth: hci16: command tx timeout [ 745.944702][ T5841] Bluetooth: hci18: command tx timeout [ 746.574491][ T5841] Bluetooth: hci17: command tx timeout [ 746.654601][ T5841] Bluetooth: hci15: command tx timeout [ 747.225429][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.231935][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.534427][ T5841] Bluetooth: hci16: command tx timeout [ 748.014894][ T5841] Bluetooth: hci18: command tx timeout [ 748.654788][ T5841] Bluetooth: hci17: command tx timeout [ 748.735056][ T5841] Bluetooth: hci15: command tx timeout [ 749.294737][ T5841] Bluetooth: hci8: command 0x0406 tx timeout [ 749.614667][ T5831] Bluetooth: hci16: command tx timeout [ 750.094619][ T5831] Bluetooth: hci18: command tx timeout [ 750.414658][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 750.422334][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 750.435639][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.444576][ T31] task:kworker/u8:2 state:D stack:20680 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 750.457337][ T31] Workqueue: events_unbound linkwatch_event SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 750.463275][ T31] Call Trace: [ 750.466875][ T31] [ 750.469864][ T31] __schedule+0x16f5/0x4d00 [ 750.474628][ T31] ? schedule+0x165/0x360 [ 750.480318][ T31] ? __pfx___schedule+0x10/0x10 [ 750.485846][ T31] ? schedule+0x91/0x360 [ 750.490147][ T31] schedule+0x165/0x360 [ 750.494889][ T31] schedule_preempt_disabled+0x13/0x30 [ 750.500407][ T31] __mutex_lock+0x724/0xe80 [ 750.505527][ T31] ? __mutex_lock+0x51b/0xe80 [ 750.510528][ T31] ? linkwatch_event+0xe/0x60 [ 750.516773][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 750.522390][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.528547][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 750.534659][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 750.540511][ T31] linkwatch_event+0xe/0x60 [ 750.545742][ T31] process_scheduled_works+0xae1/0x17b0 [ 750.551373][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.574422][ T31] worker_thread+0x8a0/0xda0 [ 750.579118][ T31] kthread+0x70e/0x8a0 [ 750.583213][ T31] ? __pfx_worker_thread+0x10/0x10 [ 750.594834][ T31] ? __pfx_kthread+0x10/0x10 [ 750.599665][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.605425][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.610663][ T31] ? __pfx_kthread+0x10/0x10 [ 750.624090][ T31] ret_from_fork+0x3fc/0x770 [ 750.630289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 750.640139][ T31] ? __switch_to_asm+0x39/0x70 [ 750.645439][ T31] ? __switch_to_asm+0x33/0x70 [ 750.650303][ T31] ? __pfx_kthread+0x10/0x10 [ 750.659821][ T31] ret_from_fork_asm+0x1a/0x30 [ 750.665964][ T31] [ 750.669141][ T31] INFO: task dhcpcd:5494 blocked for more than 143 seconds. [ 750.679659][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 750.687411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.696401][ T31] task:dhcpcd state:D stack:21384 pid:5494 tgid:5494 ppid:5493 task_flags:0x400140 flags:0x00004002 [ 750.708453][ T31] Call Trace: [ 750.711746][ T31] [ 750.714807][ T31] __schedule+0x16f5/0x4d00 [ 750.719358][ T31] ? schedule+0x165/0x360 [ 750.723723][ T31] ? __pfx___schedule+0x10/0x10 [ 750.728772][ T31] ? schedule+0x91/0x360 [ 750.733064][ T31] schedule+0x165/0x360 [ 750.739179][ T31] schedule_preempt_disabled+0x13/0x30 [ 750.744811][ T5831] Bluetooth: hci17: command tx timeout [ 750.750374][ T31] __mutex_lock+0x724/0xe80 [ 750.755022][ T31] ? __mutex_lock+0x51b/0xe80 [ 750.759733][ T31] ? devinet_ioctl+0x323/0x1b50 [ 750.764686][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 750.769759][ T31] ? bpf_lsm_capable+0x9/0x20 [ 750.774733][ T31] ? security_capable+0x7e/0x2e0 [ 750.779772][ T31] devinet_ioctl+0x323/0x1b50 [ 750.784608][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 750.789742][ T31] ? get_user_ifreq+0x12c/0x180 [ 750.794709][ T31] inet_ioctl+0x3c0/0x4c0 [ 750.799101][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 750.803988][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 750.810112][ T31] sock_do_ioctl+0xd9/0x300 [ 750.815066][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 750.820221][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.825182][ T31] sock_ioctl+0x576/0x790 [ 750.829539][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 750.834560][ T31] ? fd_install+0x30d/0x540 [ 750.839117][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 750.844093][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 750.849222][ T31] __se_sys_ioctl+0xf9/0x170 [ 750.853841][ T31] do_syscall_64+0xfa/0x3b0 [ 750.858448][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.863682][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.869893][ T31] ? clear_bhb_loop+0x60/0xb0 [ 750.874703][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.880733][ T31] RIP: 0033:0x7f56f1cb3378 [ 750.885303][ T31] RSP: 002b:00007ffc2c3721b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.893746][ T31] RAX: ffffffffffffffda RBX: 000000000000002b RCX: 00007f56f1cb3378 [ 750.902084][ T31] RDX: 00007ffc2c3823b0 RSI: 0000000000008914 RDI: 000000000000002b [ 750.910389][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 750.918504][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2c392550 [ 750.926613][ T31] R13: 00007f56f1bb36c8 R14: 0000000000000028 R15: 0000000000008914 [ 750.934768][ T31] [ 750.937840][ T31] INFO: task kworker/u8:10:6791 blocked for more than 143 seconds. [ 750.945859][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 750.953790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.962668][ T31] task:kworker/u8:10 state:D stack:21160 pid:6791 tgid:6791 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 750.974850][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 750.980869][ T31] Call Trace: [ 750.984220][ T31] [ 750.990508][ T31] __schedule+0x16f5/0x4d00 [ 750.995201][ T31] ? __lock_acquire+0xa91/0xd20 [ 751.000089][ T31] ? schedule+0x165/0x360 [ 751.006146][ T31] ? __pfx___schedule+0x10/0x10 [ 751.011073][ T31] ? schedule+0x91/0x360 [ 751.015472][ T31] schedule+0x165/0x360 [ 751.019656][ T31] schedule_preempt_disabled+0x13/0x30 [ 751.025248][ T31] __mutex_lock+0x724/0xe80 [ 751.029842][ T31] ? __mutex_lock+0x51b/0xe80 [ 751.034667][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 751.039955][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 751.045077][ T31] ? do_raw_spin_lock+0x121/0x290 [ 751.050137][ T31] ? look_up_lock_class+0x74/0x170 [ 751.055913][ T31] addrconf_dad_work+0x112/0x14b0 [ 751.060960][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.069623][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 751.077248][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 751.083025][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.091560][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 751.097500][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 751.103263][ T31] process_scheduled_works+0xae1/0x17b0 [ 751.112481][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.118892][ T31] worker_thread+0x8a0/0xda0 [ 751.123551][ T31] kthread+0x70e/0x8a0 [ 751.131288][ T31] ? __pfx_worker_thread+0x10/0x10 [ 751.143725][ T31] ? __pfx_kthread+0x10/0x10 [ 751.152080][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.157435][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.162666][ T31] ? __pfx_kthread+0x10/0x10 [ 751.167535][ T31] ret_from_fork+0x3fc/0x770 [ 751.172179][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 751.180615][ T31] ? __switch_to_asm+0x39/0x70 [ 751.187388][ T31] ? __switch_to_asm+0x33/0x70 [ 751.192282][ T31] ? __pfx_kthread+0x10/0x10 [ 751.197194][ T31] ret_from_fork_asm+0x1a/0x30 [ 751.202003][ T31] [ 751.205166][ T31] INFO: task syz-executor:14106 blocked for more than 144 seconds. [ 751.213604][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 751.222942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 751.231834][ T31] task:syz-executor state:D stack:22760 pid:14106 tgid:14106 ppid:1 task_flags:0x400140 flags:0x00004004 [ 751.244487][ T31] Call Trace: [ 751.247800][ T31] [ 751.250829][ T31] __schedule+0x16f5/0x4d00 [ 751.255497][ T31] ? schedule+0x165/0x360 [ 751.259876][ T31] ? __pfx___schedule+0x10/0x10 [ 751.264841][ T31] ? schedule+0x91/0x360 [ 751.269180][ T31] schedule+0x165/0x360 [ 751.273385][ T31] schedule_preempt_disabled+0x13/0x30 [ 751.279050][ T31] __mutex_lock+0x724/0xe80 [ 751.283580][ T31] ? __mutex_lock+0x51b/0xe80 [ 751.288474][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 751.293274][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 751.298573][ T31] ? ns_capable+0x8a/0xf0 [ 751.302944][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 751.308926][ T31] rtnl_newlink+0x8db/0x1c70 [ 751.313774][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 751.319613][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.324582][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.329492][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 751.334808][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 751.340130][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 751.345442][ T31] ? kernel_text_address+0xa5/0xe0 [ 751.350661][ T31] ? __kernel_text_address+0xd/0x40 [ 751.355960][ T31] ? unwind_get_return_address+0x4d/0x90 [ 751.361621][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.366591][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 751.371649][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 751.376761][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 751.381924][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 751.387532][ T31] netlink_rcv_skb+0x208/0x470 [ 751.392326][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 751.397944][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.403278][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.409780][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.419262][ T31] netlink_unicast+0x75b/0x8d0 [ 751.424107][ T31] netlink_sendmsg+0x805/0xb30 [ 751.429014][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.434591][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 751.439566][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 751.445067][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.450406][ T31] __sock_sendmsg+0x219/0x270 [ 751.455400][ T31] __sys_sendto+0x3bd/0x520 [ 751.459948][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 751.465320][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 751.471496][ T31] ? rcu_is_watching+0x15/0xb0 [ 751.476681][ T31] __x64_sys_sendto+0xde/0x100 [ 751.481493][ T31] do_syscall_64+0xfa/0x3b0 [ 751.486117][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.491353][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.497704][ T31] ? clear_bhb_loop+0x60/0xb0 [ 751.502448][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.508608][ T31] RIP: 0033:0x7f087a5907bc [ 751.513059][ T31] RSP: 002b:00007f087a8df6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 751.521697][ T31] RAX: ffffffffffffffda RBX: 00007f087b2e4620 RCX: 00007f087a5907bc [ 751.529863][ T31] RDX: 0000000000000038 RSI: 00007f087b2e4670 RDI: 0000000000000003 [ 751.540017][ T31] RBP: 0000000000000000 R08: 00007f087a8df704 R09: 000000000000000c [ 751.549626][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 751.560268][ T31] R13: 0000000000000000 R14: 00007f087b2e4670 R15: 0000000000000000 [ 751.570007][ T31] [ 751.573076][ T31] INFO: task syz.6.1985:14180 blocked for more than 144 seconds. [ 751.582641][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 751.591998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 751.603049][ T31] task:syz.6.1985 state:D stack:25320 pid:14180 tgid:14178 ppid:8776 task_flags:0x400140 flags:0x00004004 [ 751.618316][ T31] Call Trace: [ 751.621631][ T31] [ 751.624678][ T31] __schedule+0x16f5/0x4d00 [ 751.630118][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.638114][ T31] ? schedule+0x165/0x360 [ 751.642494][ T31] ? __pfx___schedule+0x10/0x10 [ 751.649618][ T31] ? schedule+0x91/0x360 [ 751.654253][ T31] schedule+0x165/0x360 [ 751.662784][ T31] schedule_preempt_disabled+0x13/0x30 [ 751.669220][ T31] __mutex_lock+0x724/0xe80 [ 751.673786][ T31] ? __mutex_lock+0x51b/0xe80 [ 751.681644][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 751.686529][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 751.691591][ T31] ? ns_capable+0x8a/0xf0 [ 751.699002][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 751.705792][ T31] rtnl_newlink+0x8db/0x1c70 [ 751.710398][ T31] ? netlink_sendmsg+0x805/0xb30 [ 751.718661][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 751.723742][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 751.729118][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.738176][ T31] ? nlmon_xmit+0xb0/0x100 [ 751.742659][ T31] ? kmem_cache_free+0x18f/0x400 [ 751.747847][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 751.753434][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.763067][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 751.769612][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 751.778836][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 751.784052][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.788997][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 751.794055][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 751.799258][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 751.807478][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 751.812964][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 751.819101][ T31] ? __copy_skb_header+0xa7/0x550 [ 751.824213][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 751.832698][ T31] ? __skb_clone+0x63/0x7a0 [ 751.837348][ T31] netlink_rcv_skb+0x208/0x470 [ 751.842136][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 751.847834][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.853171][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.861958][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.868077][ T31] netlink_unicast+0x75b/0x8d0 [ 751.872981][ T31] netlink_sendmsg+0x805/0xb30 [ 751.878022][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.883340][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 751.888410][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 751.893720][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.899223][ T31] __sock_sendmsg+0x219/0x270 [ 751.903934][ T31] ____sys_sendmsg+0x505/0x830 [ 751.908796][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.914101][ T31] ? import_iovec+0x74/0xa0 [ 751.918715][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 751.923517][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.928865][ T31] ? __fget_files+0x2a/0x420 [ 751.933473][ T31] ? __fget_files+0x3a0/0x420 [ 751.938277][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 751.943249][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.948940][ T31] ? do_syscall_64+0xbe/0x3b0 [ 751.953643][ T31] do_syscall_64+0xfa/0x3b0 [ 751.958349][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.963573][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.969738][ T31] ? clear_bhb_loop+0x60/0xb0 [ 751.974526][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.980476][ T31] RIP: 0033:0x7f840838e929 [ 751.984969][ T31] RSP: 002b:00007f8409207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.993407][ T31] RAX: ffffffffffffffda RBX: 00007f84085b5fa0 RCX: 00007f840838e929 [ 752.001453][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 752.009592][ T31] RBP: 00007f8408410b39 R08: 0000000000000000 R09: 0000000000000000 [ 752.017691][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.028252][ T31] R13: 0000000000000000 R14: 00007f84085b5fa0 R15: 00007f84086dfa28 [ 752.037300][ T31] [ 752.040372][ T31] INFO: task syz.7.1991:14203 blocked for more than 144 seconds. [ 752.049289][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 752.057074][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 752.065973][ T31] task:syz.7.1991 state:D stack:25512 pid:14203 tgid:14199 ppid:11121 task_flags:0x400140 flags:0x00004004 [ 752.078003][ T31] Call Trace: [ 752.081292][ T31] [ 752.084229][ T31] __schedule+0x16f5/0x4d00 [ 752.091112][ T31] ? schedule+0x165/0x360 [ 752.095744][ T31] ? __pfx___schedule+0x10/0x10 [ 752.100649][ T31] ? schedule+0x91/0x360 [ 752.107772][ T31] schedule+0x165/0x360 [ 752.111950][ T31] schedule_preempt_disabled+0x13/0x30 [ 752.118297][ T31] __mutex_lock+0x724/0xe80 [ 752.122832][ T31] ? __mutex_lock+0x51b/0xe80 [ 752.127715][ T31] ? ethnl_rss_dumpit+0x7f/0x5e0 [ 752.132691][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 752.137864][ T31] ? preempt_schedule_irq+0xde/0x150 [ 752.143164][ T31] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 752.149005][ T31] ? irqentry_exit+0x74/0x90 [ 752.153624][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.161709][ T31] ethnl_rss_dumpit+0x7f/0x5e0 [ 752.167140][ T31] genl_dumpit+0x10b/0x1b0 [ 752.171623][ T31] netlink_dump+0x62d/0xe20 [ 752.184386][ T5831] Bluetooth: hci18: command tx timeout [ 752.191366][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 752.197626][ T31] ? genl_start+0x581/0x6c0 [ 752.202260][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 752.209537][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 752.215513][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 752.221776][ T31] ? genl_get_cmd+0x67f/0x910 [ 752.226557][ T31] ? __pfx_genl_start+0x10/0x10 [ 752.231437][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 752.236475][ T31] ? __pfx_genl_done+0x10/0x10 [ 752.241275][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 752.247700][ T31] genl_rcv_msg+0x5da/0x790 [ 752.252235][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.257389][ T31] ? __pfx_ethnl_rss_dump_start+0x10/0x10 [ 752.263144][ T31] ? __pfx_ethnl_rss_dumpit+0x10/0x10 [ 752.268675][ T31] netlink_rcv_skb+0x208/0x470 [ 752.273630][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.278820][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 752.284152][ T31] ? down_read+0x1ad/0x2e0 [ 752.288650][ T31] genl_rcv+0x28/0x40 [ 752.292651][ T31] netlink_unicast+0x75b/0x8d0 [ 752.297549][ T31] netlink_sendmsg+0x805/0xb30 [ 752.302341][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.307734][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.313060][ T31] __sock_sendmsg+0x219/0x270 [ 752.317911][ T31] ____sys_sendmsg+0x505/0x830 [ 752.322708][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.328127][ T31] ? import_iovec+0x74/0xa0 [ 752.332666][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 752.337802][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.343042][ T31] ? __fget_files+0x2a/0x420 [ 752.347710][ T31] ? __fget_files+0x3a0/0x420 [ 752.352418][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 752.357451][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.362947][ T31] ? rcu_is_watching+0x15/0xb0 [ 752.367853][ T31] ? do_syscall_64+0xbe/0x3b0 [ 752.372810][ T31] do_syscall_64+0xfa/0x3b0 [ 752.377478][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.383578][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 752.389313][ T31] ? clear_bhb_loop+0x60/0xb0 [ 752.394028][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.400125][ T31] RIP: 0033:0x7fd43958e929 [ 752.404638][ T31] RSP: 002b:00007fd43a46d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.413113][ T31] RAX: ffffffffffffffda RBX: 00007fd4397b6240 RCX: 00007fd43958e929 [ 752.421572][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 752.429826][ T31] RBP: 00007fd439610b39 R08: 0000000000000000 R09: 0000000000000000 [ 752.438139][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.447297][ T31] R13: 0000000000000000 R14: 00007fd4397b6240 R15: 00007fd4398dfa28 [ 752.455440][ T31] [ 752.458500][ T31] INFO: task syz.1.1992:14206 blocked for more than 145 seconds. [ 752.466937][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 752.474846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 752.483536][ T31] task:syz.1.1992 state:D stack:27784 pid:14206 tgid:14205 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 752.495552][ T31] Call Trace: [ 752.498847][ T31] [ 752.501798][ T31] __schedule+0x16f5/0x4d00 [ 752.506398][ T31] ? __lock_acquire+0xa90/0xd20 [ 752.511383][ T31] ? schedule+0x165/0x360 [ 752.515869][ T31] ? __pfx___schedule+0x10/0x10 [ 752.520759][ T31] ? schedule+0x91/0x360 [ 752.525109][ T31] schedule+0x165/0x360 [ 752.529281][ T31] schedule_preempt_disabled+0x13/0x30 [ 752.534830][ T31] __mutex_lock+0x724/0xe80 [ 752.539395][ T31] ? __mutex_lock+0x51b/0xe80 [ 752.544100][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 752.549295][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 752.554604][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 752.559573][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 752.564813][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 752.570294][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 752.575597][ T31] ? __copy_skb_header+0xa7/0x550 [ 752.580671][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 752.586346][ T31] ? __skb_clone+0x63/0x7a0 [ 752.590871][ T31] netlink_rcv_skb+0x208/0x470 [ 752.595702][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 752.601186][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 752.606564][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 752.611791][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 752.617115][ T31] netlink_unicast+0x75b/0x8d0 [ 752.621917][ T31] netlink_sendmsg+0x805/0xb30 [ 752.626829][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.632125][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 752.637167][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.642485][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.647876][ T31] __sock_sendmsg+0x219/0x270 [ 752.652587][ T31] ____sys_sendmsg+0x505/0x830 [ 752.657816][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.663271][ T31] ? import_iovec+0x74/0xa0 [ 752.667879][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 752.672583][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.679065][ T31] ? __fget_files+0x2a/0x420 [ 752.683707][ T31] ? __fget_files+0x3a0/0x420 [ 752.688696][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 752.693671][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.699263][ T31] ? rcu_is_watching+0x15/0xb0 [ 752.704424][ T31] ? do_syscall_64+0xbe/0x3b0 [ 752.709216][ T31] do_syscall_64+0xfa/0x3b0 [ 752.713729][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.719071][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.725227][ T31] ? clear_bhb_loop+0x60/0xb0 [ 752.729938][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.736046][ T31] RIP: 0033:0x7f5cc9d8e929 [ 752.740484][ T31] RSP: 002b:00007f5ccac79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.748998][ T31] RAX: ffffffffffffffda RBX: 00007f5cc9fb5fa0 RCX: 00007f5cc9d8e929 [ 752.757086][ T31] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 752.765319][ T31] RBP: 00007f5cc9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 752.773503][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.781833][ T31] R13: 0000000000000000 R14: 00007f5cc9fb5fa0 R15: 00007f5cca0dfa28 [ 752.789972][ T31] [ 752.793080][ T31] INFO: task syz.1.1992:14207 blocked for more than 145 seconds. [ 752.801043][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 752.808987][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 752.819053][ T31] task:syz.1.1992 state:D stack:25352 pid:14207 tgid:14205 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 752.831490][ T31] Call Trace: [ 752.835080][ T31] [ 752.838050][ T31] __schedule+0x16f5/0x4d00 [ 752.842583][ T31] ? __lock_acquire+0xa90/0xd20 [ 752.847931][ T31] ? schedule+0x165/0x360 [ 752.852303][ T31] ? __pfx___schedule+0x10/0x10 [ 752.857272][ T31] ? schedule+0x91/0x360 [ 752.861550][ T31] schedule+0x165/0x360 [ 752.865787][ T31] schedule_preempt_disabled+0x13/0x30 [ 752.871270][ T31] __mutex_lock+0x724/0xe80 [ 752.875907][ T31] ? __mutex_lock+0x51b/0xe80 [ 752.880629][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 752.887185][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 752.892273][ T31] ? ns_capable+0x8a/0xf0 [ 752.898453][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 752.904377][ T31] rtnl_newlink+0x8db/0x1c70 [ 752.911232][ T31] ? netlink_sendmsg+0x805/0xb30 [ 752.917523][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 752.922599][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 752.931088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.937472][ T31] ? nlmon_xmit+0xb0/0x100 [ 752.941913][ T31] ? kmem_cache_free+0x18f/0x400 [ 752.949029][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 752.956260][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.961486][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 752.969098][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 752.978221][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 752.983399][ T31] ? __lock_acquire+0xab9/0xd20 [ 752.990478][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 752.997396][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 753.002376][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 753.007698][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.013171][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 753.018317][ T31] ? __copy_skb_header+0xa7/0x550 [ 753.023377][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 753.028878][ T31] ? __skb_clone+0x63/0x7a0 [ 753.033412][ T31] netlink_rcv_skb+0x208/0x470 [ 753.038575][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.044123][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.049520][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.054831][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.060062][ T31] netlink_unicast+0x75b/0x8d0 [ 753.064971][ T31] netlink_sendmsg+0x805/0xb30 [ 753.069862][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.075232][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 753.080204][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.085587][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.090909][ T31] __sock_sendmsg+0x219/0x270 [ 753.095756][ T31] ____sys_sendmsg+0x505/0x830 [ 753.100567][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.105960][ T31] ? import_iovec+0x74/0xa0 [ 753.110491][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 753.115290][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.120563][ T31] ? __fget_files+0x2a/0x420 [ 753.125232][ T31] ? __fget_files+0x3a0/0x420 [ 753.129959][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 753.135188][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 753.140682][ T31] ? do_syscall_64+0xbe/0x3b0 [ 753.145443][ T31] do_syscall_64+0xfa/0x3b0 [ 753.150009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.155320][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.161405][ T31] ? clear_bhb_loop+0x60/0xb0 [ 753.166160][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.172245][ T31] RIP: 0033:0x7f5cc9d8e929 [ 753.176886][ T31] RSP: 002b:00007f5ccac58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.185426][ T31] RAX: ffffffffffffffda RBX: 00007f5cc9fb6080 RCX: 00007f5cc9d8e929 [ 753.193421][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 753.201505][ T31] RBP: 00007f5cc9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 753.209580][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.230562][ T31] R13: 0000000000000000 R14: 00007f5cc9fb6080 R15: 00007f5cca0dfa28 [ 753.239770][ T31] [ 753.242831][ T31] INFO: task syz.1.1992:14210 blocked for more than 146 seconds. [ 753.254340][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 753.262383][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.274097][ T31] task:syz.1.1992 state:D stack:26824 pid:14210 tgid:14205 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 753.287181][ T31] Call Trace: [ 753.290487][ T31] [ 753.293430][ T31] __schedule+0x16f5/0x4d00 [ 753.298149][ T31] ? schedule+0x165/0x360 [ 753.302809][ T31] ? __pfx___schedule+0x10/0x10 [ 753.307772][ T31] ? schedule+0x91/0x360 [ 753.312035][ T31] schedule+0x165/0x360 [ 753.316283][ T31] schedule_preempt_disabled+0x13/0x30 [ 753.321764][ T31] __mutex_lock+0x724/0xe80 [ 753.326360][ T31] ? __mutex_lock+0x51b/0xe80 [ 753.331057][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 753.336969][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 753.342042][ T31] ? ns_capable+0x8a/0xf0 [ 753.347413][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 753.353255][ T31] rtnl_newlink+0x8db/0x1c70 [ 753.358042][ T31] ? netlink_sendmsg+0x805/0xb30 [ 753.362992][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 753.368097][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 753.373404][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.378786][ T31] ? nlmon_xmit+0xb0/0x100 [ 753.383230][ T31] ? kmem_cache_free+0x18f/0x400 [ 753.388239][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 753.393627][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.399018][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 753.404510][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 753.410308][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 753.415533][ T31] ? __lock_acquire+0xab9/0xd20 [ 753.420458][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 753.425574][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 753.430530][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 753.435746][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.441233][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 753.446430][ T31] ? __copy_skb_header+0xa7/0x550 [ 753.451503][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 753.457855][ T31] ? __skb_clone+0x63/0x7a0 [ 753.462403][ T31] netlink_rcv_skb+0x208/0x470 [ 753.469858][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.475444][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.480773][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.489326][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.494652][ T31] netlink_unicast+0x75b/0x8d0 [ 753.499443][ T31] netlink_sendmsg+0x805/0xb30 [ 753.504222][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.512612][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 753.518549][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.523991][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.530451][ T31] __sock_sendmsg+0x219/0x270 [ 753.535305][ T31] ____sys_sendmsg+0x505/0x830 [ 753.540097][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.545508][ T31] ? import_iovec+0x74/0xa0 [ 753.550023][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 753.554776][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.560034][ T31] ? __fget_files+0x2a/0x420 [ 753.564742][ T31] ? __fget_files+0x3a0/0x420 [ 753.569438][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 753.574445][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 753.579937][ T31] ? rcu_is_watching+0x15/0xb0 [ 753.584899][ T31] ? do_syscall_64+0xbe/0x3b0 [ 753.589608][ T31] do_syscall_64+0xfa/0x3b0 [ 753.594128][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.599467][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.605653][ T31] ? clear_bhb_loop+0x60/0xb0 [ 753.610363][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.616427][ T31] RIP: 0033:0x7f5cc9d8e929 [ 753.620857][ T31] RSP: 002b:00007f5ccac37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.629483][ T31] RAX: ffffffffffffffda RBX: 00007f5cc9fb6160 RCX: 00007f5cc9d8e929 [ 753.637548][ T31] RDX: 000000000400c89c RSI: 0000200000000280 RDI: 0000000000000007 [ 753.645684][ T31] RBP: 00007f5cc9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 753.653692][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.661777][ T31] R13: 0000000000000000 R14: 00007f5cc9fb6160 R15: 00007f5cca0dfa28 [ 753.669892][ T31] [ 753.672957][ T31] [ 753.672957][ T31] Showing all locks held in the system: [ 753.681131][ T31] 1 lock held by khungtaskd/31: [ 753.686085][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 753.696050][ T31] 3 locks held by kworker/u8:2/36: [ 753.701170][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 753.712936][ T31] #1: ffffc90000ac7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 753.724033][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 753.733175][ T31] 5 locks held by kworker/u8:5/152: [ 753.738483][ T31] 1 lock held by dhcpcd/5494: [ 753.743166][ T31] #0: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 753.752431][ T31] 2 locks held by getty/5592: [ 753.757907][ T31] #0: ffff8880352320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 753.771010][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 753.781361][ T31] 3 locks held by kworker/u8:10/6791: [ 753.786985][ T31] #0: ffff88814c8a3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 753.798717][ T31] #1: ffffc9001ddf7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 753.811604][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 753.821213][ T31] 3 locks held by kworker/1:10/6796: [ 753.826604][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 753.837694][ T31] #1: ffffc9001de17bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 753.848778][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 753.859400][ T31] 5 locks held by kworker/u8:0/13032: [ 753.865792][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 753.876779][ T31] #1: ffffc9000c89fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 753.887418][ T31] #2: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 753.896844][ T31] #3: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 753.906994][ T31] #4: ffff88804e30ad30 (&dev_instance_lock_key#14){+.+.}-{4:4}, at: napi_disable+0x4e/0x80 [ 753.917240][ T31] 2 locks held by syz-executor/14106: [ 753.922723][ T31] #0: ffffffff8fa15538 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 753.932933][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 753.945757][ T31] 2 locks held by syz.6.1985/14180: [ 753.951048][ T31] #0: ffffffff8fa327b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 753.960831][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 753.970039][ T31] 3 locks held by syz.7.1991/14203: [ 753.975374][ T31] #0: ffffffff8f5760f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 753.983616][ T31] #1: ffff888033d306d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 753.994173][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_rss_dumpit+0x7f/0x5e0 [ 754.003514][ T31] 1 lock held by syz.1.1992/14206: [ 754.011069][ T31] #0: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 754.021288][ T31] 2 locks held by syz.1.1992/14207: [ 754.028984][ T31] #0: ffffffff8fa2e018 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 754.039184][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 754.050952][ T31] 2 locks held by syz.1.1992/14210: [ 754.057009][ T31] #0: ffffffff8fa142c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 754.066783][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 754.076034][ T31] 2 locks held by syz.0.1997/14223: [ 754.081244][ T31] #0: ffff88807af276d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 754.091610][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 754.100859][ T31] 2 locks held by syz-executor/14229: [ 754.106890][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.118766][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.129629][ T31] 2 locks held by syz-executor/14232: [ 754.138664][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.149567][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.163112][ T31] 2 locks held by syz-executor/14235: [ 754.168592][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.179428][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.190034][ T31] 2 locks held by syz-executor/14239: [ 754.195461][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.204966][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.215547][ T31] 2 locks held by syz-executor/14243: [ 754.220956][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.230484][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.243854][ T31] 2 locks held by syz-executor/14247: [ 754.249417][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.266885][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.277631][ T31] 2 locks held by syz-executor/14250: [ 754.283017][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.292776][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.303488][ T31] 2 locks held by syz-executor/14253: [ 754.308959][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.318441][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.328997][ T31] 2 locks held by syz-executor/14256: [ 754.334676][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.344252][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.354972][ T31] 2 locks held by syz-executor/14261: [ 754.360363][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.369959][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.380526][ T31] 2 locks held by syz-executor/14266: [ 754.386150][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.395745][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.406331][ T31] 2 locks held by syz-executor/14269: [ 754.411748][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.423562][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.434183][ T31] 2 locks held by syz-executor/14275: [ 754.439774][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.449292][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.459979][ T31] 2 locks held by syz-executor/14278: [ 754.465467][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 754.474977][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 754.485646][ T31] [ 754.487988][ T31] ============================================= [ 754.487988][ T31] [ 754.497301][ T31] NMI backtrace for cpu 1 [ 754.497316][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 754.497337][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.497348][ T31] Call Trace: [ 754.497356][ T31] [ 754.497364][ T31] dump_stack_lvl+0x189/0x250 [ 754.497392][ T31] ? __wake_up_klogd+0xd9/0x110 [ 754.497413][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.497437][ T31] ? __pfx__printk+0x10/0x10 [ 754.497468][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 754.497492][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 754.497510][ T31] ? _printk+0xcf/0x120 [ 754.497538][ T31] ? __pfx__printk+0x10/0x10 [ 754.497558][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.497582][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 754.497606][ T31] watchdog+0xfee/0x1030 [ 754.497630][ T31] ? watchdog+0x1de/0x1030 [ 754.497659][ T31] kthread+0x70e/0x8a0 [ 754.497681][ T31] ? __pfx_watchdog+0x10/0x10 [ 754.497702][ T31] ? __pfx_kthread+0x10/0x10 [ 754.497722][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 754.497744][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.497766][ T31] ? __pfx_kthread+0x10/0x10 [ 754.497785][ T31] ret_from_fork+0x3fc/0x770 [ 754.497810][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 754.497838][ T31] ? __switch_to_asm+0x39/0x70 [ 754.497855][ T31] ? __switch_to_asm+0x33/0x70 [ 754.497870][ T31] ? __pfx_kthread+0x10/0x10 [ 754.497890][ T31] ret_from_fork_asm+0x1a/0x30 [ 754.497922][ T31] [ 754.497929][ T31] Sending NMI from CPU 1 to CPUs 0: [ 754.656752][ C0] NMI backtrace for cpu 0 [ 754.656768][ C0] CPU: 0 UID: 0 PID: 6601 Comm: kworker/u8:8 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 754.656789][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.656800][ C0] Workqueue: bat_events batadv_nc_worker [ 754.656832][ C0] RIP: 0010:validate_chain+0x2cc/0x2140 [ 754.656850][ C0] Code: 00 0f 84 a2 17 00 00 b8 01 00 00 00 65 48 8b 0d 2a 85 fe 10 48 3b 8c 24 d8 00 00 00 0f 85 43 1c 00 00 48 81 c4 e0 00 00 00 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 86 17 cb 09 cc 41 83 fe 03 ba 02 00 [ 754.656865][ C0] RSP: 0018:ffffc9001d1c7850 EFLAGS: 00000086 [ 754.656878][ C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 90a3176437a7ac00 [ 754.656890][ C0] RDX: 0000000000000000 RSI: ffff888025be2940 RDI: ffff888025be1e00 [ 754.656905][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b34e20a [ 754.656916][ C0] R10: dffffc0000000000 R11: fffffbfff1f4217f R12: 0000000078a83765 [ 754.656928][ C0] R13: ffff888025be28f0 R14: ffff888025be2940 R15: ae9e4c96fc0ecff9 [ 754.656941][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 754.656955][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.656966][ C0] CR2: 000056549b0f0a08 CR3: 000000000df38000 CR4: 00000000003526f0 [ 754.656980][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000053 [ 754.656991][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 754.657001][ C0] Call Trace: [ 754.657008][ C0] [ 754.657017][ C0] __lock_acquire+0xab9/0xd20 [ 754.657041][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 754.657062][ C0] lock_acquire+0x120/0x360 [ 754.657082][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 754.657107][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 754.657127][ C0] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 754.657149][ C0] batadv_nc_process_nc_paths+0xdb/0x3a0 [ 754.657171][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 754.657193][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 754.657216][ C0] batadv_nc_worker+0x429/0x610 [ 754.657236][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 754.657260][ C0] process_scheduled_works+0xae1/0x17b0 [ 754.657292][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 754.657320][ C0] worker_thread+0x8a0/0xda0 [ 754.657344][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 754.657368][ C0] ? __kthread_parkme+0x7b/0x200 [ 754.657387][ C0] kthread+0x70e/0x8a0 [ 754.657405][ C0] ? __pfx_worker_thread+0x10/0x10 [ 754.657426][ C0] ? __pfx_kthread+0x10/0x10 [ 754.657443][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 754.657462][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.657483][ C0] ? __pfx_kthread+0x10/0x10 [ 754.657500][ C0] ret_from_fork+0x3fc/0x770 [ 754.657522][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 754.657544][ C0] ? __switch_to_asm+0x39/0x70 [ 754.657560][ C0] ? __switch_to_asm+0x33/0x70 [ 754.657575][ C0] ? __pfx_kthread+0x10/0x10 [ 754.657592][ C0] ret_from_fork_asm+0x1a/0x30 [ 754.657614][ C0] [ 754.657885][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 754.960841][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 754.972642][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.982725][ T31] Call Trace: [ 754.986014][ T31] [ 754.988954][ T31] dump_stack_lvl+0x99/0x250 [ 754.993556][ T31] ? __asan_memcpy+0x40/0x70 [ 754.998232][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.003429][ T31] ? __pfx__printk+0x10/0x10 [ 755.008023][ T31] panic+0x2db/0x790 [ 755.011917][ T31] ? __pfx_panic+0x10/0x10 [ 755.016346][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 755.022158][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 755.027529][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 755.033683][ T31] watchdog+0x102d/0x1030 [ 755.038013][ T31] ? watchdog+0x1de/0x1030 [ 755.042455][ T31] kthread+0x70e/0x8a0 [ 755.046543][ T31] ? __pfx_watchdog+0x10/0x10 [ 755.051250][ T31] ? __pfx_kthread+0x10/0x10 [ 755.055848][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.061064][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.066278][ T31] ? __pfx_kthread+0x10/0x10 [ 755.070894][ T31] ret_from_fork+0x3fc/0x770 [ 755.075504][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 755.080620][ T31] ? __switch_to_asm+0x39/0x70 [ 755.085386][ T31] ? __switch_to_asm+0x33/0x70 [ 755.090153][ T31] ? __pfx_kthread+0x10/0x10 [ 755.094750][ T31] ret_from_fork_asm+0x1a/0x30 [ 755.099554][ T31] [ 755.102969][ T31] Kernel Offset: disabled [ 755.107291][ T31] Rebooting in 86400 seconds..