last executing test programs: 21m29.5599651s ago: executing program 3 (id=3322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0xf0ff, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="9a604e5a1f64a66770f1830756b6e7f546180a1a54e96d8105c0f8b54ce290", 0x1f}], 0x1}, 0x0) 21m29.163558938s ago: executing program 3 (id=3324): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) fcntl$setstatus(r0, 0x4, 0x42000) write$char_usb(r0, &(0x7f0000000180), 0x0) 21m28.615511106s ago: executing program 3 (id=3327): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) sendto$inet6(r0, &(0x7f0000000480)="bc43d03b2b8b3000", 0x8, 0x20000000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x0) r2 = io_uring_setup(0x6506, &(0x7f0000000000)={0x0, 0x83be, 0x20000, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x1e, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xd, "2bcbdc07048f81ed78312da92c"}, &(0x7f0000000100)=0x15) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0xaa, 0x5, 0x3, 0x7fff, 0x0, 0x7, 0x0, r5}, 0x20) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 21m28.187694126s ago: executing program 3 (id=3329): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f0000012580)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)="a59d3d1bccd3db9bed23b10408cb27ce1105ac3798a2dc16c0fdfe360c", 0x1d}, {&(0x7f0000000400)="e3a45c7f6b0351f2c9", 0x9}, {&(0x7f0000000440)="4ff13e3f3322492923f4fb230ebebab5ee7b2747495e67e42b72fec3fb881a1590fd1f59aaec13e5a2cf0d85e6f8685d1a82b7eb0e1cbf29da7b9de897bd04f801c681697b0cd8496bddae9ebceeda0ff13cbbee97ff6e192ff5e4f1d63c43af56dbae9cac529f4404aaa3e55b91081e26c8a27165fd81ae43d10c890d43342c9d6f4c99f0f011", 0x87}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32=r1, @ANYBLOB="1c0079bc446817d58850487400000000dac0a8d53604d89ccc85deb4c790b6662c56d30f544bce29abbea03301478bbca2c87071be6f0028d0ac9b8efa9a7e03674784014544c99cf63c3fae0f0f03a592f8333709cdaabfac6f30e87dbb3c048ab5785741dce33eceee8d5a22f1ca0e97aad6d0a339e59394b04d875a123ae60e544c090b2bbad200"/147, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0], 0x2c, 0x4040}}, {{&(0x7f0000000580)=@abs={0xff4f69b095a03b57, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000600)="0d2357398643b52568a2637e8ac82786b89a084a2d400b50694f14994a1ada79c04e5f08132226427a73536cb5dc6a0f6a6e369db566bc1f9208", 0x3a}, {&(0x7f0000000680)="461841e1c4eb863422f21b47ced3ca8044a6de9cd3f5e132a62c9ea37183accce35e50a509ae49a29af77f8bc0e0a028", 0x30}, {&(0x7f00000006c0)="34b2bbfff76291f8d8dd0abd9456c2d77816a6c1b9118f0cb75c47bdeff87171689272732b94dbf1811c11998b9e18bf44bb3332c63a250b098a2d9e7425b1af750af55e327f0d0c5d5161ed01dca6f4321ecc67ad379f3c43c5ac8455bc7f74c04238b105c05b2277543ec1533ac28a59ba", 0x72}, {&(0x7f0000000740)="aa31f71e5b0695c9b85852dd4d4c28b69a9530f6506c8fe879ce217880b0c521ee70f646ce20d3cc9eabeb4ce458af5fc56f3e384afa2e4577efcd4bd4939586d562c2d26daeb0d2955ec51d3062ee5e1fd89de1ba46f8589309d6bfee9ad6e3efc87902a6d263bfa16523d172516e22deb6992900f4f4e6e60acd72b93423f2692a918388c0d528145fd6", 0x8b}, {&(0x7f0000000800)="df021054d781cffa52abc0c4491b400dc4c224fb8dbfa99d1d1769975e05e979f340416da47b2001edb651c308475ce8eec89c464216161ededeabb517e923d23600f5998bcbe7010af4bf7313dbe55fc1c45bad2bea0d95b42f3512b0ae8a42544892a5ad3acad3a3637eaa2e971bc8fafb5e38687b6273bf9084e6a852e8c50d9975f6978683dfc48f7faa21028af6393d88e81adb0126ac8dabc3fedb69c622671bd6ed462c50a72dc164b45b5a1c2c742967e8942c3364244f77e50dfc160c83b784b03caf931ffd4b68fbdfea7139b8ccc5260f0a9e82476943f228497b66493f36f7cf98efef", 0xe9}, {&(0x7f0000000900)="734729abd8b1d7041f3c8c7e7fbc0e6cc2687b036264fdb994e198220af0038e1f25624dfc022953ce4bd53baf2f16d02eb851dec32a7f438e9587e6ce6430ab7922f06fae15325cb4734feb82325c305fdb3c3d1a95f53be9b49ac2ebc23cfb5b20986c74d0f874244bab872a968531a7c696e5572456548609f4ca290bf10c8bc7544bfc65d79f5c098288c39cd4ef13c00a8ef48fd74fb9858dfcff5da9432a63851a8b47bf80ff22b42253ea412f202cf8e828b94a94456c3cef2789339ff51da8d0735906581ab3f3b0a664ac3624f7940b21eccf4cde3cd2", 0xdb}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="a0c0fea2b6b5afa20c43455cd7559e46482b1328d34efcbb777b9a86fb158abc72d90e9d55ba357dc5ef6cbc8d49652757a0d80b9d21163c6936bbc4f6acdbb897fc108937c6c08c028f49f59f4ec9ab508750ab1cdac7358891cd944338ec8f1c5327c2b2f2f8463468eaa66fc9547ceb735f918ccbcc86b46843d1683c2aa21810603083c086be727470ebff2113ffa00a786f8425d0f6f445fe32eb5bce4ce8d35ba87b1fe41430a712e292a24f127441478b3dd27c1a7d0a703f155fdd376fa9f95791d61a66cfa36cdaaa13c02d4d", 0xd1}, {&(0x7f0000000b40)="81e04a4be624be16135d550a058bb9ad8466767e5201f01f5d9ce4", 0x1b}, {&(0x7f0000000b80)="fd1906ffb392e5879613240edbce40c08f077f2537c840b0927d0b858e2cb966cd9817ac4d3626eb08d4dc8277a1d03f6550b0bc68d7bd9e282732be14662638fc76b82ba87ca916979a7df2fec18273cc4c350409ab689d9bdf146e92e9b4ad", 0x60}], 0xa, &(0x7f0000000f80)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x98, 0x800}}, {{&(0x7f0000001040)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f00000010c0)}], 0x1, &(0x7f0000001180)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x80, 0x1}}, {{&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001280)="f3d32e03746429e9bc", 0x9}, {&(0x7f00000012c0)="d2d672899cc248dfe365513945c3fee1f437a7b6194889053407285f46d801d2a26b9afc497d9775cf3879b0a0f5f643503170724ca24040b09328b7e440bc1d308f374d93c4c0c36351db3e9abe8dcb0c3d6ad526396afadedb611e6f9e00a4217fc807d8a1ed2714686c54fb52170084bb46df37e9dfaea1d55b04a492edffb82b106cada097d4121abc8823a9c28a7aa88b038442c01900019d680a1413e8beee17ab2720fc2cfb16f943ef2910bfe79073aa723db907cbc391b6bfea60062b", 0xc1}, {&(0x7f00000013c0)="6e1188cede59348ae0977511fefe98a60302", 0x12}, {&(0x7f0000001400)="2377a897c7ff942313b006447bec06a57cac579ac12b63438c23d987fcd8f0dfbb37c75bfc0636b9c2e68078269c552adf38a18e4a2bb64234a376a09730fe09253685678331310f85226d67ca247ee7da55b2cd2f5873427fbbafdfaa10ecc03f42e21b9ab1ceee423efeaeb32b1029fa91ca422dbda0b411c0daf420920b5a54eb4d7c3f8e5efb72ebb08f2100ccb2e2aea5eae14dad4a668b271ad5fe09eafb8412b077c511702b42e87c", 0xac}, {&(0x7f0000008280)="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", 0x1000}, {&(0x7f00000014c0)="7746aee18dc32762703a50bca620145d82c0b435ddaa8d565d1804caceee520eadfc18f33ab63fcb232ff54ad4664a6f0bb73e8ae92a2f8caeb7d17f6d701f895138900a5b5d4a451f39d93857d089a107525e89d6d536ef704ab03d671c4cb8f57f6643131ffc406267fcfefd178bc105649bdf5473db51949a982e11df5ad41c163fea93324f44a367c7ed4f490cf24e26f72fc60fd485cd77bd", 0x9b}], 0x6, &(0x7f00000015c0), 0x0, 0x805}}, {{&(0x7f0000001600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001680)="5fc4672f04a513621ffcda03dcd01f5d23bcc6d5f048090a310016917d730057273de3a12d1a000ddee708161062dea4a268d0c7af96ed7b954ccb0d04689c2a97b22261b0e45e0a8da72c3a552a1fd513920776af5370b454c5ba7cc003899e9b2aca9dbb325554004fd7a5becb984e0d717ccb4c91c58e5b7cd96fc10c2a7aa7587793663159ce", 0x88}, {&(0x7f0000001740)="ae6cdfa580ccc79eef3d7170b3f05f17f04943d745dc6c7e35ef5a6a3ef33acf61edca2c9604f628cc6db8c124b97c1cd6656a42a841ce8844d1977645cc6fe470d4d396b1314f566d65d566e99234b599642002c13d8c90b03fb319af492f2922a45b0e758e9a5e180191e3978f655d994bb8641993824f7d01b6f69b0a0d05a881d13ecad11cfc9dfb46892c434be9d4e57c6deee71640b0bcfc00800ec21a505d6ddfc4017a0761685e5330f93bf4256782a97807a302661ca95ffe1bcf4e4440e1d4", 0xc4}, {&(0x7f0000001840)="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", 0xff}], 0x3, &(0x7f0000001a80)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0x138, 0x8001}}, {{&(0x7f0000012300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000012480)=[{&(0x7f00000021c0)="86ebc2a2dd7049d0fea81e9fb331856cda35660b0c784184f5ac928188eeb61f71c351623d2a8bc2c005bd192c1be766067047259ad969ce", 0x38}, {&(0x7f0000012380)="b6e6be2b9610c007211faf1aeaf1d7b2f5b23352c400f351e6bff0ef68ce68070fdc8b7a42c5d197f80b9082a4a887c6e79ca4034afb78b1fd59de006d432cc505f518e1cba186961d564053b38226baf9573bd9db7a1447317ccb4f9dfd4f467e57da3beec69e7d37457a456162ee8209cc80b4906d76a7db5f02cca354e66e929cb790c0c269de04784d1a2a2f9306d56e2ddb4e1d53ab172d9725dcf868571eb617ec4447091154a05a6a47f5fb5509565c2c33482f876d87f307d9d91461063c72f67a3e19c38cd6bca8f0b09720e465545e02a2c7f797517b", 0xdb}], 0x2, &(0x7f0000012500)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x4000890}}], 0x6, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40c0080) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x1) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080), 0x7f03) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc2f00, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 21m26.878202118s ago: executing program 3 (id=3332): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a884d788a89806112405ce", 0x22, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 21m26.639142424s ago: executing program 3 (id=3334): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa0, 0x84}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000006c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x7) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x1d, r8}, 0x10, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="40a2fc644a000009f7450000000000000000"], 0x0}, 0x0) 21m25.953170534s ago: executing program 32 (id=3334): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa0, 0x84}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000006c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x7) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x1d, r8}, 0x10, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="40a2fc644a000009f7450000000000000000"], 0x0}, 0x0) 9m0.714114091s ago: executing program 5 (id=6705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@getchain={0x54, 0x66, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x2}, {0x7, 0xf}, {0x10}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) msgctl$IPC_RMID(0x0, 0x300) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sysinfo(&(0x7f0000000000)=""/92) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) syz_io_uring_setup(0x3854, &(0x7f0000000000)={0x0, 0xd975, 0x80, 0x1, 0x35f}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x55, 0x6000, @fd=r8, 0xc, &(0x7f0000000100)=[{&(0x7f0000000300)="acc1db09c82be58d4baddd7fd92b8bbcc4f9df6b00bdbb7377e5fa62467c295a6ce64cae5d81eb507e6df29417db506ccbd110b3c160aae0c258066c1211c851c890bcc1d0666efb954e13d2ca2bcaedde8a17e6eef2b82c", 0x58}], 0x1, 0x1c, 0x1, {0x3, r9}}) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, &(0x7f0000000640)={{0xb, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0xe8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x1, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000003, 0x3, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x7430, 0x3, 0x2, 0x609, 0xffffffff, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x83e1, 0x1, 0x1, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x1, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0xa, 0x1000ac, 0x7, 0x7, 0x4, 0x7fff, 0x9, 0x4, 0x7, 0xd, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xfffffff8, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0xf80, 0xfffffff4, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250f000000080003008670dadd0d9920ce4dafc8b0816b3c5be37808e2279bbe56c50174a79e36b3836b77d016e795a96b4b13711cf41eda855ec562db67425e9d52907583a61602ef2bdac2a8f6d3d47b2491a0cf2134546cf5942bbc4e531a9440ed5074245f2b89b543e4a1ff4c801350a678353c825b486efefe8ce7ea50600913ac81bc96d66f1e6500"/161, @ANYRES32=r6, @ANYBLOB="05002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="28040000", @ANYRES16=r11, @ANYBLOB="010000000000fcdbdf250100000004000180100002800c0001800800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c050) r12 = socket$inet(0x2, 0xa, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x50, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000825bd7000fedbdf25190000005800018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1400020076657468305f766972745f7769666900080003000000000014000200766574683000000000000000000000001400020076657468305f746f5f687372000000002c00018014000200626f6e645f736c6176655f30000000001400020076657468315f746f5f68737200000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) r15 = socket(0x10, 0x803, 0x0) sendto(r15, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r15, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9m0.153396153s ago: executing program 5 (id=6706): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0xfffffffffffffdce}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4007}, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="7191", 0x2}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1, 0x10122, 0x0) 8m59.082258136s ago: executing program 5 (id=6711): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000001300)="ae9dd30ae319aed6942bf204dbefe458412d7fac8a4572e98b2403140775c08270552e4b2cfb1a1ca5f2d3d48fce1cbf9a0e0282845b3dedebc85ac39d4f8f7119c52094ed3cad83f1462f802fa224e3cc0d5713f3bb7b2ce5080cbae47ca7713cbb663ae66965ad335111c255a13ef87d7f7c5c66dbec7d500d11e332775f852223aba6d559fddd69e237011fafea511ee8efa3356d45ad710c125277a952205a51cf25bb44ac30ce2564405638bc9b506c0766bd20dc1fb5a53a4f3d16d21e21ba9b5df21547390f687c7dd88de478e78acf1a7f1113e1b68d7f1160ed80f5922ddde42180131ab746bfb9b04fe69d3a55248b19a30f27ba08fca5b2ee133bc10946babc94fb9445d80cf87f449e25afc9e19737377d3fafa919dbcb73fae4ba849967bbb09297d4b0e6aad765e0f1122d3b1dfdca9e3cd151747ebba0bb71f05b25a3d2ceb8ba346f9b25cf061e595f72d0268bffa9046ac3467271b1490d4274d721e701635ee62bdd3c2431dc42b634c6cfea52a5295d46d9325fa51d67fe981e15f13f931280dd1e80c2a17df2fcc102b9ebda18bff072357de425864ab2da138fdbed23c6a172c9cec1b42dc5eac5888e83f7da20d87fc7b9a35c3e63638c2e61b93ffbb8f99a4606e00b45d8611c61590d32088337edbcdf5920986cf9a233d08e5e43b75ab989f184863b8d0f558a9538aa283f220156b35b94702c148ca37fa7852d99130da7a0b5caac985af66b7b8f12fc4b3a75af382e599983ad7ccd6832ec25b88f7fa77424c8cb9ec4b706c029b002bcd31951c4b4e84ab42d394e96e4c6aaa00f1712fe52dd95bcf2effd8c0f35685843eeabdec4b551cdf7327cb34039d63d2f5cc82262550a8b3ac220626659ebef82ea3fe4b1e4b34d98e57ff2cb056e4b1c301a68007c64b776001aa2702e2d7fdadaa1bbd0521297b71d55eff6985d090520f2641f0909535709ed064a571a09cfae2dae4a69266a8051006ff7e8a50e72e9411d5be155bbe2dfe9953da6bc4cc50b7d787e3f9067fc0cc336b20a0f71666feedb8e4472b654e845683dd40bb5c36d0c009bd7a796dede7b45d9e5daf7658641aceb172fc1981cf2619f83a4e33e4e5de4b687e9cd52f6545d91d64b0cb4b6f387c512d2810e7c964d7a46cedc460e910862a5bd5ecba19b28403ccaba0392d302139b85840952c5683af4ed65a80bbdc5ed661856c539aab9200bc9ad314fe72a2362db0096d8cab3ebbe7885e7493793955d39c40fd429db13f9f1bf9f6995174992d6c57ad3027cbc6a423f9c91afd609bbee54139ba4ed7028e962ee760070c2eeac72098843e1efa09dc8cd4c92631669174bc72f2ad508aeb50034acea51df26acdc9e4721ebc19d1102544b1ba0c37849535300f4dad5d0b83c29e48b4019fc328c28fec6af11cbc900e49bedd300158f259067782056619bad278d3bceb5c89c915c676dfe3db406b2762d3fe4092a7b924dc77daba09b3c9e7d84543deffb5f4aeab34f61909a5a82f970954ca85d7ecc23414d25abbdfd2996cf00158e9e32cdb35537d4d3697cedbb59462e9684c79a10add16ded678d007350ab728f99ff734c31b439cc1c570322e1871584bde6897c6441fda0117608058ebe5c5c61fbfe7b1695528c15b6c5d9f12d4aff944603ffc96ae742670a5157ae9002b39e77e0441127b422d9812c509a55c42613bba3a4863c831ac6ddcd25956ef5b920f5520ee792912ef39e37eb73909b36927344c11d39ecf12fe82e336fb41b1d272fbf546ea36409024f9317cba05c922c93e9a97eeebc486ed4cf20d6000ddd0968e72e7e6ec378706a6a5b553b8637dc331de25cd764e6e2c2789cb84a9ac65fe55e71365dba525ce702aafbfdd37d80635c56aeea026c9f0cc0f2e84b24911b14d3b468a98af9b772c197a2d09bed353411ac2e9a11baae61e174fc063245c54560b6030e71f1924bcc4fd03562f979675169a18f461017280cba16694c28573ff40613b2bb436fedbd16969721021abfc79f173fd58f56cfb958acf341e585195056c531a4dc2fcdb35c15737d69ccf53d19efcb48bfec86b27c38c579270214527c6f3a2741934bc5175d290452f2e5042637c3a58a20b33ea1808ada2e0c57ee18c49af657336f85bfe245bdd60b7b435bf95b148df3653e09173c624a3f9e9d72ed5fde5de537a11cb33a1776f4553017595376722d709f1645a71aace3b9d16403489802f8e417c4b7580d1310b2395f6611328a0a9911e6363b17cfaf0d8b5a1d5dfccd36a0f05bdfbc4c392140a53b2c89ffec95649a4ed37086648ac69079192cd7c5c061d80eb3e10f5cc157922733afae0c2d30c851a40e255d59c35205b9021fe16a9a227c4f6211aaa723623653395e794198838c17ac25c034e7731cd7eb123f0b448b129edb89c5ac1f2afd27321f0c6a304003088703166840416ece29976417efa994044d4a370d8c91b7bd6cda39b89c5054d5b985654ef0611bbb8a50ba40e58c2fcfcb8a6f740f57b782acdc5e6184c7334fe5f85c4eecc05483ad7ded0e20b5d85fdc637506e34323ae707aa43ab35c378aa8f3376c466318a9eb826910655c13a7e1ddac20287bef9ef039c8ea26188678d3763542cf07a702cb1b35da9db0dd8692ce436399b70a49daa56ba206c0c75cec9956a2086f24a9f0016f57ffc0f08959a76297a7a9ed507e12ba8839fd90594ea86f421fc9c984ee010bf42fdbc34e778ca5c0b51a00f0bc6fbfed2a8c0bc874f42dbf7bd8cbe0de3316eb022f255db2995af44694a1b7e8a6c0a1edb88719d1204f0b0cd62d0c9823b157367f11386b817c7ebaaae3fe1539ae8d23aabffd5176a1760292a56a79b0492776b2e7ebf7bb9f251590785a9119a78afa3d392210b00f88c4661ce827890c2b14e1dca7cd4ec5518b06af1fcb6d6974c19cee9dd903658a595fb25dd6b20ef000cab9608ffae61d706d9bdc4e75a31c4e06dd9e820fe9040e40408995476c3870e6fbcb36aa81b1862a000316580e9a18a7c819e8dc0de2000ba46a27378aa24422730173638eabd21fc8781f622ee0f6160697a4068b1c680bac36e8800a9fa0feb5e96761b8217c7e2fdbb6790ca4061511ff65473bb24c10375dec8aa65fde866cc715ae156d64b60554dfcac87b85500296e416232185bfadcd8fae662179fc6c68292de1a79e3409ddbaa550e2208724205ec9db3fd1c063e51df6a349b0a0f9220ffb1ec5d839e6dec8f2f1e2aa03ca9310b7f087983167646dd125eb150ddc14acd65d2fb2c28d4f0734f33d6b18ea64abe4b70693fad5d8b72f84591d55a03be71011f11b111d1f380f6baa41549f73e5f448d77e8c29252c09b688a97ed6a828f184f95cc6c3ec66f3a8f100a436e0c492f86e71daadae8003662e4ff107a47c5ee3f02624b915e4cc723dfe7bad1bf5abcfd50febc9b3fb8972943d0abee8755126b49757aa9c6fb16b31b72676885f9ca488292480fbf6ec53a954e39ca3cda9aad56a575a1103572cac20a5e258616b501edc885ff5564f21c73b75da5c3d46adcbca730f2be04937a01f0a55bb119870017067b8f7dec59980bde4d59bac038a9159d1b02055dde4ced6bb686d173cba999ea419c511deddf311d0607c2d6bab371b39e9500a2d7213a39d26ad35fbe16a05e0ce2673b98c2abd7c5155e6276272b076f8ea1166bda703dd53f1b289861484c07b96cf8236e15d2840972f851a5d67f7e6ba3fd393b0c6e3a0e659387a495f79afeb76731ebdd2dd4b032f8ae3847420fa791bea7728cb3d8fe0a8e2e93d50d9828fc8f2bc7208b8db3c16dbc84042aac717299ea5c19a1aa841f85e5635f4d7e13fe4dceadb18b3f2ad33e14d2bb32927975305866c511dfd8580da8cabe00ec182488df970cf93a756bcef17233da5017f58853018de420d7f62c96316d777a9f8acebe9d79ed4f3bd1dc9b9ed7fa0436f70ea6aa095cee33be3e8b6d6a2912f9caafb3cc25442827e1c2caa1f4fa4f8f88fda59634414664493518d31f6c90778fe714feb0f0f064fdb17a2809e0fbd89ccc49bacb1e19daf1ec1673432145c16e0b5af6d47fd0062edd04f5f4d6a9f4389c164e1e427bc514e1f0cb28fcf5b538b65bea9bea2f74cbdb6682c0bedc8b61f69b18ad6bd41f6e7e790767e49f8b1a9a044957e6c7976f1bad3044e6df9ba9f339cfec7a82bc1315fb247cc6bd0f321e0274f3f70c2d1327c58b2fcb8c447328dcdea7f4e93b63f2b4fbe0661d7a89bba34d65e58c179e364cbb3cf9a24a54ebacbf8ec7caf9c018bc4270f0758fc09ca196d229c2a82d0897dfa6e811419aa171da0fd155c5359c251e311009b3a5bc494bf833272b0e58dbd202dfca232f4d6a85c68379be3ea6c4b86a8af9a4f48b1a195d91f71a48b411c57a406f4e8c235116ef565cb17e74c1813e757079b4f65445991877d49b3a852c105e234b1f3c5838529b06b179fa869ee03662fb12267b476b245a4e9bcfa5728ec781f6681fd786246e44f2d489f206d0cd9143b6fab946e072712271e4a5940ec77330a1766474773d15e2c0077ce57c5c904c93cd615fa26073f5a474cbd1a3eb32610c6b591ed32e0571b0aacc6b82baba33abb514aa0c7cb51c34023b0c3de00daf39213e20014ed39695ccda11b8c5129ec980b2dd3b0c8b9c678cacc06d2d61f829aae8bb487cbdd22e127bf72d14fc0f8f594f33553efc29034a7ed040d3998ef3fe131e6dc80b7f38b71389e2fef7eebc0ee4777f00f8d58d30190892ca92ff2d478ca80d7e79ed36eee57f3cf4effa1d3ab0cb042e922e8e0a13998b42bc67786b905da2774c360316a7ff452357fdead2f87d8c8ab2e874449c8b992fc5fbf8b7ccbf98b1989383a492b4ef1f4f11ed7d1e988724c342b44ea1fbe7cc962e0000b584550a4d731e9867e8b54488d14bfc7d48f4574334cfc50d71cc2640d8d8aa1b8f921e2588d7a54fe4dea9907b275845e4f902a2c15d272d9d1a5f461c3a46cdb205d09c239abd1992f0dd7b28393d6a8606c8d642a242fd1ef88850cc91f3509f47bdb89eb252b119972a3c94062c2fecb254a9c109f39d9bb2a9597f385c37f7383e7a602bb8366f365e4e133a974b78f3e9dfa9b57562408385394cda58ce634f4a0ac8fe497299f9085a638bcede6ec1c01696f5cece8c574e367a9b9f04c0ac59f3c7caa32844a994f65223c1b78890c9a25a8eeef8aadf1f56874b5568cef10648f19f48fd070682c4ba8712d11a418fcbe157957a1d054e6dcb353e93fdfed3d631b775dfe07158465b1464464e9cdceed8ad93c48846e88fa80da434dfd40b08cd2f4663edb83f2162ff53f176a3ec6cc1587d17cebc50aff88afede7a534e05775b4f2e0e5abb92fd16e38dbe2487031e183041186a641e1c9eada1e1c31cbba64a2f38797b98d4e499f342f30fcbb35d037e3454f4d98b390f6f4af30ab7c66a6bd65f10566ced05244d064473fd5abe7256c4745f440d874468b74cb7c78075668f871b15a623f2dd9d36097fcad662559b09efb76af0741e748a16eb7fa244b961c5eba1535dc5d3eac25a0fa882f702497379184313fa4046d01540ac38db019278dba9c70e02862fccd7dff9ebc621b8518fc1a971f20213bade88bb7cf2c03d14a701f5487b05f609982c8102544bdb0f5b232dcfcec6b4b1e8c5e902f1ff459319bb9ee66a8b0611c16a96f38d01cbd1fd1d8e3b1a1abc038a384c8fe065fb31f6ddfb728d759997659f1680b9c60d4b15daf0e", 0x1000, 0xfffffffffffffff9) keyctl$instantiate(0xc, r4, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000300)=0x8, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x94, 0x2, [@TCA_MATCHALL_ACT={0x90, 0x2, [@m_ife={0x8c, 0x1, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x800, 0x861168966fa2e5c1, 0xc, 0x2}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x401}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x4, 0xb, 0x6e}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x20, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) 8m57.778360758s ago: executing program 5 (id=6717): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000024c0), 0xff8c, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}]}}) 8m57.288408041s ago: executing program 5 (id=6719): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x40000008) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001c4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)=ANY=[@ANYBLOB="30b02000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xfffffed0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r3, @ANYBLOB="00001000ec252155b21c0012000c000100626f6e0900000000000000000800017ec3"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r10, 0x0, 0xffffffdb) 8m56.556244452s ago: executing program 5 (id=6722): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}, 0x1, 0x2}, 0x0) (fail_nth: 9) 8m55.706808077s ago: executing program 33 (id=6722): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}, 0x1, 0x2}, 0x0) (fail_nth: 9) 25.910872735s ago: executing program 4 (id=9184): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008140)={0x2020, 0x0, 0x0}, 0xfffffffffffffe42) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000003, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r2 = syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x224c43, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x40305828, &(0x7f0000000300)={{0x7f, 0x7}, 0x100, './file0\x00'}) r4 = io_uring_setup(0x800549f, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x2, 0xf2, 0x0, r2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) umount2(&(0x7f00000004c0)='./file0\x00', 0x1) 24.589610471s ago: executing program 4 (id=9186): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="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", 0x424}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', r9, 0x29, 0x0, 0x1, 0x9, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x6, 0xd8}}) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@empty, 0xd, r2}) 23.176506043s ago: executing program 4 (id=9193): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x400000000010, 0x3, 0x0) r2 = syz_io_uring_setup(0x4e4, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$packet(0x11, 0x2, 0x300) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x300, 0x0) 21.411387252s ago: executing program 4 (id=9196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r5 = getpid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8f, 0x0, 0x3}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) r9 = syz_pidfd_open(r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setns(r9, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 21.27578329s ago: executing program 2 (id=9199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) syz_io_uring_setup(0x3a30, &(0x7f0000000400)={0x0, 0x79af, 0x3780, 0x3, 0x40024d}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) eventfd2(0xff, 0x80001) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r11, 0x80000001}, &(0x7f00000000c0)=0x8) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r12, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="71b44d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)='&rc', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="9912f0e9cbeab733511eda1d02de1315e920d416160bb18659215cbba391bacab28be9ff29f59b80fa512b48471e9e3cc61be606db92049580fa6875b6bf756922dc1560c0c1c2c019269867817d8db2cfd69b9041294d5a87db9ddc42d4092603fb4e1a926aeecbc58359880020dcfff1bf3b3d929f79cd4a2624705b13452c56e3f9554d3d5a0d777f134a7e215ee8108f4c19e8bf3f7669cf21a80edc680f975d9a80e1ddf31c6bd3685eda89170ea69add6169e2467caa2438e02061d2ab992656fc9df773185f4c5517c676590d5f141dfef614b35661f62ded6e37209e280e9bf2f85a", 0xe6}, {&(0x7f0000000580)="a6f6ac0aa6510920b3fee7489d909e7365968aa73580182434e2826f87d212eae1cb3fd55ef5219015a0ab8c9e483b6580dc403d5c9734ae4518cc9981f5ced88b44f2acb36acb026fac27fdcd1e2f753521f59e38d6587e0c194fb676946233fdb1ddc73fa350bb8e8988385aab7984a616540d5b2e02b433261414041277482d08f4bfa8c76e308acd920a044f6ddd5ddeb76987e3c9dffd6d3beb1fffb1d593f057b01b47d1b184f317a77f97ed72ea78c33b501ca640b738e262f8b6233074371dfd076cf8a37d96456bfc48d052381a545c0fc81c9355c89ff6ba5378df183a086e857d88d98e6db0bef5657e6042671d1e1b67ed620071085e0ce2199f00d1605629df79bf26e13e9885c8ec467666e8daf772a4a1d25fc2e4dff3eea04dd2617a3aa154a9aa46bd59d0dba9669142ebaae6719b6809f65d81d3cb2e062a0dc07dfaca7672bfb43505e6d97f0540445f6ce304f30cfcf10669df5387a443634138768eef4f49f0be0d0a4caf7bd6839a76da308c1ca646bdd95634c87b62ba2b3d2e2f4519c0e4ad6d3560ce1adae7d3a64a92c79825254d8d5b2f97b4fbfb1a7e846deaa5710102bce688756794085a7a8d30a8927347b430cd17fe6ff0772b9212ecade76a0492693e959366047d5e21f955868a0e6c610aef55d1d0731419451c4a06af32cf95ea1ddec3d3f35d675e517fd2d617e87a273d08b0fc81a04f2ead6880d52140e7712e2e8a277c68e1f8b3c4605a9d19feaa6ced26c7cf8d748e74d4d40e8319dc6d0818d30f021f7dfaa0909df2a11e5e1da526f36fddea4f4abf0470917cbd4dbf7700b89c3e4bace98b95bc6fcc904f7970f44826fced4f05beed25a60be339a3fa7ec6ec3bce0a77b88eb32331cb6046df1d3691471658f96cfbc0a2bc52d25c2292994958a3f887d562de8b328c7e2e6304395a5ecc938711169437444c231bab8ba4cdd6f1995255dcebf6bec1b8795048bb721972cf991dddec371bfb7f0edc479ba585448486c114a0e10e7f19977bb5dec06ff93d07e868851158a17666595c332eae2b7ea029e52a031c6ebab4e9ceb456c44a0d82a6233057c92f8ff9bf2b7b9a7544dba04b53a9370d03a2df28525efe5f9a66e865ab67ddf1e385faf33c405ee224ea8457906829d6231096c081f7eb490a8e0378296a2c5f51dc5383238635d6fb096bb2ac667102841c59a190a0b96e9ea1d5c90455e3510b29d4425d3bbf8de4c74678638ef706cdc81997e81f14bf9d4844180c385d69ef2531218883c7d332c13f6b0764ca991ad3a6275099c4561820f2524cd49e4067916508e3097a9ebe39778c052391284bb6036f3330e83017290fe1442c35e77ccec2c500c492f5b4e9aac9aaf9937dd9d4d643a4c2fe60b181b2b6062e60c6bbed4ff84ad0b8a843a08899b000ab37a62ed295f1102e2ac8a9020d138b9b051f2aa03d5e36495e1ec59bb34fb5a39e7d605d11be9a6b12a0d7ed8cf93b133ca06ce175bcb8637cbdbb5f3dec36754a53ed7450c40cb473fc6a06cf5d409bf96c0d2d758455ea48b169df824bff8115da781a5c341f08d52529b6d4328287b1eaf64a882cb81d224f97559a295ff2fd4fb595c268250a4c01733b1b4c721211e33ad0326af821343c97e9d4b6fed97bc80cca5715f761b2227d8044db99e088e7d94ba6e0ecd70f0301ab870fbba12e8fe1025a500a0667", 0x4c1}, {0x0, 0xb}], 0x3}}, {{&(0x7f0000001a40)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}], 0x4, 0x400c404) 20.845202078s ago: executing program 1 (id=9201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x10, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x1, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0x40405515, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x52b242d) keyctl$invalidate(0x15, r6) r7 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='$\x00', r6) keyctl$link(0x8, r7, r6) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000003c0)={0x7, 0x8, 0xfa9d, {r9, 0x6}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r9, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @private=0xa010101}, @ib={0x1b, 0x4, 0x7, {"49afa32da5cd6c48b5f5182330993ab8"}, 0x7ff, 0xa21, 0x1}}}, 0x118) keyctl$read(0xb, r6, &(0x7f0000000040)=""/117, 0x75) socket(0x2c, 0x8000c, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3], 0x68}}, 0x0) 20.439499851s ago: executing program 1 (id=9202): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1, 0x0, 0x35}}], 0x1, 0x4008000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='ipvlan0\x00', 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080)=0x5, 0x12) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_emit_ethernet(0xc32, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) 20.193736537s ago: executing program 0 (id=9204): r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0x4, 0x3, 0xa4, 0x1000, "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"}}, 0x100c) r1 = syz_io_uring_setup(0x3333, &(0x7f0000001080)={0x0, 0x5113, 0x4, 0x1, 0x348}, &(0x7f0000001100), &(0x7f0000001140)) r2 = syz_io_uring_setup(0x744c, &(0x7f0000001180)={0x0, 0xb1d, 0x1000, 0x2, 0x1d5, 0x0, r1}, &(0x7f0000001200), &(0x7f0000001240)) r3 = eventfd2(0x5, 0x80000) read$eventfd(r3, &(0x7f0000001280), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xd8, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000002600)=[{0x2, 0x1, 0x0, &(0x7f0000002580)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/206, 0xce}], &(0x7f00000025c0)=[0x4, 0x7, 0x495, 0x5]}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000002640)={0x1, 'bond_slave_1\x00', 0x1}, 0x18) openat$dsp1(0xffffff9c, &(0x7f0000002680), 0x8000, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f00000026c0), &(0x7f0000002740)=0x6e, 0x0) connect$unix(r6, &(0x7f0000002780)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r7 = socket(0x2a, 0x3, 0x3) fgetxattr(r7, &(0x7f0000002800)=@random={'os2.', '\x00'}, &(0x7f0000002840)=""/233, 0xe9) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000002940)='virt_wifi0\x00') socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000029c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002a80)={'syztnl2\x00', &(0x7f0000002a00)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0x7, 0x6, 0x4, @mcast2, @loopback, 0x700, 0x10, 0x1200}}) getpeername$packet(r7, &(0x7f0000002ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002b00)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002bc0)={'ip6gre0\x00', &(0x7f0000002b40)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x2, 0xffffffff, 0x1, @remote, @remote, 0x7, 0x20, 0x8, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000002d00)={'tunl0\x00', &(0x7f0000002c00)={'sit0\x00', 0x0, 0x40, 0x8, 0x4, 0x1000, {{0x34, 0x4, 0x3, 0x3e, 0xd0, 0x66, 0x0, 0x56, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x3, [{@local, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4248}, {@remote, 0x9}, {@broadcast, 0x2}, {@local}, {@broadcast, 0x81}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xa5, 0x1, 0xe, [{@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@private=0xa010101, 0x7}, {@multicast2, 0x392}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x5}, {@multicast2, 0x6}]}, @lsrr={0x83, 0x7, 0x32, [@empty]}, @ssrr={0x89, 0x1b, 0xf1, [@rand_addr=0x64010101, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @loopback, @local]}, @rr={0x7, 0xb, 0x9d, [@empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @end, @timestamp={0x44, 0x1c, 0xd8, 0x0, 0x4, [0x8001, 0x5, 0x2e, 0x100, 0x2, 0xc]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002e00)={'tunl0\x00', &(0x7f0000002d40)={'gretap0\x00', 0x0, 0x7800, 0x7, 0x8, 0x200, {{0x1f, 0x4, 0x2, 0x18, 0x7c, 0x66, 0x0, 0x2, 0x4, 0x0, @remote, @remote, {[@cipso={0x86, 0x38, 0x1, [{0x5, 0xd, "d70d243457418d9bb11268"}, {0x1, 0x3, '\b'}, {0x7, 0xa, "a81c282535add1af"}, {0x5, 0x7, "d12fe75fd9"}, {0x0, 0x11, "594190f4900b5236215b449755cdcd"}]}, @generic={0x89, 0x11, "0284460746671c082da19b038d9139"}, @lsrr={0x83, 0x1f, 0xca, [@local, @remote, @local, @multicast1, @loopback, @loopback, @empty]}]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f00000032c0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003280)={&(0x7f0000002e40)=@newtaction={0x408, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0x3f4, 0x1, [@m_simple={0x14c, 0x8, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0x10000000, 0xa, 0x9}}, @TCA_DEF_DATA={0x11, 0x3, '[$\x8b\'$%&(*,+@\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1ff, 0x6, 0x6, 0xd0, 0xffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0xa31e4d25b98e3ffe, 0x7488075f, 0x7fffffff}}]}, {0xc1, 0x6, "daeb2bc6c4d669c98fa98c892dba32084043e93c6e0af1f5ba9d65d578b86a9fbb451a16fab05d6cb328ad60de2d88f576a9a7dd554e9667d7fccec5c389f7fde4eaf9408823efe8a78700121a121ea0fe410ae2e8edbd18683800ffa25c98acd3e467fd3cf4b7dd9c0e8aeb53c42e321932a77cbf6228b0d84797dff940abde1ccb05a9d9a97917b7aa3f9d38ead93cd9893f0e10be3c37b9d36d0e66ee217b989239d14ee0e7658963713399ebe381570e94c38ca3fd5db9fab07b84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x1f4, 0x20, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9, 0x20000000, 0xffffffff, 0xfffffff9}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x2, 0x3, 0xa}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0xffffffffffffffff, 0x200, 0x7}, 0x3, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x4, 0x6, 0x6}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x7fffffff, 0x0, 0xfffffffb, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1f59, 0x6739, 0x5, 0xe, 0xc190}, 0x1, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x101, 0xffffffffffffffff, 0x9}, 0x2, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x48000000, 0x5, 0x4, 0x0, 0x10001}, 0x3}}]}, {0xc7, 0x6, "86b5dcfced8ceb8ae0c1bb2384cfbfc8c125b2dda46211010c07766a8897fcd0630d7c1b1fb7c13b0c30ded6dadecdd4ac1d752d75c56568a68931e3a69caae873fd97a8e6af3b57e5d8f5fb72d7f38e5cddaab9650d7f71fa79dfae589f9b95c0a827cbb5cc81212563455a51274dc68cf10eb3a1af31f069f934b6f20416456c124a37e80d0582a460743e824dcdffe9fa99cbac905bfc0bdb2d95b39a2af4026b373b1fbd02c7dada6b9702f84203bf5a938284a3e714d90bf4d71fb4ec439382db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0xb0, 0x7, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x71e2, 0x8, 0x0, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x4}, @TCA_DEF_PARMS={0x18, 0x2, {0xb, 0xfffffff7, 0x2, 0x3, 0x8001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x800, 0xfffffffffffffff8, 0x3ff, 0x1}}]}, {0x2e, 0x6, "72ad77b3d44e81a79dfe1091c6da45b29db719570e5ec54611cca7b7e462d315d0767bedbd0fa55085a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x6040001}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r15 = openat$ppp(0xffffff9c, &(0x7f0000003300), 0x440000, 0x0) ioctl$PPPIOCATTCHAN(r15, 0x40047438, &(0x7f0000003340)=0x3) 19.271114632s ago: executing program 0 (id=9205): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1, 0x0, 0x35}}], 0x1, 0x4008000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='ipvlan0\x00', 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080)=0x5, 0x12) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_emit_ethernet(0xc32, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb5c, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xc8, 0xec, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xbb8) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) 18.335374469s ago: executing program 0 (id=9206): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x58880000000, 0x300016) 18.335111694s ago: executing program 1 (id=9207): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FIONREAD(r0, 0x541b, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) (async, rerun: 64) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 64) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) faccessat2(r2, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x22, 0x100) (async) read$FUSE(r3, &(0x7f0000001f40)={0x2020}, 0x2020) splice(r1, 0x0, r3, 0x0, 0xffffffe1, 0x0) write$binfmt_format(r2, &(0x7f00000000c0)='0\x00', 0x2) (async) chdir(&(0x7f0000000540)='./cgroup\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 18.253207147s ago: executing program 2 (id=9208): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x1, 0x0) write(r2, &(0x7f00000003c0)='m', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 17.927008468s ago: executing program 0 (id=9209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000006f02"]) 17.914343076s ago: executing program 2 (id=9210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{0x0}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r8 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r8, r9, r8}, &(0x7f0000000440)=""/183, 0xb7, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) read$FUSE(r7, &(0x7f0000004280)={0x2020}, 0x2034) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 17.671616519s ago: executing program 4 (id=9211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r8 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r8, r9, r8}, &(0x7f0000000440)=""/183, 0xb7, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) read$FUSE(r7, &(0x7f0000004280)={0x2020}, 0x2034) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 17.462946626s ago: executing program 1 (id=9212): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="32ad1ab501da7b013dbb7a6d890cc5dc5e66704dcc8d6963592d6aed921820fa87529aa1a11a2225bbd0ded273d451f34735083610c627d9352e292beb4e4654014573c9ac71275f11f80f409b070b9e4abf6a64dfbd37af0809f7aa7564e8ad721ddedc0fae85dffdf05607530d22632ebb57f6ead00103995c82efc1f4769e7cfc67d6a49f716284718c2b7016b49aec38e4b0f253533df0c9e91d3ebc5f935b2feed372eb553805dc04aea91f0000f61f841c44e9bb", 0xb7) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x5, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2daae181fa21b2c3) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) accept4(r1, 0x0, 0x0, 0x0) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad56b642f903c5020000009185b92ef26c8ce07d09d9cedf2a34ec3ea5662702fbf63b31084b8995cd28ca5b76a457c19ff3af02de953584a903670fe239c256e0244c2d448b5eb12937b589229cfae0de594cb6cc3f1d8b326a1f29a4cb5d16cb294ccbb041fd5f822215279c7d390086d3d82aa11185a7fae559d0dc13deeb18889c512134d1a77c7c1a3987045ee054aa9b07dc7b5a87d26bb042e25a26b9f8d5c99c79ce0421af12e4", 0xab) (async) r6 = io_uring_setup(0xaae, &(0x7f0000000100)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, 0x0, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r6, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5e3, &(0x7f0000000340)={0x0, 0xf13, 0x400, 0x0, 0x51, 0x0, r6}, &(0x7f0000000240), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r9, r11, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r1, 0x0, &(0x7f0000000080)="ea3d5b281f7e9240df59631a6cb4adcefe32ac5d4282ccdec29c818584b51674fe3f06da9c69823d2b8d50787294813fe733c4f9582ff772ac7837a9cd9c004782829a3b7dc403ed820980692b212326fc3b9824", 0xfffffe77, 0x4090, 0x1, {0x0, r10}}) sendmsg$alg(r8, 0x0, 0x34000041) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, 0x0, 0x40000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 17.358469876s ago: executing program 6 (id=9213): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x7, 0xc53, 0xd, 0x85, 0x4, 0x32, 0x9, 0x3f8}, &(0x7f0000000300)={0x8, 0x7ff, 0x100000000000000, 0x400, 0x5, 0x0, 0x5118, 0x8}, &(0x7f0000000340)={0x1000, 0x1ff, 0x8, 0x4, 0x4, 0x3, 0xe2, 0x1}, &(0x7f00000003c0)={r10, r11+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x2, 0x6]}, 0x8}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r9, 0xb, 0x1, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) fsetxattr(r9, &(0x7f0000000480)=@random={'system.', 'memory.stat\x00'}, &(0x7f00000004c0)='\x00', 0x1, 0x7) sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="2f040300"/18, @ANYRES32=r14, @ANYBLOB="0a0034000202020202020000040008010400cc00"], 0x30}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x7fa9, 0x0, 0x0, 0x0) 16.236081751s ago: executing program 0 (id=9221): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x103, 0x0, 0x0, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1}, {}, {}]}]}, 0x34}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r9, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000200)={'#! ', '', [{0x20, 'vcan0\x00'}, {0x20, '[.$&,}-'}]}, 0x13) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xb) 16.099195613s ago: executing program 2 (id=9222): io_uring_setup(0x310f, &(0x7f0000000280)={0x0, 0x5f95, 0x80, 0xfffffffe, 0x1f4}) r0 = dup(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r0, 0xce) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x195831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000780), 0x0, 0x4001c00) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4010744d, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0xdc, 0x0, 0x148, 0x0, 0x148, 0x2ec, 0x240, 0x240, 0x2ec, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xbc, 0xdc, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x3, 0x1}}, @inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1f0, 0x210, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@multicast2, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@private=0xa010101, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x4d6, 0x3500, 0x0, 0x0, 0x5, 0xc}, {@ipv4=@broadcast, [0xff000000, 0x0, 0xffffff00, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [0xff, 0xffffff00, 0xffffffff, 0xff], 0x4d4, 0x3503, 0x3eb90a431a3f083c, 0x1, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff000000], @ipv4=@empty, [0x0, 0xffffffff, 0xff, 0xff], 0x4d6, 0x3504, 0x3a, 0x1, 0x8, 0x1c}, {@ipv4=@broadcast, [0xff000000, 0xffffff00, 0xff], @ipv6=@private2, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 0x4d5, 0x34ff, 0x29, 0x1, 0xb, 0x10}], 0x2}}, @common=@addrtype={{0x2c}, {0x400, 0x5, 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x3dc) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x24005044, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, r7, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xc4202, 0x0) 15.941564759s ago: executing program 4 (id=9223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000680003010000000000000000000000000000f6b7e3bffe90467400"/52], 0x34}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r9, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000200)={'#! ', '', [{0x20, 'vcan0\x00'}, {0x20, '[.$&,}-'}]}, 0x13) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {0x0, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xb) 15.888003645s ago: executing program 6 (id=9224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000006f02"]) 15.649301113s ago: executing program 6 (id=9225): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000180)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f0348b00afe740571859a9798152f7ab18000440402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b6996eaa8eaa0073461119663906400f30c0620000000000059b6d3296e8ca31bce1d8392078b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x40, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0xffff, 0x2b, 0x2f, 0x0, @local, @multicast1}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x814) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 15.373311729s ago: executing program 2 (id=9226): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ptrace$pokeuser(0x6, 0x0, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x10, 0x10, 0x9, 0x5, 0x0, 0x0, 0x8, 0xf}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e20}}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x82d92b8cfe1c32b5}, 0x4000080) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0xffffffa8, &(0x7f0000000280)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r2, @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x22) 1.296320119s ago: executing program 34 (id=9218): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (fail_nth: 9) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 241.754288ms ago: executing program 35 (id=9221): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x103, 0x0, 0x0, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1}, {}, {}]}]}, 0x34}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r9, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000200)={'#! ', '', [{0x20, 'vcan0\x00'}, {0x20, '[.$&,}-'}]}, 0x13) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xb) 170.784474ms ago: executing program 36 (id=9226): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ptrace$pokeuser(0x6, 0x0, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x10, 0x10, 0x9, 0x5, 0x0, 0x0, 0x8, 0xf}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e20}}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x82d92b8cfe1c32b5}, 0x4000080) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0xffffffa8, &(0x7f0000000280)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r2, @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x22) 67.73881ms ago: executing program 37 (id=9225): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000180)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f0348b00afe740571859a9798152f7ab18000440402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b6996eaa8eaa0073461119663906400f30c0620000000000059b6d3296e8ca31bce1d8392078b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x40, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0xffff, 0x2b, 0x2f, 0x0, @local, @multicast1}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x814) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 38 (id=9223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000680003010000000000000000000000000000f6b7e3bffe90467400"/52], 0x34}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r9, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000200)={'#! ', '', [{0x20, 'vcan0\x00'}, {0x20, '[.$&,}-'}]}, 0x13) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {0x0, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xb) kernel console output (not intermixed with test programs): 09893][ T1907] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1883.209928][ T1907] ? policy_nodemask+0x27c/0x720 [ 1883.209956][ T1907] alloc_pages_mpol+0x232/0x4a0 [ 1883.209984][ T1907] folio_alloc_mpol_noprof+0x39/0x70 [ 1883.210008][ T1907] shmem_alloc_and_add_folio+0x447/0xf60 [ 1883.210044][ T1907] ? filemap_get_entry+0xad/0x2f0 [ 1883.210067][ T1907] ? filemap_get_entry+0xad/0x2f0 [ 1883.210087][ T1907] ? filemap_get_entry+0xad/0x2f0 [ 1883.210112][ T1907] ? filemap_get_entry+0x28f/0x2f0 [ 1883.210138][ T1907] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1883.210175][ T1907] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 1883.210212][ T1907] shmem_get_folio_gfp+0x59d/0x1660 [ 1883.210265][ T1907] shmem_write_begin+0xf7/0x2b0 [ 1883.210304][ T1907] generic_perform_write+0x2c4/0x910 [ 1883.210347][ T1907] ? __pfx_generic_perform_write+0x10/0x10 [ 1883.210374][ T1907] ? preempt_count_add+0x91/0x1a0 [ 1883.210404][ T1907] ? mnt_put_write_access_file+0xb9/0x100 [ 1883.210434][ T1907] ? file_update_time+0x416/0x490 [ 1883.210467][ T1907] shmem_file_write_iter+0xf8/0x120 [ 1883.210491][ T1907] iter_file_splice_write+0x937/0x1000 [ 1883.210545][ T1907] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1883.210572][ T1907] ? rcu_read_lock_any_held+0xb3/0x120 [ 1883.210619][ T1907] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1883.210640][ T1907] do_splice+0xc79/0x1660 [ 1883.210693][ T1907] ? __pfx_do_splice+0x10/0x10 [ 1883.210728][ T1907] __se_sys_splice+0x2e1/0x460 [ 1883.210760][ T1907] ? __pfx___se_sys_splice+0x10/0x10 [ 1883.210786][ T1907] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1883.210817][ T1907] ? __ia32_sys_splice+0x21/0xf0 [ 1883.210844][ T1907] __do_fast_syscall_32+0xb6/0x2b0 [ 1883.210864][ T1907] ? lockdep_hardirqs_on+0x9c/0x150 [ 1883.210898][ T1907] do_fast_syscall_32+0x34/0x80 [ 1883.210918][ T1907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1883.210942][ T1907] RIP: 0023:0xf70ee539 [ 1883.210961][ T1907] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1883.210981][ T1907] RSP: 002b:00000000f50bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 1883.211004][ T1907] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 1883.211018][ T1907] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 00000000000408cd [ 1883.211030][ T1907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1883.211041][ T1907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1883.211053][ T1907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1883.211087][ T1907] [ 1883.670575][ T1912] netlink: 'syz.4.8903': attribute type 4 has an invalid length. [ 1883.888649][ T1918] usb usb8: usbfs: process 1918 (syz.1.8905) did not claim interface 0 before use [ 1884.323976][ T1926] netlink: 'syz.4.8908': attribute type 14 has an invalid length. [ 1884.365025][T20741] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1884.515411][T20741] usb 3-1: Using ep0 maxpacket: 16 [ 1884.558859][ T1930] FAULT_INJECTION: forcing a failure. [ 1884.558859][ T1930] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.689458][ T1930] CPU: 0 UID: 0 PID: 1930 Comm: syz.1.8910 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1884.689495][ T1930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1884.689507][ T1930] Call Trace: [ 1884.689516][ T1930] [ 1884.689526][ T1930] dump_stack_lvl+0x189/0x250 [ 1884.689569][ T1930] ? __pfx____ratelimit+0x10/0x10 [ 1884.689599][ T1930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1884.689629][ T1930] ? __pfx__printk+0x10/0x10 [ 1884.689658][ T1930] ? __pfx___might_resched+0x10/0x10 [ 1884.689688][ T1930] ? fs_reclaim_acquire+0x7d/0x100 [ 1884.689716][ T1930] should_fail_ex+0x414/0x560 [ 1884.689748][ T1930] should_failslab+0xa8/0x100 [ 1884.689772][ T1930] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1884.689793][ T1930] ? __alloc_skb+0x112/0x2d0 [ 1884.689822][ T1930] __alloc_skb+0x112/0x2d0 [ 1884.689851][ T1930] nexthop_notify+0x368/0x5d0 [ 1884.689884][ T1930] rtm_new_nexthop+0x5924/0x7eb0 [ 1884.689936][ T1930] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 1884.689963][ T1930] ? __lock_acquire+0xab9/0xd20 [ 1884.690004][ T1930] ? __lock_acquire+0xab9/0xd20 [ 1884.690063][ T1930] ? is_bpf_text_address+0x292/0x2b0 [ 1884.690093][ T1930] ? is_bpf_text_address+0x26/0x2b0 [ 1884.690143][ T1930] ? __lock_acquire+0xab9/0xd20 [ 1884.690199][ T1930] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 1884.690227][ T1930] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1884.690255][ T1930] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1884.690276][ T1930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1884.690317][ T1930] netlink_rcv_skb+0x208/0x470 [ 1884.690342][ T1930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1884.690366][ T1930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1884.690405][ T1930] ? netlink_deliver_tap+0x2e/0x1b0 [ 1884.690428][ T1930] ? netlink_deliver_tap+0x2e/0x1b0 [ 1884.690459][ T1930] netlink_unicast+0x75b/0x8d0 [ 1884.690495][ T1930] netlink_sendmsg+0x805/0xb30 [ 1884.690530][ T1930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1884.690565][ T1930] ? __import_iovec+0x5d4/0x7f0 [ 1884.690583][ T1930] ? aa_sock_msg_perm+0x94/0x160 [ 1884.690612][ T1930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1884.690637][ T1930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1884.690662][ T1930] __sock_sendmsg+0x219/0x270 [ 1884.690697][ T1930] ____sys_sendmsg+0x505/0x830 [ 1884.690728][ T1930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1884.690773][ T1930] ___sys_sendmsg+0x21f/0x2a0 [ 1884.690802][ T1930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1884.690869][ T1930] ? __fget_files+0x2a/0x420 [ 1884.690891][ T1930] ? __fget_files+0x3a0/0x420 [ 1884.690926][ T1930] __sys_sendmsg+0x164/0x220 [ 1884.690955][ T1930] ? __pfx___sys_sendmsg+0x10/0x10 [ 1884.690997][ T1930] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1884.691029][ T1930] ? lockdep_hardirqs_on+0x9c/0x150 [ 1884.691062][ T1930] __do_fast_syscall_32+0xb6/0x2b0 [ 1884.691083][ T1930] ? lockdep_hardirqs_on+0x9c/0x150 [ 1884.691118][ T1930] do_fast_syscall_32+0x34/0x80 [ 1884.691138][ T1930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1884.691162][ T1930] RIP: 0023:0xf7fd7539 [ 1884.691181][ T1930] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1884.691198][ T1930] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1884.691221][ T1930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1884.691236][ T1930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1884.691247][ T1930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1884.691259][ T1930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1884.691272][ T1930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1884.691302][ T1930] [ 1885.341150][T20755] usb 7-1: USB disconnect, device number 52 [ 1886.751001][ T1957] netlink: 'syz.6.8918': attribute type 4 has an invalid length. [ 1886.921823][ T1961] netlink: 'syz.4.8919': attribute type 14 has an invalid length. [ 1887.117765][T20741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1887.167120][T20741] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1887.184907][T20741] usb 3-1: can't read configurations, error -71 [ 1887.431673][ T1971] netlink: 'syz.4.8921': attribute type 10 has an invalid length. [ 1887.460220][ T1974] IPv6: NLM_F_CREATE should be specified when creating new route [ 1887.483947][ T1974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1887.491330][ T1974] IPv6: NLM_F_CREATE should be set when creating new route [ 1887.758458][ T1980] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8926'. [ 1888.052472][T26061] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1888.063965][T20741] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1888.144977][ T5912] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1888.235322][T20741] usb 3-1: Using ep0 maxpacket: 32 [ 1888.245503][T20741] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1888.259678][T26061] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1888.270682][T20741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.283974][T26061] usb 2-1: not running at top speed; connect to a high speed hub [ 1888.295763][T20741] usb 3-1: config 0 descriptor?? [ 1888.305008][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 1888.315208][T26061] usb 2-1: config 5 has an invalid interface number: 44 but max is 1 [ 1888.323381][T26061] usb 2-1: config 5 has no interface number 1 [ 1888.338644][T26061] usb 2-1: config 5 interface 44 has no altsetting 0 [ 1888.346133][T26061] usb 2-1: config 5 interface 0 has no altsetting 0 [ 1888.353007][ T5912] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 1888.362804][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.380351][T26061] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 1888.403574][ T5912] usb 7-1: config 0 descriptor?? [ 1888.408694][T26061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.417277][T26061] usb 2-1: Product: syz [ 1888.422137][T26061] usb 2-1: Manufacturer: syz [ 1888.429041][ T5912] usb 7-1: invalid MIDI EP [ 1888.438833][T26061] usb 2-1: SerialNumber: syz [ 1888.447731][ T5912] usb 7-1: snd-bcd2000: error during probing [ 1888.459918][ T5912] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1888.503645][T20741] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1888.515256][T20741] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1888.537964][T20741] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1888.545838][T20741] usb 3-1: media controller created [ 1888.555057][T20747] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1888.574506][T20741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1888.628917][ T5912] usb 7-1: USB disconnect, device number 53 [ 1888.716799][ T1978] syz.2.8925: attempt to access beyond end of device [ 1888.716799][ T1978] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1888.734655][T26061] usb 2-1: bad CDC descriptors [ 1888.739906][T20741] az6027: usb out operation failed. (-71) [ 1888.745805][T20747] usb 5-1: Using ep0 maxpacket: 8 [ 1888.758198][T26061] usb 2-1: USB disconnect, device number 118 [ 1888.762438][T20747] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1888.764956][T20741] az6027: usb out operation failed. (-71) [ 1888.797070][T20747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.799979][T20741] stb0899_attach: Driver disabled by Kconfig [ 1888.811223][T20747] usb 5-1: Product: syz [ 1888.812997][T20741] az6027: no front-end attached [ 1888.812997][T20741] [ 1888.818444][T20747] usb 5-1: Manufacturer: syz [ 1888.833884][T20741] az6027: usb out operation failed. (-71) [ 1888.840157][T20741] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1888.841060][T26241] udevd[26241]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.44/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1888.866231][T20741] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input168 [ 1888.870758][T20747] usb 5-1: SerialNumber: syz [ 1888.893976][T20741] dvb-usb: schedule remote query interval to 400 msecs. [ 1888.911903][T20741] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1888.916112][T20747] usb 5-1: config 0 descriptor?? [ 1888.938528][T20741] usb 3-1: USB disconnect, device number 11 [ 1888.961072][T20747] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1889.033525][T20741] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1889.140101][ T1995] netlink: 'syz.0.8932': attribute type 14 has an invalid length. [ 1889.575038][ T2003] FAULT_INJECTION: forcing a failure. [ 1889.575038][ T2003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1889.614858][ T2003] CPU: 0 UID: 0 PID: 2003 Comm: syz.2.8936 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1889.614891][ T2003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1889.614904][ T2003] Call Trace: [ 1889.614913][ T2003] [ 1889.614922][ T2003] dump_stack_lvl+0x189/0x250 [ 1889.614964][ T2003] ? __pfx____ratelimit+0x10/0x10 [ 1889.614995][ T2003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1889.615026][ T2003] ? __pfx__printk+0x10/0x10 [ 1889.615064][ T2003] should_fail_ex+0x414/0x560 [ 1889.615097][ T2003] _copy_to_user+0x31/0xb0 [ 1889.615120][ T2003] simple_read_from_buffer+0xe1/0x170 [ 1889.615147][ T2003] proc_fail_nth_read+0x1df/0x250 [ 1889.615175][ T2003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1889.615201][ T2003] ? rw_verify_area+0x258/0x650 [ 1889.615228][ T2003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1889.615253][ T2003] vfs_read+0x200/0x980 [ 1889.615286][ T2003] ? __pfx___mutex_lock+0x10/0x10 [ 1889.615307][ T2003] ? __pfx_vfs_read+0x10/0x10 [ 1889.615336][ T2003] ? __fget_files+0x2a/0x420 [ 1889.615364][ T2003] ? __fget_files+0x3a0/0x420 [ 1889.615384][ T2003] ? __fget_files+0x2a/0x420 [ 1889.615414][ T2003] ksys_read+0x145/0x250 [ 1889.615431][ T2003] ? __pfx_ksys_read+0x10/0x10 [ 1889.615458][ T2003] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1889.615484][ T2003] ? lockdep_hardirqs_on+0x9c/0x150 [ 1889.615529][ T2003] __do_fast_syscall_32+0xb6/0x2b0 [ 1889.615547][ T2003] ? lockdep_hardirqs_on+0x9c/0x150 [ 1889.615575][ T2003] do_fast_syscall_32+0x34/0x80 [ 1889.615590][ T2003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1889.615610][ T2003] RIP: 0023:0xf70ee539 [ 1889.615625][ T2003] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1889.615639][ T2003] RSP: 002b:00000000f50de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1889.615659][ T2003] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50de620 [ 1889.615671][ T2003] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 1889.615681][ T2003] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1889.615690][ T2003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1889.615699][ T2003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1889.615724][ T2003] [ 1889.868631][ T2007] netlink: 'syz.0.8938': attribute type 4 has an invalid length. [ 1890.148985][ T2010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8939'. [ 1890.705031][ T2025] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1891.022255][ T2030] netlink: 'syz.0.8945': attribute type 14 has an invalid length. [ 1891.278575][ T2041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8949'. [ 1891.332319][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8949'. [ 1891.505272][T20747] gspca_sonixj: reg_w1 err -110 [ 1891.545154][T20747] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1891.584948][T20741] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1891.625233][ T2049] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8951'. [ 1891.719523][ T2051] netlink: 'syz.6.8952': attribute type 4 has an invalid length. [ 1891.765071][T20741] usb 2-1: Using ep0 maxpacket: 8 [ 1891.782460][T20741] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1891.792845][T20741] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1891.802301][T20741] usb 2-1: Product: syz [ 1891.807332][T20741] usb 2-1: Manufacturer: syz [ 1891.812968][T20741] usb 2-1: SerialNumber: syz [ 1891.824355][T20741] usb 2-1: config 0 descriptor?? [ 1891.840830][T20741] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1892.244168][T20741] gspca_zc3xx: reg_r err -71 [ 1892.260898][T20741] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1892.283110][T20741] usb 2-1: USB disconnect, device number 119 [ 1892.429598][T26061] usb 5-1: USB disconnect, device number 29 [ 1892.876596][T26061] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1892.917842][ T2068] netlink: 'syz.1.8957': attribute type 14 has an invalid length. [ 1893.047387][T26061] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1893.065170][T26061] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1893.084949][T26061] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1893.094173][T26061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.112453][ T2061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1893.136919][T26061] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1893.366446][T26061] usb 5-1: USB disconnect, device number 30 [ 1894.071570][ T2089] netlink: 'syz.4.8963': attribute type 4 has an invalid length. [ 1895.071691][ T2109] netlink: 'syz.2.8969': attribute type 14 has an invalid length. [ 1895.585447][T26061] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1895.748973][T26061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.777457][T26061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.788226][T26061] usb 7-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.00 [ 1895.799785][T26061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.812362][T26061] usb 7-1: config 0 descriptor?? [ 1895.834997][ T5912] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1895.996914][ T5912] usb 5-1: not running at top speed; connect to a high speed hub [ 1896.024717][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.046457][ T5912] usb 5-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1896.064326][ T5912] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1896.079145][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1896.095133][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.108564][ T5912] usb 5-1: Product: syz [ 1896.113926][ T5912] usb 5-1: Manufacturer: syz [ 1896.121153][ T5912] usb 5-1: SerialNumber: syz [ 1896.383163][ T5912] usb 5-1: bad CDC descriptors [ 1896.440341][ T5912] usb 5-1: USB disconnect, device number 31 [ 1896.603527][T26061] usbhid 7-1:0.0: can't add hid device: -71 [ 1896.635592][T26061] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1896.713417][T26061] usb 7-1: USB disconnect, device number 54 [ 1897.795000][ T5912] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1897.956119][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 1897.986591][ T5912] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1898.014343][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1898.045264][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1898.074842][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 1898.099671][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1898.123459][ T5912] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1898.139257][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.157802][ T5912] usb 3-1: Product: syz [ 1898.165280][ T5912] usb 3-1: Manufacturer: syz [ 1898.205965][ T5912] usb 3-1: SerialNumber: syz [ 1898.230618][ T5912] usb 3-1: config 0 descriptor?? [ 1898.242867][ T2144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1898.258920][ T2144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1898.489977][T31229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.519324][T20890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1898.533681][T20890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1898.545646][T20890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1898.558028][T20890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1898.566170][T20890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1898.600936][ T5912] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 1898.601055][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1898.614327][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1898.620517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1898.647944][T20747] usb 3-1: USB disconnect, device number 12 [ 1898.665747][T20747] mcba_usb 3-1:0.0 can0: device disconnected [ 1898.690883][T31229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.728813][ T2149] netlink: 'syz.6.8983': attribute type 14 has an invalid length. [ 1898.852343][T31229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.990450][T31229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.211143][ T2163] netlink: 'syz.1.8985': attribute type 4 has an invalid length. [ 1899.211700][ T2164] FAULT_INJECTION: forcing a failure. [ 1899.211700][ T2164] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.234089][ T2164] CPU: 1 UID: 0 PID: 2164 Comm: syz.6.8986 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1899.234119][ T2164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1899.234131][ T2164] Call Trace: [ 1899.234140][ T2164] [ 1899.234149][ T2164] dump_stack_lvl+0x189/0x250 [ 1899.234185][ T2164] ? __pfx____ratelimit+0x10/0x10 [ 1899.234216][ T2164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1899.234246][ T2164] ? __pfx__printk+0x10/0x10 [ 1899.234272][ T2164] ? __pfx___might_resched+0x10/0x10 [ 1899.234301][ T2164] ? fs_reclaim_acquire+0x7d/0x100 [ 1899.234330][ T2164] should_fail_ex+0x414/0x560 [ 1899.234363][ T2164] should_failslab+0xa8/0x100 [ 1899.234387][ T2164] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1899.234407][ T2164] ? __alloc_skb+0x112/0x2d0 [ 1899.234437][ T2164] __alloc_skb+0x112/0x2d0 [ 1899.234461][ T2164] alloc_skb_with_frags+0xca/0x890 [ 1899.234483][ T2164] ? get_page_from_freelist+0x21e4/0x22c0 [ 1899.234512][ T2164] sock_alloc_send_pskb+0x857/0x990 [ 1899.234559][ T2164] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1899.234587][ T2164] ? dev_get_by_index+0x22/0x2e0 [ 1899.234611][ T2164] ? dev_get_by_index+0x22/0x2e0 [ 1899.234640][ T2164] packet_sendmsg+0x3672/0x53f0 [ 1899.234674][ T2164] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1899.234710][ T2164] ? __pfx___might_resched+0x10/0x10 [ 1899.234740][ T2164] ? __lock_acquire+0xab9/0xd20 [ 1899.234780][ T2164] ? __pfx_packet_sendmsg+0x10/0x10 [ 1899.234804][ T2164] ? aa_sk_perm+0x81e/0x950 [ 1899.234834][ T2164] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1899.234870][ T2164] ? aa_sock_msg_perm+0x94/0x160 [ 1899.234897][ T2164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1899.234921][ T2164] ? __pfx_packet_sendmsg+0x10/0x10 [ 1899.234949][ T2164] __sock_sendmsg+0x219/0x270 [ 1899.234983][ T2164] __sys_sendto+0x3bd/0x520 [ 1899.235010][ T2164] ? __pfx___sys_sendto+0x10/0x10 [ 1899.235032][ T2164] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1899.235066][ T2164] ? __fget_files+0x3a0/0x420 [ 1899.235100][ T2164] ? ksys_write+0x22a/0x250 [ 1899.235128][ T2164] __ia32_sys_sendto+0xdd/0x100 [ 1899.235153][ T2164] __do_fast_syscall_32+0xb6/0x2b0 [ 1899.235170][ T2164] ? lockdep_hardirqs_on+0x9c/0x150 [ 1899.235198][ T2164] do_fast_syscall_32+0x34/0x80 [ 1899.235214][ T2164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1899.235234][ T2164] RIP: 0023:0xf704e539 [ 1899.235249][ T2164] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1899.235264][ T2164] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1899.235283][ T2164] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1899.235295][ T2164] RDX: 0000000000000004 RSI: 0000000020008040 RDI: 0000000080000040 [ 1899.235305][ T2164] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1899.235315][ T2164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1899.235325][ T2164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1899.235349][ T2164] [ 1899.531571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1899.582430][ T2165] syz.0.8976: attempt to access beyond end of device [ 1899.582430][ T2165] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1900.335889][T20747] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1900.515143][T20747] usb 7-1: Using ep0 maxpacket: 32 [ 1900.527311][T20747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1900.538947][T20747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1900.554979][T20747] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1900.570271][T20747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 1900.591466][T20747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 1900.609120][T20747] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1900.642459][T20747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.647985][T20890] Bluetooth: hci2: command tx timeout [ 1900.663305][T20747] usb 7-1: Product: syz [ 1900.672173][T20747] usb 7-1: Manufacturer: syz [ 1900.703845][T20747] usb 7-1: SerialNumber: syz [ 1900.758335][T20747] usb 7-1: config 0 descriptor?? [ 1900.784303][ T2173] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1900.810657][T20747] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input171 [ 1900.845522][ T5190] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1900.924624][ T5190] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1900.984562][ T5190] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1901.070552][ T5190] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1901.071655][ T2173] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8987'. [ 1901.108717][T26247] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1901.155875][ T5190] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1901.236104][ T2180] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1901.253241][ T5190] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1901.267815][ T2182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8991'. [ 1901.357105][T31229] bond0 (unregistering): Released all slaves [ 1901.376038][ T2155] chnl_net:caif_netlink_parms(): no params data found [ 1901.450099][ T5912] usb 7-1: USB disconnect, device number 55 [ 1901.595356][T20741] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1901.780281][T20741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1901.853124][T20741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1901.885991][T20741] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1901.895516][T20741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.932370][T20741] usb 3-1: config 0 descriptor?? [ 1901.984554][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.997497][ T2155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.012132][ T2155] bridge_slave_0: entered allmulticast mode [ 1902.031384][ T2155] bridge_slave_0: entered promiscuous mode [ 1902.068780][ T2192] netlink: 'syz.1.8993': attribute type 14 has an invalid length. [ 1902.088572][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.109469][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.123132][ T2155] bridge_slave_1: entered allmulticast mode [ 1902.132114][ T2155] bridge_slave_1: entered promiscuous mode [ 1902.406568][T20741] holtek 0003:1241:5015.004F: item fetching failed at offset 1/5 [ 1902.416313][T20741] holtek 0003:1241:5015.004F: parse failed [ 1902.422312][T20741] holtek 0003:1241:5015.004F: probe with driver holtek failed with error -22 [ 1902.493253][ T2155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1902.542503][ T2155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1902.630692][T20741] usb 3-1: USB disconnect, device number 13 [ 1902.698350][T20890] Bluetooth: hci2: command tx timeout [ 1903.093624][ T2219] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9000'. [ 1903.288925][ T2155] team0: Port device team_slave_0 added [ 1903.400215][ T2155] team0: Port device team_slave_1 added [ 1903.501843][ T2233] netlink: 'syz.1.9002': attribute type 4 has an invalid length. [ 1903.524694][T31229] hsr_slave_0: left promiscuous mode [ 1903.550246][T31229] hsr_slave_1: left promiscuous mode [ 1904.458981][ T2245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9003'. [ 1904.775103][T20890] Bluetooth: hci2: command tx timeout [ 1905.637731][ T2155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1905.644816][ T2155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1905.672861][ T2155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1905.743930][ T2155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1905.755763][ T2155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1905.783921][ T2155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.068099][ T2155] hsr_slave_0: entered promiscuous mode [ 1906.118735][ T2155] hsr_slave_1: entered promiscuous mode [ 1906.178560][T26061] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1906.283093][ T2258] IPv6: NLM_F_CREATE should be specified when creating new route [ 1906.311441][ T2255] netlink: 'syz.0.9006': attribute type 14 has an invalid length. [ 1906.359301][T26061] usb 3-1: device descriptor read/64, error -71 [ 1906.502145][ T2262] FAULT_INJECTION: forcing a failure. [ 1906.502145][ T2262] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.533645][ T2262] CPU: 0 UID: 0 PID: 2262 Comm: syz.6.9008 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1906.533677][ T2262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1906.533689][ T2262] Call Trace: [ 1906.533698][ T2262] [ 1906.533707][ T2262] dump_stack_lvl+0x189/0x250 [ 1906.533743][ T2262] ? __pfx____ratelimit+0x10/0x10 [ 1906.533774][ T2262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1906.533805][ T2262] ? __pfx__printk+0x10/0x10 [ 1906.533843][ T2262] should_fail_ex+0x414/0x560 [ 1906.533876][ T2262] should_failslab+0xa8/0x100 [ 1906.533900][ T2262] __kmalloc_cache_noprof+0x70/0x3d0 [ 1906.533921][ T2262] ? sctp_add_bind_addr+0x8c/0x370 [ 1906.533948][ T2262] sctp_add_bind_addr+0x8c/0x370 [ 1906.533975][ T2262] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1906.534000][ T2262] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1906.534021][ T2262] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1906.534045][ T2262] ? sctp_v6_is_any+0x64/0x80 [ 1906.534070][ T2262] ? sctp_copy_one_addr+0x93/0x360 [ 1906.534095][ T2262] sctp_bind_addr_copy+0xb3/0x3c0 [ 1906.534118][ T2262] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1906.534152][ T2262] sctp_connect_new_asoc+0x2e0/0x690 [ 1906.534182][ T2262] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1906.534206][ T2262] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1906.534244][ T2262] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1906.534271][ T2262] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1906.534297][ T2262] sctp_sendmsg+0x155c/0x2810 [ 1906.534337][ T2262] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1906.534367][ T2262] ? aa_sk_perm+0x81e/0x950 [ 1906.534397][ T2262] ? __pfx_aa_sk_perm+0x10/0x10 [ 1906.534426][ T2262] ? sock_rps_record_flow+0x19/0x410 [ 1906.534450][ T2262] ? inet_sendmsg+0x2f4/0x370 [ 1906.534475][ T2262] __sock_sendmsg+0x19c/0x270 [ 1906.534521][ T2262] __sys_sendto+0x3bd/0x520 [ 1906.534549][ T2262] ? __pfx___sys_sendto+0x10/0x10 [ 1906.534569][ T2262] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1906.534605][ T2262] ? __fget_files+0x3a0/0x420 [ 1906.534646][ T2262] ? ksys_write+0x22a/0x250 [ 1906.534678][ T2262] __ia32_sys_sendto+0xdd/0x100 [ 1906.534705][ T2262] __do_fast_syscall_32+0xb6/0x2b0 [ 1906.534727][ T2262] ? lockdep_hardirqs_on+0x9c/0x150 [ 1906.534759][ T2262] do_fast_syscall_32+0x34/0x80 [ 1906.534779][ T2262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1906.534803][ T2262] RIP: 0023:0xf704e539 [ 1906.534822][ T2262] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1906.534839][ T2262] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1906.534863][ T2262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 1906.534878][ T2262] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 1906.534891][ T2262] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1906.534903][ T2262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1906.534914][ T2262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1906.534946][ T2262] [ 1906.625185][T26061] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1906.905161][T20890] Bluetooth: hci2: command tx timeout [ 1906.965066][ T2275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9011'. [ 1907.065125][T26061] usb 3-1: device descriptor read/64, error -71 [ 1907.206297][T26061] usb usb3-port1: attempt power cycle [ 1907.529744][ T2290] netlink: 'syz.0.9014': attribute type 4 has an invalid length. [ 1907.564983][T26061] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1907.628166][T26061] usb 3-1: device descriptor read/8, error -71 [ 1907.874899][T26061] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1907.939135][T26061] usb 3-1: device descriptor read/8, error -71 [ 1908.065710][T26061] usb usb3-port1: unable to enumerate USB device [ 1908.295188][T20755] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1908.400344][ T2155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1908.431564][ T2155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1908.475692][T20755] usb 7-1: Using ep0 maxpacket: 32 [ 1908.502741][ T2155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1908.525363][T20755] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1908.546841][ T2155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1908.554197][T20755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.586697][T20755] usb 7-1: config 0 descriptor?? [ 1908.817073][T20755] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1908.852169][T20755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1908.895949][T20755] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1908.913387][ T2155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1908.942405][T20755] usb 7-1: media controller created [ 1909.029566][ T2300] syz.6.9016: attempt to access beyond end of device [ 1909.029566][ T2300] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1909.053058][ T2155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1909.102964][T20755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1909.128215][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.135494][T10273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1909.190405][T10273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.197708][T10273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1909.212489][T20755] az6027: usb out operation failed. (-71) [ 1909.256176][T20755] az6027: usb out operation failed. (-71) [ 1909.261929][T20755] stb0899_attach: Driver disabled by Kconfig [ 1909.275654][ T2329] FAULT_INJECTION: forcing a failure. [ 1909.275654][ T2329] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1909.288684][T20755] az6027: no front-end attached [ 1909.288684][T20755] [ 1909.297303][T20755] az6027: usb out operation failed. (-71) [ 1909.303369][T20755] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1909.326360][T20755] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input172 [ 1909.355625][ T2329] CPU: 0 UID: 0 PID: 2329 Comm: syz.0.9019 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1909.355656][ T2329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1909.355668][ T2329] Call Trace: [ 1909.355677][ T2329] [ 1909.355686][ T2329] dump_stack_lvl+0x189/0x250 [ 1909.355732][ T2329] ? __pfx____ratelimit+0x10/0x10 [ 1909.355761][ T2329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1909.355789][ T2329] ? __pfx__printk+0x10/0x10 [ 1909.355825][ T2329] should_fail_ex+0x414/0x560 [ 1909.355854][ T2329] get_futex_key+0xf21/0x16c0 [ 1909.355874][ T2329] ? __pfx_get_futex_key+0x10/0x10 [ 1909.355886][ T2329] ? __hrtimer_setup+0x187/0x210 [ 1909.355902][ T2329] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1909.355923][ T2329] futex_wait_requeue_pi+0x221/0x850 [ 1909.355938][ T2329] ? _parse_integer_limit+0x1ae/0x1f0 [ 1909.355957][ T2329] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 1909.355975][ T2329] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1909.356000][ T2329] ? __lock_acquire+0xab9/0xd20 [ 1909.356019][ T2329] ? __pfx_futex_wake_mark+0x10/0x10 [ 1909.356048][ T2329] do_futex+0x181/0x420 [ 1909.356065][ T2329] ? __pfx_do_futex+0x10/0x10 [ 1909.356083][ T2329] __se_sys_futex_time32+0x360/0x3e0 [ 1909.356103][ T2329] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1909.356121][ T2329] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1909.356141][ T2329] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1909.356157][ T2329] __do_fast_syscall_32+0xb6/0x2b0 [ 1909.356170][ T2329] ? lockdep_hardirqs_on+0x9c/0x150 [ 1909.356190][ T2329] do_fast_syscall_32+0x34/0x80 [ 1909.356202][ T2329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1909.356216][ T2329] RIP: 0023:0xf7fd4539 [ 1909.356228][ T2329] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1909.356239][ T2329] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1909.356255][ T2329] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 000000000000000b [ 1909.356263][ T2329] RDX: 0000000000000004 RSI: 000000008000b000 RDI: 0000000080048000 [ 1909.356272][ T2329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1909.356279][ T2329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1909.356286][ T2329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1909.356304][ T2329] [ 1909.364523][T20755] dvb-usb: schedule remote query interval to 400 msecs. [ 1910.032886][T20755] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1910.049019][T20755] usb 7-1: USB disconnect, device number 56 [ 1910.234307][T20755] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1910.255815][ T2155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1910.349272][ T2340] netlink: 'syz.2.9021': attribute type 14 has an invalid length. [ 1910.369809][ T2343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9023'. [ 1910.482246][ T2155] veth0_vlan: entered promiscuous mode [ 1910.519266][ T2155] veth1_vlan: entered promiscuous mode [ 1910.679099][ T2155] veth0_macvtap: entered promiscuous mode [ 1910.723736][ T2155] veth1_macvtap: entered promiscuous mode [ 1910.761422][ T2355] FAULT_INJECTION: forcing a failure. [ 1910.761422][ T2355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1910.822097][ T2155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1910.841637][ T2355] CPU: 1 UID: 0 PID: 2355 Comm: syz.2.9026 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1910.841669][ T2355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1910.841681][ T2355] Call Trace: [ 1910.841691][ T2355] [ 1910.841700][ T2355] dump_stack_lvl+0x189/0x250 [ 1910.841737][ T2355] ? __pfx____ratelimit+0x10/0x10 [ 1910.841769][ T2355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1910.841799][ T2355] ? __pfx__printk+0x10/0x10 [ 1910.841822][ T2355] ? __might_fault+0xb0/0x130 [ 1910.841853][ T2355] should_fail_ex+0x414/0x560 [ 1910.841885][ T2355] _copy_from_user+0x2d/0xb0 [ 1910.841907][ T2355] arp_ioctl+0x138/0x450 [ 1910.841930][ T2355] ? __pfx_arp_ioctl+0x10/0x10 [ 1910.841958][ T2355] ? do_vfs_ioctl+0xf37/0x1990 [ 1910.841994][ T2355] inet_ioctl+0x36e/0x4c0 [ 1910.842020][ T2355] ? __pfx_inet_ioctl+0x10/0x10 [ 1910.842061][ T2355] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1910.842086][ T2355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1910.842111][ T2355] ? inet_compat_ioctl+0x1aa/0x3a0 [ 1910.842135][ T2355] sock_do_ioctl+0xd9/0x300 [ 1910.842168][ T2355] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1910.842198][ T2355] ? __lock_acquire+0xab9/0xd20 [ 1910.842240][ T2355] compat_sock_ioctl+0xb8d/0xc80 [ 1910.842277][ T2355] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1910.842309][ T2355] ? __fget_files+0x3a0/0x420 [ 1910.842331][ T2355] ? __fget_files+0x2a/0x420 [ 1910.842357][ T2355] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1910.842391][ T2355] __ia32_compat_sys_ioctl+0x540/0x840 [ 1910.842431][ T2355] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1910.842462][ T2355] ? __fget_files+0x3a0/0x420 [ 1910.842490][ T2355] ? fput+0xa0/0xd0 [ 1910.842515][ T2355] ? ksys_write+0x22a/0x250 [ 1910.842543][ T2355] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1910.842575][ T2355] ? lockdep_hardirqs_on+0x9c/0x150 [ 1910.842606][ T2355] __do_fast_syscall_32+0xb6/0x2b0 [ 1910.842629][ T2355] ? lockdep_hardirqs_on+0x9c/0x150 [ 1910.842668][ T2355] do_fast_syscall_32+0x34/0x80 [ 1910.842688][ T2355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1910.842711][ T2355] RIP: 0023:0xf70ee539 [ 1910.842729][ T2355] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1910.842746][ T2355] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1910.842770][ T2355] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008953 [ 1910.842786][ T2355] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1910.842798][ T2355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1910.842810][ T2355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1910.842823][ T2355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1910.842855][ T2355] [ 1911.118027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.141129][ T2155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1911.153250][ T2155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.162353][ T2155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.171172][ T2155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.184597][ T2155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.245161][ T2358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9025'. [ 1911.259368][ T2358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9025'. [ 1911.615254][ T2364] netlink: 'syz.2.9027': attribute type 1 has an invalid length. [ 1911.832627][ T2376] netlink: 'syz.6.9028': attribute type 4 has an invalid length. [ 1912.351663][ T2364] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1912.451338][ T2370] bond3: (slave syz_tun): making interface the new active one [ 1912.527417][ T2370] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 1912.955476][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.989086][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.137626][T31228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.160470][T31228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.434226][ T2407] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9033'. [ 1913.435133][T26061] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1913.627765][T26061] usb 3-1: config 0 has no interfaces? [ 1913.660813][T26061] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1913.689509][T26061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.720666][T26061] usb 3-1: config 0 descriptor?? [ 1914.127573][T20755] usb 3-1: USB disconnect, device number 18 [ 1914.643521][ T2426] netlink: 'syz.4.9036': attribute type 14 has an invalid length. [ 1914.861940][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.868480][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.214406][T15829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1915.263188][T15829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1915.276411][T15829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1915.292388][T15829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1915.302962][T15829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1916.419844][ T2438] chnl_net:caif_netlink_parms(): no params data found [ 1916.720079][T26061] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1916.800346][ T2472] netlink: 'syz.0.9044': attribute type 4 has an invalid length. [ 1916.910552][T26061] usb 5-1: Using ep0 maxpacket: 32 [ 1917.132791][T26061] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1917.287517][T26061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.335282][T15829] Bluetooth: hci0: command tx timeout [ 1917.438604][T26061] usb 5-1: config 0 descriptor?? [ 1917.650693][T26061] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1917.701179][ T2438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.709528][T26061] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1917.722709][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.725599][T26061] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1917.745465][ T2438] bridge_slave_0: entered allmulticast mode [ 1917.748424][T26061] usb 5-1: media controller created [ 1917.762470][ T2438] bridge_slave_0: entered promiscuous mode [ 1917.796327][ T2438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.798806][T26061] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1917.803498][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.858688][ T2461] syz.4.9042: attempt to access beyond end of device [ 1917.858688][ T2461] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1917.906531][T26061] az6027: usb out operation failed. (-71) [ 1917.921090][T26061] az6027: usb out operation failed. (-71) [ 1917.934458][T26061] stb0899_attach: Driver disabled by Kconfig [ 1917.951402][ T2438] bridge_slave_1: entered allmulticast mode [ 1917.968572][T26061] az6027: no front-end attached [ 1917.968572][T26061] [ 1917.991638][ T2438] bridge_slave_1: entered promiscuous mode [ 1917.996606][T26061] az6027: usb out operation failed. (-71) [ 1918.019365][T26061] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1918.062953][T26061] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input173 [ 1918.108640][T26061] dvb-usb: schedule remote query interval to 400 msecs. [ 1918.137425][T26061] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1918.170489][T26061] usb 5-1: USB disconnect, device number 32 [ 1918.501473][ T2484] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1918.721603][T26061] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1918.762711][ T2438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.791094][ T2438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1918.889044][ T2438] team0: Port device team_slave_0 added [ 1918.940875][ T2438] team0: Port device team_slave_1 added [ 1919.045855][ T2497] netlink: 'syz.4.9048': attribute type 14 has an invalid length. [ 1919.090583][ T2497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9048'. [ 1919.111648][ T2438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1919.130575][ T2438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1919.194881][ T2438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1919.219789][ T2438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1919.237599][ T2438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1919.288458][ T2438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1919.387442][ T2438] hsr_slave_0: entered promiscuous mode [ 1919.402238][ T2438] hsr_slave_1: entered promiscuous mode [ 1919.415224][T15829] Bluetooth: hci0: command tx timeout [ 1919.422602][ T2438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1919.436873][ T2438] Cannot create hsr debugfs directory [ 1919.485362][T26061] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1919.647618][T26061] usb 5-1: Using ep0 maxpacket: 32 [ 1919.671133][T26061] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1919.695046][T26061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.734240][T26061] usb 5-1: config 0 descriptor?? [ 1919.964349][T26061] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1920.017218][T26061] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1920.044133][T26061] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1920.105932][T26061] usb 5-1: media controller created [ 1920.141852][T26061] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1920.184185][ T2501] syz.4.9049: attempt to access beyond end of device [ 1920.184185][ T2501] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1920.356718][T26061] az6027: usb out operation failed. (-71) [ 1920.370213][ T2509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1920.390620][T26061] az6027: usb out operation failed. (-71) [ 1920.419900][T26061] stb0899_attach: Driver disabled by Kconfig [ 1920.443874][T26061] az6027: no front-end attached [ 1920.443874][T26061] [ 1920.465440][T26061] az6027: usb out operation failed. (-71) [ 1920.471251][T26061] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1920.529342][T26061] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input174 [ 1920.575440][T26061] dvb-usb: schedule remote query interval to 400 msecs. [ 1920.602159][T26061] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1920.651517][T26061] usb 5-1: USB disconnect, device number 33 [ 1920.841613][T26061] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1921.495062][T15829] Bluetooth: hci0: command tx timeout [ 1921.559453][ T2547] netlink: 'syz.0.9058': attribute type 14 has an invalid length. [ 1921.639456][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9058'. [ 1921.679243][ T2438] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1921.705692][ T2438] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1921.782602][ T2438] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1921.815773][ T2438] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1922.092441][ T2556] macvlan2: entered promiscuous mode [ 1922.126258][ T2556] bond0: entered promiscuous mode [ 1922.131863][ T2556] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1922.771873][ T2438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1922.879773][ T2438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1922.932552][T31227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.939842][T31227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.028454][T31227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.035729][T31227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.213657][ T2438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1923.359656][ T2438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1923.552456][ T2438] veth0_vlan: entered promiscuous mode [ 1923.575134][T15829] Bluetooth: hci0: command tx timeout [ 1923.675687][ T2438] veth1_vlan: entered promiscuous mode [ 1923.781742][ T2438] veth0_macvtap: entered promiscuous mode [ 1923.815399][ T2438] veth1_macvtap: entered promiscuous mode [ 1923.933181][ T2438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1923.970497][ T2438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1924.032135][ T2438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.053387][ T2438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.082267][ T2438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.101363][ T2438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.477137][ T2614] fuse: Bad value for 'user_id' [ 1924.486148][ T2614] fuse: Bad value for 'user_id' [ 1924.502381][T31228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1924.532008][ T2614] FAULT_INJECTION: forcing a failure. [ 1924.532008][ T2614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1924.555156][ T2614] CPU: 0 UID: 0 PID: 2614 Comm: syz.6.9078 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1924.555185][ T2614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1924.555198][ T2614] Call Trace: [ 1924.555208][ T2614] [ 1924.555218][ T2614] dump_stack_lvl+0x189/0x250 [ 1924.555254][ T2614] ? __pfx____ratelimit+0x10/0x10 [ 1924.555284][ T2614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1924.555313][ T2614] ? __pfx__printk+0x10/0x10 [ 1924.555358][ T2614] ? __might_fault+0xb0/0x130 [ 1924.555392][ T2614] should_fail_ex+0x414/0x560 [ 1924.555425][ T2614] _copy_from_user+0x2d/0xb0 [ 1924.555447][ T2614] vmci_host_unlocked_ioctl+0xdc9/0x2650 [ 1924.555484][ T2614] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1924.555521][ T2614] ? do_vfs_ioctl+0xf37/0x1990 [ 1924.555552][ T2614] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1924.555587][ T2614] ? kasan_quarantine_put+0xdd/0x220 [ 1924.555626][ T2614] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1924.555652][ T2614] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1924.555676][ T2614] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1924.555697][ T2614] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1924.555721][ T2614] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1924.555764][ T2614] ? __lock_acquire+0xab9/0xd20 [ 1924.555813][ T2614] ? __fget_files+0x2a/0x420 [ 1924.555840][ T2614] ? __fget_files+0x3a0/0x420 [ 1924.555860][ T2614] ? __fget_files+0x2a/0x420 [ 1924.555886][ T2614] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1924.555925][ T2614] __ia32_compat_sys_ioctl+0x540/0x840 [ 1924.555958][ T2614] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1924.555989][ T2614] ? __fget_files+0x3a0/0x420 [ 1924.556017][ T2614] ? fput+0xa0/0xd0 [ 1924.556043][ T2614] ? ksys_write+0x22a/0x250 [ 1924.556071][ T2614] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1924.556103][ T2614] ? lockdep_hardirqs_on+0x9c/0x150 [ 1924.556134][ T2614] __do_fast_syscall_32+0xb6/0x2b0 [ 1924.556155][ T2614] ? lockdep_hardirqs_on+0x9c/0x150 [ 1924.556189][ T2614] do_fast_syscall_32+0x34/0x80 [ 1924.556209][ T2614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1924.556233][ T2614] RIP: 0023:0xf704e539 [ 1924.556251][ T2614] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1924.556269][ T2614] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1924.556293][ T2614] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000000007a4 [ 1924.556308][ T2614] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1924.556321][ T2614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1924.556341][ T2614] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1924.556354][ T2614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1924.556385][ T2614] [ 1924.863161][T31228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.168870][T21156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.187345][T21156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.415181][T20741] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1925.575307][T20741] usb 5-1: Using ep0 maxpacket: 8 [ 1925.587998][T20741] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1925.607742][T20741] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1925.638569][T20741] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1925.659167][T20741] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1925.683560][T20741] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1925.698993][T20741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.785088][T26061] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1925.945007][T26061] usb 2-1: Using ep0 maxpacket: 16 [ 1925.965113][T20741] usb 5-1: GET_CAPABILITIES returned 0 [ 1925.981161][T26061] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1926.002268][T20741] usbtmc 5-1:16.0: can't read capabilities [ 1926.015063][T26061] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.054296][T26061] usb 2-1: config 0 has no interface number 0 [ 1926.074893][T26061] usb 2-1: config 0 interface 123 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1926.113113][T26061] usb 2-1: config 0 interface 123 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1926.143664][T26061] usb 2-1: config 0 interface 123 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1926.189618][T20741] usb 5-1: USB disconnect, device number 34 [ 1926.208754][T26061] usb 2-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=68.25 [ 1926.225690][T26061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.240074][T26061] usb 2-1: Product: syz [ 1926.244444][T26061] usb 2-1: Manufacturer: syz [ 1926.280414][T26061] usb 2-1: SerialNumber: syz [ 1926.307684][T26061] usb 2-1: config 0 descriptor?? [ 1926.327403][ T2629] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1926.350679][T26061] pl2303 2-1:0.123: required interrupt-in endpoint missing [ 1926.525811][T20890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1926.538140][T20890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1926.555128][T20890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1926.568484][T20890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1926.575534][T20741] usb 2-1: USB disconnect, device number 120 [ 1926.587060][T20890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1926.938271][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1927.001922][T24963] bond3: (slave syz_tun): Releasing active interface [ 1927.063067][ T2646] netlink: 'syz.4.9088': attribute type 14 has an invalid length. [ 1927.325034][T13160] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1927.361797][ T2653] bond_slave_0: entered promiscuous mode [ 1927.368006][ T2653] bond_slave_1: entered promiscuous mode [ 1927.382554][ T2653] macvlan2: entered promiscuous mode [ 1927.391457][ T2653] bond0: entered promiscuous mode [ 1927.399997][ T2653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1927.465344][T13160] usb 7-1: device descriptor read/64, error -71 [ 1927.578330][ T2643] chnl_net:caif_netlink_parms(): no params data found [ 1927.725004][T13160] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1927.784109][ T2643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.791901][ T2643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.799271][ T2643] bridge_slave_0: entered allmulticast mode [ 1927.807778][ T2643] bridge_slave_0: entered promiscuous mode [ 1927.819583][ T2643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.828068][ T2643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.835541][ T2643] bridge_slave_1: entered allmulticast mode [ 1927.843908][ T2643] bridge_slave_1: entered promiscuous mode [ 1927.874897][T13160] usb 7-1: device descriptor read/64, error -71 [ 1927.937454][ T2643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.962872][ T2643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1927.985824][T13160] usb usb7-port1: attempt power cycle [ 1928.020874][ T2643] team0: Port device team_slave_0 added [ 1928.032576][ T2643] team0: Port device team_slave_1 added [ 1928.079807][ T2643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1928.085404][T26061] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1928.087363][ T2643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1928.154481][ T2643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1928.184941][ T2643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1928.194794][ T2643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1928.238122][ T2643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1928.255410][T26061] usb 2-1: device descriptor read/64, error -71 [ 1928.334956][T13160] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1928.383979][T13160] usb 7-1: device descriptor read/8, error -71 [ 1928.409302][ T2643] hsr_slave_0: entered promiscuous mode [ 1928.417118][ T2643] hsr_slave_1: entered promiscuous mode [ 1928.423669][ T2643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1928.432248][ T2643] Cannot create hsr debugfs directory [ 1928.494946][T26061] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1928.635052][T13160] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1928.635052][T26061] usb 2-1: device descriptor read/64, error -71 [ 1928.659601][T13160] usb 7-1: device descriptor read/8, error -71 [ 1928.695153][T15829] Bluetooth: hci3: command tx timeout [ 1928.765243][T26061] usb usb2-port1: attempt power cycle [ 1928.785200][T13160] usb usb7-port1: unable to enumerate USB device [ 1928.838375][ T2643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.041500][ T2643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.115257][T26061] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1929.149649][T26061] usb 2-1: device descriptor read/8, error -71 [ 1929.213071][ T2643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.301594][ T2643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.405150][T26061] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1929.435133][T20741] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1929.459474][T26061] usb 2-1: device descriptor read/8, error -71 [ 1929.561401][ T2643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1929.572961][ T2643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1929.590348][ T2643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1929.595448][T26061] usb usb2-port1: unable to enumerate USB device [ 1929.620875][ T2643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1929.636677][T20741] usb 5-1: Using ep0 maxpacket: 16 [ 1929.646426][T20741] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 1929.665787][T20741] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.679556][T20741] usb 5-1: config 0 has no interface number 0 [ 1929.686912][T20741] usb 5-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1929.699148][T20741] usb 5-1: config 0 interface 204 altsetting 0 endpoint 0xC has an invalid bInterval 58, changing to 9 [ 1929.719740][T20741] usb 5-1: config 0 interface 204 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1929.730442][T20741] usb 5-1: config 0 interface 204 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 1929.751014][T20741] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=1a.0e [ 1929.760385][ T2643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.767766][T20741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.776376][ T2643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.783677][T20741] usb 5-1: Product: syz [ 1929.788506][T20741] usb 5-1: Manufacturer: syz [ 1929.793742][T20741] usb 5-1: SerialNumber: syz [ 1929.812419][T21153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.814064][T20741] usb 5-1: config 0 descriptor?? [ 1929.819766][T21153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1929.844707][T21153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.852040][T21153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1929.964094][ T2643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.080621][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.114349][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.128529][ T2643] veth0_vlan: entered promiscuous mode [ 1930.128534][ T2692] netlink: 'syz.6.9095': attribute type 4 has an invalid length. [ 1930.164341][T20741] usb 5-1: USB disconnect, device number 35 [ 1930.207620][ T2643] veth1_vlan: entered promiscuous mode [ 1930.308345][ T2643] veth0_macvtap: entered promiscuous mode [ 1930.330377][ T2643] veth1_macvtap: entered promiscuous mode [ 1930.386543][ T2643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.424897][ T2643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1930.456252][ T2643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.475000][ T2643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.483792][ T2643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.515091][ T2643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.765826][T21156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.779273][T15829] Bluetooth: hci3: command tx timeout [ 1930.795906][T21156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.007176][T21156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.022320][T21156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.399063][ T2709] netlink: 'syz.2.9083': attribute type 39 has an invalid length. [ 1931.677757][ T2716] macvlan0: entered promiscuous mode [ 1931.685705][ T2716] bond0: entered promiscuous mode [ 1931.691734][ T2716] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1932.131059][T26061] hid (null): invalid report_size 584208137 [ 1932.142867][T26061] hid (null): unknown global tag 0xd [ 1932.152073][ T2726] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1932.164307][T26061] hid (null): unknown global tag 0xc [ 1932.169983][T26061] hid (null): unknown global tag 0xd [ 1932.176126][T26061] hid (null): unknown global tag 0xd [ 1932.189455][T26061] hid-generic 0001:00FF:0000.0050: invalid report_size 584208137 [ 1932.197425][T26061] hid-generic 0001:00FF:0000.0050: item 0 4 1 7 parsing failed [ 1932.207852][T26061] hid-generic 0001:00FF:0000.0050: probe with driver hid-generic failed with error -22 [ 1932.223949][ T30] audit: type=1326 audit(1749767467.892:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.1.9103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7fc00000 [ 1932.246752][ T30] audit: type=1326 audit(1749767467.892:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.1.9103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f12539 code=0x7fc00000 [ 1932.268748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1932.276652][ T30] audit: type=1326 audit(1749767467.892:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.1.9103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7fc00000 [ 1932.568468][ T2739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9108'. [ 1932.655978][ T872] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1932.795067][ T872] usb 2-1: device descriptor read/64, error -71 [ 1932.854901][T15829] Bluetooth: hci3: command tx timeout [ 1932.941393][ T2744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9110'. [ 1932.950955][ T2744] netlink: 'syz.2.9110': attribute type 7 has an invalid length. [ 1932.963292][ T2744] netlink: 'syz.2.9110': attribute type 8 has an invalid length. [ 1932.972570][ T2744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9110'. [ 1933.034938][ T872] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1933.193725][ T872] usb 2-1: device descriptor read/64, error -71 [ 1933.215245][T26061] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1933.315140][ T872] usb usb2-port1: attempt power cycle [ 1933.355455][T26061] usb 5-1: device descriptor read/64, error -71 [ 1933.386721][ T2758] FAULT_INJECTION: forcing a failure. [ 1933.386721][ T2758] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.416437][ T2758] CPU: 0 UID: 0 PID: 2758 Comm: syz.6.9114 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1933.416468][ T2758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1933.416480][ T2758] Call Trace: [ 1933.416489][ T2758] [ 1933.416498][ T2758] dump_stack_lvl+0x189/0x250 [ 1933.416534][ T2758] ? __pfx____ratelimit+0x10/0x10 [ 1933.416566][ T2758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1933.416605][ T2758] ? __pfx__printk+0x10/0x10 [ 1933.416636][ T2758] ? __pfx___might_resched+0x10/0x10 [ 1933.416665][ T2758] ? fs_reclaim_acquire+0x7d/0x100 [ 1933.416697][ T2758] should_fail_ex+0x414/0x560 [ 1933.416730][ T2758] should_failslab+0xa8/0x100 [ 1933.416755][ T2758] __kmalloc_cache_noprof+0x70/0x3d0 [ 1933.416775][ T2758] ? fuse_lookup_name+0x1b5/0x860 [ 1933.416804][ T2758] fuse_lookup_name+0x1b5/0x860 [ 1933.416844][ T2758] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1933.416868][ T2758] ? fuse_lock_inode+0xd3/0x120 [ 1933.416905][ T2758] ? percpu_ref_get_many+0x19/0x140 [ 1933.416948][ T2758] fuse_lookup+0x1e9/0x640 [ 1933.416981][ T2758] ? __pfx_fuse_lookup+0x10/0x10 [ 1933.417036][ T2758] ? _raw_spin_unlock+0x28/0x50 [ 1933.417062][ T2758] ? d_alloc+0x144/0x190 [ 1933.417091][ T2758] lookup_one_qstr_excl_raw+0x115/0x280 [ 1933.417123][ T2758] filename_create+0x225/0x470 [ 1933.417160][ T2758] ? __pfx_filename_create+0x10/0x10 [ 1933.417203][ T2758] do_mkdirat+0xa0/0x590 [ 1933.417236][ T2758] ? __pfx_do_mkdirat+0x10/0x10 [ 1933.417270][ T2758] ? getname_flags+0x1e5/0x540 [ 1933.417299][ T2758] __ia32_sys_mkdir+0x6c/0x80 [ 1933.417329][ T2758] __do_fast_syscall_32+0xb6/0x2b0 [ 1933.417350][ T2758] ? lockdep_hardirqs_on+0x9c/0x150 [ 1933.417385][ T2758] do_fast_syscall_32+0x34/0x80 [ 1933.417406][ T2758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.417429][ T2758] RIP: 0023:0xf704e539 [ 1933.417447][ T2758] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1933.417465][ T2758] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1933.417488][ T2758] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 1933.417502][ T2758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1933.417515][ T2758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1933.417527][ T2758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1933.417540][ T2758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1933.417573][ T2758] [ 1933.624880][T26061] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1933.684929][ T872] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1933.705896][ T872] usb 2-1: device descriptor read/8, error -71 [ 1933.945146][ T872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1933.965784][ T872] usb 2-1: device descriptor read/8, error -71 [ 1933.994914][ T5912] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1934.006324][T20890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1934.012999][T26061] usb 5-1: device descriptor read/64, error -71 [ 1934.018773][T20890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1934.028454][T20890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1934.043116][T20890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1934.051014][T20890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1934.081100][ T872] usb usb2-port1: unable to enumerate USB device [ 1934.124963][ T5912] usb 7-1: device descriptor read/64, error -71 [ 1934.135399][T20747] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1934.136790][T26061] usb usb5-port1: attempt power cycle [ 1934.296246][T20747] usb 3-1: Using ep0 maxpacket: 32 [ 1934.311039][T20747] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1934.331163][T20747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.354157][T20747] usb 3-1: config 0 descriptor?? [ 1934.365673][ T5912] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 1934.505174][ T5912] usb 7-1: device descriptor read/64, error -71 [ 1934.511891][T10273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.525675][T26061] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1934.555561][T26061] usb 5-1: device descriptor read/8, error -71 [ 1934.563711][ T2772] chnl_net:caif_netlink_parms(): no params data found [ 1934.568663][T20747] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1934.593911][T20747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1934.617707][ T5912] usb usb7-port1: attempt power cycle [ 1934.629258][T10273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.644053][T20747] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1934.652493][T20747] usb 3-1: media controller created [ 1934.699218][T20747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1934.776036][T10273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.783211][ T2770] syz.2.9116: attempt to access beyond end of device [ 1934.783211][ T2770] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1934.795031][T26061] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1934.823982][T20747] az6027: usb out operation failed. (-71) [ 1934.837361][T26061] usb 5-1: device descriptor read/8, error -71 [ 1934.852906][T20747] az6027: usb out operation failed. (-71) [ 1934.869654][T20747] stb0899_attach: Driver disabled by Kconfig [ 1934.881596][T20747] az6027: no front-end attached [ 1934.881596][T20747] [ 1934.891512][T20747] az6027: usb out operation failed. (-71) [ 1934.902735][T20747] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1934.923741][T20747] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input176 [ 1934.936574][T15829] Bluetooth: hci3: command tx timeout [ 1934.953511][T10273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.955308][T20747] dvb-usb: schedule remote query interval to 400 msecs. [ 1934.967267][T26061] usb usb5-port1: unable to enumerate USB device [ 1934.977279][ T5912] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1934.983192][T20747] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1935.007335][ T5912] usb 7-1: device descriptor read/8, error -71 [ 1935.011014][T20747] usb 3-1: USB disconnect, device number 19 [ 1935.081725][ T2772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.104171][ T2772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.119911][ T2772] bridge_slave_0: entered allmulticast mode [ 1935.129789][ T2772] bridge_slave_0: entered promiscuous mode [ 1935.136373][T20747] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1935.148324][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.161025][ T2772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.170380][ T2772] bridge_slave_1: entered allmulticast mode [ 1935.179191][ T2772] bridge_slave_1: entered promiscuous mode [ 1935.248917][ T2772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1935.259678][ T5912] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1935.272163][ T2772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1935.297452][ T5912] usb 7-1: device descriptor read/8, error -71 [ 1935.406450][ T5912] usb usb7-port1: unable to enumerate USB device [ 1935.513180][ T2772] team0: Port device team_slave_0 added [ 1935.556205][ T2772] team0: Port device team_slave_1 added [ 1935.768312][ T2772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.784943][ T2772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.842786][ T2772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.896377][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9120'. [ 1936.090992][T10273] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1936.145819][T15829] Bluetooth: hci5: command tx timeout [ 1936.366055][ T30] audit: type=1326 audit(1749767472.032:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2779 comm="syz.1.9117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7fc00000 [ 1936.388053][ C1] vkms_vblank_simulate: vblank timer overrun [ 1936.820441][ T5912] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1936.998029][T20741] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1937.006063][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 1937.028311][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.050385][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.074485][ T5912] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1937.085035][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.094589][T10273] bond0 (unregistering): left promiscuous mode [ 1937.105641][ T5912] usb 7-1: config 0 descriptor?? [ 1937.149927][T10273] bond0 (unregistering): Released all slaves [ 1937.182058][T20741] usb 2-1: config 0 has no interfaces? [ 1937.195696][T20741] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1937.205464][T20741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.217039][T20741] usb 2-1: Product: syz [ 1937.221286][T20741] usb 2-1: Manufacturer: syz [ 1937.243715][T20741] usb 2-1: SerialNumber: syz [ 1937.282437][T20741] usb 2-1: config 0 descriptor?? [ 1937.616762][ T5912] ntrig 0003:1B96:0008.0051: unknown main item tag 0x0 [ 1937.670824][ T5912] ntrig 0003:1B96:0008.0051: unknown main item tag 0x0 [ 1937.679327][ T5912] ntrig 0003:1B96:0008.0051: unknown main item tag 0x0 [ 1937.699923][ T5912] ntrig 0003:1B96:0008.0051: unknown main item tag 0x0 [ 1937.709028][T10273] bond1 (unregistering): Released all slaves [ 1937.714256][ T5912] ntrig 0003:1B96:0008.0051: unknown main item tag 0x0 [ 1937.724396][ T5912] ntrig 0003:1B96:0008.0051: item fetching failed at offset 6/7 [ 1937.763256][ T5912] ntrig 0003:1B96:0008.0051: parse failed [ 1937.788080][ T5912] ntrig 0003:1B96:0008.0051: probe with driver ntrig failed with error -22 [ 1937.839160][ T2789] netlink: 'syz.2.9120': attribute type 14 has an invalid length. [ 1937.883965][ T2772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1937.912133][ T2772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1937.938090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1937.958009][ T2772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.220906][T15829] Bluetooth: hci5: command tx timeout [ 1938.343269][ T2809] input: syz1 as /devices/virtual/input/input177 [ 1938.573966][ T2772] hsr_slave_0: entered promiscuous mode [ 1938.588937][ T2772] hsr_slave_1: entered promiscuous mode [ 1938.607652][ T2772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1938.617063][ T2772] Cannot create hsr debugfs directory [ 1939.303389][T10273] hsr_slave_0: left promiscuous mode [ 1939.338382][T10273] hsr_slave_1: left promiscuous mode [ 1939.394425][T10273] veth1_macvtap: left promiscuous mode [ 1939.409019][T10273] veth0_macvtap: left promiscuous mode [ 1939.428430][T10273] veth1_vlan: left promiscuous mode [ 1939.434148][T10273] veth0_vlan: left promiscuous mode [ 1939.632329][ T872] usb 7-1: USB disconnect, device number 65 [ 1940.313798][T15829] Bluetooth: hci5: command tx timeout [ 1940.423217][ T1265] usb 2-1: USB disconnect, device number 3 [ 1940.945208][ T5912] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1941.185230][ T5912] usb 5-1: config 0 has no interfaces? [ 1941.326367][ T5912] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1941.336321][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.356344][ T5912] usb 5-1: Product: syz [ 1941.360614][ T5912] usb 5-1: Manufacturer: syz [ 1941.378196][ T5912] usb 5-1: SerialNumber: syz [ 1941.389948][ T5912] usb 5-1: config 0 descriptor?? [ 1942.390007][T15829] Bluetooth: hci5: command tx timeout [ 1943.608869][T10273] IPVS: stop unused estimator thread 0... [ 1943.615283][T13160] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1943.681465][ T2908] pimreg: entered allmulticast mode [ 1943.807241][T13160] usb 2-1: device descriptor read/64, error -71 [ 1944.066232][T13160] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1944.216147][T13160] usb 2-1: device descriptor read/64, error -71 [ 1944.322646][ T5912] usb 5-1: USB disconnect, device number 40 [ 1944.387695][T13160] usb usb2-port1: attempt power cycle [ 1944.765033][T13160] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1944.826385][T13160] usb 2-1: device descriptor read/8, error -71 [ 1945.075281][T13160] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1945.140108][T13160] usb 2-1: device descriptor read/8, error -71 [ 1945.268397][T13160] usb usb2-port1: unable to enumerate USB device [ 1945.322928][ T2772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1945.337960][ T2772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1945.428474][ T2772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1945.454388][ T2772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1945.609378][ T2938] FAULT_INJECTION: forcing a failure. [ 1945.609378][ T2938] name failslab, interval 1, probability 0, space 0, times 0 [ 1945.644941][ T2938] CPU: 0 UID: 0 PID: 2938 Comm: syz.6.9143 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1945.644971][ T2938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1945.644984][ T2938] Call Trace: [ 1945.644993][ T2938] [ 1945.645002][ T2938] dump_stack_lvl+0x189/0x250 [ 1945.645037][ T2938] ? __pfx____ratelimit+0x10/0x10 [ 1945.645066][ T2938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1945.645096][ T2938] ? __pfx__printk+0x10/0x10 [ 1945.645135][ T2938] should_fail_ex+0x414/0x560 [ 1945.645167][ T2938] should_failslab+0xa8/0x100 [ 1945.645192][ T2938] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1945.645221][ T2938] ? skb_clone+0x212/0x3a0 [ 1945.645266][ T2938] skb_clone+0x212/0x3a0 [ 1945.645297][ T2938] __netlink_deliver_tap+0x404/0x850 [ 1945.645333][ T2938] ? netlink_deliver_tap+0x2e/0x1b0 [ 1945.645360][ T2938] netlink_deliver_tap+0x19c/0x1b0 [ 1945.645385][ T2938] netlink_sendskb+0x68/0x140 [ 1945.645409][ T2938] netlink_rcv_skb+0x28c/0x470 [ 1945.645432][ T2938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1945.645456][ T2938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1945.645493][ T2938] ? netlink_deliver_tap+0x2e/0x1b0 [ 1945.645516][ T2938] ? netlink_deliver_tap+0x2e/0x1b0 [ 1945.645545][ T2938] netlink_unicast+0x75b/0x8d0 [ 1945.645580][ T2938] netlink_sendmsg+0x805/0xb30 [ 1945.645613][ T2938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1945.645641][ T2938] ? __import_iovec+0x5d4/0x7f0 [ 1945.645659][ T2938] ? aa_sock_msg_perm+0x94/0x160 [ 1945.645687][ T2938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1945.645712][ T2938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1945.645737][ T2938] __sock_sendmsg+0x219/0x270 [ 1945.645771][ T2938] ____sys_sendmsg+0x505/0x830 [ 1945.645803][ T2938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1945.645848][ T2938] ___sys_sendmsg+0x21f/0x2a0 [ 1945.645877][ T2938] ? __pfx____sys_sendmsg+0x10/0x10 [ 1945.645945][ T2938] ? __fget_files+0x2a/0x420 [ 1945.645967][ T2938] ? __fget_files+0x3a0/0x420 [ 1945.646001][ T2938] __sys_sendmsg+0x164/0x220 [ 1945.646029][ T2938] ? __pfx___sys_sendmsg+0x10/0x10 [ 1945.646072][ T2938] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1945.646103][ T2938] ? lockdep_hardirqs_on+0x9c/0x150 [ 1945.646135][ T2938] __do_fast_syscall_32+0xb6/0x2b0 [ 1945.646156][ T2938] ? lockdep_hardirqs_on+0x9c/0x150 [ 1945.646190][ T2938] do_fast_syscall_32+0x34/0x80 [ 1945.646210][ T2938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1945.646242][ T2938] RIP: 0023:0xf704e539 [ 1945.646261][ T2938] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1945.646278][ T2938] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1945.646301][ T2938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1945.646316][ T2938] RDX: 0000000020044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1945.646329][ T2938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1945.646341][ T2938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1945.646354][ T2938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1945.646386][ T2938] [ 1946.013781][ T2772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1946.037667][ T2772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1946.067409][T10879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1946.074664][T10879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1946.116160][T10879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1946.123372][T10879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1946.536390][ T2950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9145'. [ 1946.548856][ T2772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1946.556495][ T2952] FAULT_INJECTION: forcing a failure. [ 1946.556495][ T2952] name failslab, interval 1, probability 0, space 0, times 0 [ 1946.592439][ T2950] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9145'. [ 1946.628014][ T2952] CPU: 0 UID: 0 PID: 2952 Comm: syz.1.9146 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1946.628046][ T2952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1946.628058][ T2952] Call Trace: [ 1946.628066][ T2952] [ 1946.628076][ T2952] dump_stack_lvl+0x189/0x250 [ 1946.628112][ T2952] ? __pfx____ratelimit+0x10/0x10 [ 1946.628143][ T2952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1946.628174][ T2952] ? __pfx__printk+0x10/0x10 [ 1946.628204][ T2952] ? __pfx___might_resched+0x10/0x10 [ 1946.628233][ T2952] ? fs_reclaim_acquire+0x7d/0x100 [ 1946.628263][ T2952] should_fail_ex+0x414/0x560 [ 1946.628294][ T2952] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1946.628322][ T2952] should_failslab+0xa8/0x100 [ 1946.628346][ T2952] __kvmalloc_node_noprof+0x161/0x5f0 [ 1946.628368][ T2952] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1946.628403][ T2952] rhashtable_init_noprof+0x4ee/0xbb0 [ 1946.628441][ T2952] rhltable_init_noprof+0x1e/0x60 [ 1946.628472][ T2952] nf_tables_newtable+0x68f/0x1890 [ 1946.628532][ T2952] nfnetlink_rcv+0x112f/0x2520 [ 1946.628600][ T2952] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1946.628648][ T2952] ? ref_tracker_free+0x63a/0x7d0 [ 1946.628711][ T2952] ? __netlink_deliver_tap+0x807/0x850 [ 1946.628748][ T2952] ? netlink_deliver_tap+0x2e/0x1b0 [ 1946.628771][ T2952] ? netlink_deliver_tap+0x2e/0x1b0 [ 1946.628801][ T2952] netlink_unicast+0x75b/0x8d0 [ 1946.628835][ T2952] netlink_sendmsg+0x805/0xb30 [ 1946.628871][ T2952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1946.628898][ T2952] ? __import_iovec+0x5d4/0x7f0 [ 1946.628916][ T2952] ? aa_sock_msg_perm+0x94/0x160 [ 1946.628944][ T2952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1946.628974][ T2952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1946.629000][ T2952] __sock_sendmsg+0x219/0x270 [ 1946.629033][ T2952] ____sys_sendmsg+0x505/0x830 [ 1946.629065][ T2952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1946.629109][ T2952] ___sys_sendmsg+0x21f/0x2a0 [ 1946.629138][ T2952] ? __pfx____sys_sendmsg+0x10/0x10 [ 1946.629205][ T2952] ? __fget_files+0x2a/0x420 [ 1946.629227][ T2952] ? __fget_files+0x3a0/0x420 [ 1946.629262][ T2952] __sys_sendmsg+0x164/0x220 [ 1946.629291][ T2952] ? __pfx___sys_sendmsg+0x10/0x10 [ 1946.629333][ T2952] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1946.629364][ T2952] ? lockdep_hardirqs_on+0x9c/0x150 [ 1946.629397][ T2952] __do_fast_syscall_32+0xb6/0x2b0 [ 1946.629418][ T2952] ? lockdep_hardirqs_on+0x9c/0x150 [ 1946.629452][ T2952] do_fast_syscall_32+0x34/0x80 [ 1946.629472][ T2952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1946.629496][ T2952] RIP: 0023:0xf7f12539 [ 1946.629514][ T2952] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1946.629540][ T2952] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1946.629563][ T2952] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1946.629578][ T2952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1946.629589][ T2952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1946.629601][ T2952] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1946.629614][ T2952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1946.629646][ T2952] [ 1946.954501][ T30] audit: type=1400 audit(1749767482.302:3993): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=2948 comm="syz.4.9145" [ 1947.011649][ T2772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1947.110503][ T2908] pimreg: left allmulticast mode [ 1947.221356][ T2950] ALSA: mixer_oss: invalid OSS volume '' [ 1947.231010][ T2960] FAULT_INJECTION: forcing a failure. [ 1947.231010][ T2960] name failslab, interval 1, probability 0, space 0, times 0 [ 1947.243743][ T2960] CPU: 1 UID: 0 PID: 2960 Comm: syz.6.9147 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1947.243772][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1947.243785][ T2960] Call Trace: [ 1947.243795][ T2960] [ 1947.243804][ T2960] dump_stack_lvl+0x189/0x250 [ 1947.243839][ T2960] ? __pfx____ratelimit+0x10/0x10 [ 1947.243870][ T2960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1947.243901][ T2960] ? __pfx__printk+0x10/0x10 [ 1947.243927][ T2960] ? __lock_acquire+0xab9/0xd20 [ 1947.243964][ T2960] should_fail_ex+0x414/0x560 [ 1947.243996][ T2960] should_failslab+0xa8/0x100 [ 1947.244020][ T2960] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1947.244051][ T2960] ? skb_clone+0x212/0x3a0 [ 1947.244076][ T2960] ? __pfx_skb_network_protocol+0x10/0x10 [ 1947.244109][ T2960] skb_clone+0x212/0x3a0 [ 1947.244133][ T2960] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 1947.244161][ T2960] dev_queue_xmit_nit+0x416/0xcc0 [ 1947.244186][ T2960] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 1947.244222][ T2960] dev_hard_start_xmit+0x1be/0x830 [ 1947.244269][ T2960] __dev_queue_xmit+0x1adf/0x3a70 [ 1947.244311][ T2960] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1947.244345][ T2960] ? __dev_queue_xmit+0x27e/0x3a70 [ 1947.244374][ T2960] ? netlink_sendmsg+0x805/0xb30 [ 1947.244397][ T2960] ? sock_write_iter+0x258/0x330 [ 1947.244425][ T2960] ? vfs_writev+0x31a/0x960 [ 1947.244446][ T2960] ? do_writev+0x14d/0x2d0 [ 1947.244468][ T2960] ? do_fast_syscall_32+0x34/0x80 [ 1947.244484][ T2960] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1947.244518][ T2960] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1947.244562][ T2960] ? __copy_skb_header+0xa7/0x550 [ 1947.244589][ T2960] ? __asan_memcpy+0x40/0x70 [ 1947.244616][ T2960] ? __skb_clone+0x63/0x7a0 [ 1947.244648][ T2960] ? __skb_clone+0x483/0x7a0 [ 1947.244682][ T2960] ? skb_clone+0x246/0x3a0 [ 1947.244719][ T2960] __netlink_deliver_tap+0x5ad/0x850 [ 1947.244757][ T2960] ? netlink_deliver_tap+0x2e/0x1b0 [ 1947.244783][ T2960] netlink_deliver_tap+0x19c/0x1b0 [ 1947.244809][ T2960] netlink_sendskb+0x68/0x140 [ 1947.244835][ T2960] inet_diag_dump_one_icsk+0x411/0x520 [ 1947.244856][ T2960] ? inet_diag_dump_one_icsk+0xcd/0x520 [ 1947.244879][ T2960] inet_diag_cmd_exact+0x3d5/0x4e0 [ 1947.244900][ T2960] ? __dev_queue_xmit+0x27e/0x3a70 [ 1947.244931][ T2960] ? __pfx_inet_diag_cmd_exact+0x10/0x10 [ 1947.244951][ T2960] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1947.244982][ T2960] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1947.245031][ T2960] ? __lock_acquire+0xab9/0xd20 [ 1947.245066][ T2960] inet_diag_handler_cmd+0x1e6/0x290 [ 1947.245090][ T2960] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 1947.245118][ T2960] ? sock_diag_lock_handler+0x19/0x290 [ 1947.245138][ T2960] ? sock_diag_lock_handler+0x19/0x290 [ 1947.245165][ T2960] sock_diag_rcv_msg+0x4c9/0x600 [ 1947.245192][ T2960] netlink_rcv_skb+0x208/0x470 [ 1947.245217][ T2960] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1947.245241][ T2960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1947.245281][ T2960] ? netlink_deliver_tap+0x2e/0x1b0 [ 1947.245312][ T2960] ? netlink_deliver_tap+0x2e/0x1b0 [ 1947.245342][ T2960] netlink_unicast+0x75b/0x8d0 [ 1947.245378][ T2960] netlink_sendmsg+0x805/0xb30 [ 1947.245413][ T2960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1947.245442][ T2960] ? aa_sock_msg_perm+0x94/0x160 [ 1947.245470][ T2960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1947.245495][ T2960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1947.245521][ T2960] __sock_sendmsg+0x219/0x270 [ 1947.245555][ T2960] sock_write_iter+0x258/0x330 [ 1947.245588][ T2960] ? __pfx_sock_write_iter+0x10/0x10 [ 1947.245632][ T2960] ? __pfx_aa_file_perm+0x10/0x10 [ 1947.245668][ T2960] do_iter_readv_writev+0x56b/0x7f0 [ 1947.245694][ T2960] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1947.245719][ T2960] ? bpf_lsm_file_permission+0x9/0x20 [ 1947.245745][ T2960] ? security_file_permission+0x75/0x290 [ 1947.245770][ T2960] ? rw_verify_area+0x258/0x650 [ 1947.245805][ T2960] vfs_writev+0x31a/0x960 [ 1947.245834][ T2960] ? __lock_acquire+0xab9/0xd20 [ 1947.245863][ T2960] ? __pfx_vfs_writev+0x10/0x10 [ 1947.245905][ T2960] ? __fget_files+0x2a/0x420 [ 1947.245940][ T2960] ? __fget_files+0x3a0/0x420 [ 1947.245960][ T2960] ? __fget_files+0x2a/0x420 [ 1947.245992][ T2960] do_writev+0x14d/0x2d0 [ 1947.246020][ T2960] ? __pfx_do_writev+0x10/0x10 [ 1947.246047][ T2960] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1947.246079][ T2960] ? lockdep_hardirqs_on+0x9c/0x150 [ 1947.246111][ T2960] __do_fast_syscall_32+0xb6/0x2b0 [ 1947.246132][ T2960] ? lockdep_hardirqs_on+0x9c/0x150 [ 1947.246166][ T2960] do_fast_syscall_32+0x34/0x80 [ 1947.246188][ T2960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1947.246211][ T2960] RIP: 0023:0xf704e539 [ 1947.246230][ T2960] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1947.246248][ T2960] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1947.246272][ T2960] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 1947.246286][ T2960] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1947.246306][ T2960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1947.246318][ T2960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1947.246331][ T2960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1947.246362][ T2960] [ 1947.760499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.776260][ T2950] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1947.782697][ T2950] ALSA: mixer_oss: invalid OSS volume '3' [ 1947.826286][ T2950] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1947.832683][ T2950] ALSA: mixer_oss: invalid OSS volume '4' [ 1947.838812][ T2950] ALSA: mixer_oss: invalid OSS volume '5' [ 1947.969534][ T2966] netlink: 'syz.4.9149': attribute type 14 has an invalid length. [ 1948.153637][ T2772] veth0_vlan: entered promiscuous mode [ 1948.187294][ T2966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9149'. [ 1948.253576][ T2772] veth1_vlan: entered promiscuous mode [ 1948.511460][ T2772] veth0_macvtap: entered promiscuous mode [ 1948.536501][ T2978] netlink: 'syz.6.9152': attribute type 4 has an invalid length. [ 1948.542494][ T2772] veth1_macvtap: entered promiscuous mode [ 1948.588009][ T2979] netlink: 'syz.6.9152': attribute type 4 has an invalid length. [ 1948.689238][ T2772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1948.759655][ T2988] netlink: 'syz.4.9155': attribute type 14 has an invalid length. [ 1948.800764][ T2772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1948.859380][ T2772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1948.900580][ T2772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1948.920122][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9155'. [ 1948.948094][ T2772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1948.977295][ T2772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.428378][T10273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1949.456288][T10273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1949.577719][T10273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1949.622568][T10273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1949.724962][T20755] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1949.875084][T20755] usb 5-1: device descriptor read/64, error -71 [ 1949.954274][ T3007] netlink: 'syz.2.9158': attribute type 14 has an invalid length. [ 1950.008805][ T3007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9158'. [ 1950.140164][T20755] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1950.274863][T20755] usb 5-1: device descriptor read/64, error -71 [ 1950.405289][T20755] usb usb5-port1: attempt power cycle [ 1950.776205][T20755] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1950.845704][T20755] usb 5-1: device descriptor read/8, error -71 [ 1951.130665][ T3038] netlink: 'syz.0.9164': attribute type 14 has an invalid length. [ 1951.150807][T20755] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1951.228617][T20755] usb 5-1: device descriptor read/8, error -71 [ 1951.269000][ T3041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9164'. [ 1951.405751][ T3044] FAULT_INJECTION: forcing a failure. [ 1951.405751][ T3044] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.482257][ T3044] CPU: 1 UID: 0 PID: 3044 Comm: syz.1.9166 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1951.482292][ T3044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1951.482306][ T3044] Call Trace: [ 1951.482315][ T3044] [ 1951.482326][ T3044] dump_stack_lvl+0x189/0x250 [ 1951.482363][ T3044] ? __pfx____ratelimit+0x10/0x10 [ 1951.482394][ T3044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1951.482425][ T3044] ? __pfx__printk+0x10/0x10 [ 1951.482455][ T3044] ? __pfx___might_resched+0x10/0x10 [ 1951.482491][ T3044] ? fs_reclaim_acquire+0x7d/0x100 [ 1951.482522][ T3044] should_fail_ex+0x414/0x560 [ 1951.482555][ T3044] should_failslab+0xa8/0x100 [ 1951.482580][ T3044] __kmalloc_noprof+0xcb/0x4f0 [ 1951.482598][ T3044] ? kfree+0x4d/0x440 [ 1951.482624][ T3044] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1951.482659][ T3044] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1951.482690][ T3044] ? tomoyo_domain+0xd9/0x130 [ 1951.482726][ T3044] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1951.482751][ T3044] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1951.482779][ T3044] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1951.482825][ T3044] ? __lock_acquire+0xab9/0xd20 [ 1951.482878][ T3044] ? __fget_files+0x2a/0x420 [ 1951.482907][ T3044] ? __fget_files+0x3a0/0x420 [ 1951.482928][ T3044] ? __fget_files+0x2a/0x420 [ 1951.482955][ T3044] security_file_ioctl_compat+0xcb/0x2d0 [ 1951.482982][ T3044] __ia32_compat_sys_ioctl+0x128/0x840 [ 1951.483017][ T3044] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1951.483048][ T3044] ? __fget_files+0x3a0/0x420 [ 1951.483078][ T3044] ? fput+0xa0/0xd0 [ 1951.483104][ T3044] ? ksys_write+0x22a/0x250 [ 1951.483133][ T3044] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1951.483166][ T3044] ? lockdep_hardirqs_on+0x9c/0x150 [ 1951.483199][ T3044] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.483221][ T3044] ? lockdep_hardirqs_on+0x9c/0x150 [ 1951.483264][ T3044] do_fast_syscall_32+0x34/0x80 [ 1951.483286][ T3044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.483310][ T3044] RIP: 0023:0xf7f12539 [ 1951.483330][ T3044] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1951.483349][ T3044] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1951.483373][ T3044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001274 [ 1951.483388][ T3044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1951.483401][ T3044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1951.483413][ T3044] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1951.483426][ T3044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1951.483458][ T3044] [ 1951.483508][ T3044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1951.507565][T20755] usb usb5-port1: unable to enumerate USB device [ 1952.199190][ T3059] netlink: 'syz.1.9170': attribute type 4 has an invalid length. [ 1952.258462][ T3059] netlink: 'syz.1.9170': attribute type 4 has an invalid length. [ 1952.406075][T20746] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1952.435275][ T1265] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1952.586331][T20746] usb 3-1: Using ep0 maxpacket: 8 [ 1952.607530][T20746] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1952.625275][ T1265] usb 7-1: Using ep0 maxpacket: 8 [ 1952.635308][T20746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.641450][ T1265] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1952.661721][ T1265] usb 7-1: config 0 has no interface number 0 [ 1952.680700][ T1265] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1952.681806][T20746] usb 3-1: config 0 descriptor?? [ 1952.723113][ T1265] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1952.743023][ T1265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.773132][ T1265] usb 7-1: Product: syz [ 1952.780457][ T1265] usb 7-1: Manufacturer: syz [ 1952.811753][ T1265] usb 7-1: SerialNumber: syz [ 1952.841907][ T1265] usb 7-1: config 0 descriptor?? [ 1953.075207][T20755] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1953.108210][ T1265] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 1953.117984][ T3078] fuse: Bad value for 'fd' [ 1953.168591][ T1265] usb 7-1: USB disconnect, device number 66 [ 1953.247796][T20755] usb 5-1: device descriptor read/64, error -71 [ 1953.353315][ T30] audit: type=1326 audit(1749767489.022:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3075 comm="syz.0.9174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7fc00000 [ 1953.525000][T20755] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1953.674998][T20755] usb 5-1: device descriptor read/64, error -71 [ 1953.820664][T20755] usb usb5-port1: attempt power cycle [ 1953.872584][ T30] audit: type=1326 audit(1749767489.542:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3075 comm="syz.0.9174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f18539 code=0x7fc00000 [ 1954.234951][T20755] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1954.274138][T20755] usb 5-1: device descriptor read/8, error -71 [ 1954.555274][T20755] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1954.584180][ T3103] netlink: 'syz.6.9179': attribute type 14 has an invalid length. [ 1954.595484][T20755] usb 5-1: device descriptor read/8, error -71 [ 1954.633327][ T3103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9179'. [ 1954.705242][T20755] usb usb5-port1: unable to enumerate USB device [ 1954.833740][T20746] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1954.848812][T20746] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1954.876762][T20746] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1954.920990][T20746] usb 3-1: USB disconnect, device number 20 [ 1955.358659][ T3101] syz.1.9178 (3101): drop_caches: 2 [ 1956.244928][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1956.492380][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 1956.531655][ T5912] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1956.626284][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.055375][ T5912] usb 3-1: config 0 descriptor?? [ 1957.694566][ T5912] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1957.706351][ T5912] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1957.724418][ T3111] syz.2.9180: attempt to access beyond end of device [ 1957.724418][ T3111] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1957.745543][ T5912] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1958.004325][ T3133] netlink: 'syz.0.9185': attribute type 14 has an invalid length. [ 1958.376645][ T3144] netlink: 'syz.0.9188': attribute type 4 has an invalid length. [ 1958.474549][ T3146] netlink: 'syz.0.9188': attribute type 4 has an invalid length. [ 1958.747736][ T3155] netlink: 'syz.6.9192': attribute type 4 has an invalid length. [ 1958.858415][ T3157] netlink: 'syz.6.9192': attribute type 4 has an invalid length. [ 1960.021079][ T3168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9194'. [ 1961.642082][ T3195] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1961.649777][ T1265] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1961.732520][ T3195] batadv_slave_0: entered promiscuous mode [ 1961.823846][ T1265] usb 5-1: config 0 has no interfaces? [ 1961.837737][ T1265] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1961.848036][ T3195] batadv_slave_0: left promiscuous mode [ 1961.849080][ T1265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.868862][ T3197] netlink: 'syz.6.9200': attribute type 14 has an invalid length. [ 1961.877725][ T1265] usb 5-1: Product: syz [ 1961.894547][ T1265] usb 5-1: Manufacturer: syz [ 1961.932168][ T1265] usb 5-1: SerialNumber: syz [ 1962.001403][ T1265] usb 5-1: config 0 descriptor?? [ 1962.649993][ T3208] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 1964.591832][ T1265] usb 5-1: USB disconnect, device number 49 [ 1964.674390][ T3224] netlink: 'syz.2.9210': attribute type 4 has an invalid length. [ 1964.969701][ T3230] netlink: 'syz.4.9211': attribute type 4 has an invalid length. [ 1965.561300][T20746] IPVS: starting estimator thread 0... [ 1965.675095][ T3248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9217'. [ 1965.694864][ T3246] IPVS: using max 23 ests per chain, 55200 per kthread [ 1965.749795][ T3250] FAULT_INJECTION: forcing a failure. [ 1965.749795][ T3250] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.767848][ T3250] CPU: 1 UID: 0 PID: 3250 Comm: syz.1.9218 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1965.767880][ T3250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1965.767894][ T3250] Call Trace: [ 1965.767903][ T3250] [ 1965.767912][ T3250] dump_stack_lvl+0x189/0x250 [ 1965.767949][ T3250] ? __pfx____ratelimit+0x10/0x10 [ 1965.767981][ T3250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.768012][ T3250] ? __pfx__printk+0x10/0x10 [ 1965.768038][ T3250] ? __pfx___might_resched+0x10/0x10 [ 1965.768069][ T3250] ? fs_reclaim_acquire+0x7d/0x100 [ 1965.768099][ T3250] should_fail_ex+0x414/0x560 [ 1965.768132][ T3250] should_failslab+0xa8/0x100 [ 1965.768164][ T3250] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 1965.768187][ T3250] ? page_pool_create_percpu+0x76/0xbe0 [ 1965.768221][ T3250] page_pool_create_percpu+0x76/0xbe0 [ 1965.768260][ T3250] __veth_napi_enable_range+0x16c/0x6f0 [ 1965.768301][ T3250] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 1965.768347][ T3250] ? netif_napi_set_irq_locked+0x20b/0x720 [ 1965.768374][ T3250] veth_napi_enable_range+0xff/0x200 [ 1965.768411][ T3250] veth_set_features+0x1c8/0x2a0 [ 1965.768442][ T3250] __netdev_update_features+0xa43/0x1a20 [ 1965.768489][ T3250] ? __pfx___netdev_update_features+0x10/0x10 [ 1965.768518][ T3250] ? __lock_acquire+0xab9/0xd20 [ 1965.768558][ T3250] ? __might_fault+0xb0/0x130 [ 1965.768605][ T3250] ethtool_set_one_feature+0x2b4/0x300 [ 1965.768627][ T3250] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 1965.768647][ T3250] ? bpf_lsm_capable+0x9/0x20 [ 1965.768665][ T3250] ? security_capable+0x7e/0x2e0 [ 1965.768701][ T3250] dev_ethtool+0x1077/0x1990 [ 1965.768744][ T3250] ? __pfx_dev_ethtool+0x10/0x10 [ 1965.768791][ T3250] ? dev_load+0x21/0x1f0 [ 1965.768815][ T3250] dev_ioctl+0x392/0x1150 [ 1965.768847][ T3250] compat_sock_ioctl+0xc3b/0xc80 [ 1965.768885][ T3250] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1965.768918][ T3250] ? __fget_files+0x3a0/0x420 [ 1965.768940][ T3250] ? __fget_files+0x2a/0x420 [ 1965.768966][ T3250] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1965.768998][ T3250] __ia32_compat_sys_ioctl+0x540/0x840 [ 1965.769033][ T3250] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1965.769063][ T3250] ? __fget_files+0x3a0/0x420 [ 1965.769093][ T3250] ? fput+0xa0/0xd0 [ 1965.769119][ T3250] ? ksys_write+0x22a/0x250 [ 1965.769179][ T3250] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1965.769211][ T3250] ? lockdep_hardirqs_on+0x9c/0x150 [ 1965.769244][ T3250] __do_fast_syscall_32+0xb6/0x2b0 [ 1965.769265][ T3250] ? lockdep_hardirqs_on+0x9c/0x150 [ 1965.769299][ T3250] do_fast_syscall_32+0x34/0x80 [ 1965.769319][ T3250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1965.769345][ T3250] RIP: 0023:0xf7f12539 [ 1965.769363][ T3250] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1965.769382][ T3250] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1965.769404][ T3250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 1965.769420][ T3250] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1965.769434][ T3250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1965.769447][ T3250] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1965.769460][ T3250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1965.769492][ T3250] [ 1965.773112][ T3250] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 1966.338347][ T3257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9221'. [ 1966.615944][ T3264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9223'. [ 1966.649037][ T3264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9223'. [ 1967.092768][ T3272] netlink: 'syz.2.9226': attribute type 2 has an invalid length. [ 1967.101016][ T3272] netlink: 'syz.2.9226': attribute type 8 has an invalid length. [ 1967.109083][ T3272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1976.298676][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.305417][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.433117][T20890] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1981.447167][T20890] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1981.457271][T20890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1981.470698][T20890] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1981.479744][T20890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1983.206122][T20890] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1983.218171][ T2152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1983.222007][ T3285] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1983.233420][ T2152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1983.244055][ T3285] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1983.256177][ T3285] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1983.256366][ T2152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1983.282932][ T3285] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1983.284774][ T2152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1983.298681][ T3285] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1983.384420][T15829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1983.395481][T15829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1983.404197][T15829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1983.416753][T15829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1983.424547][T15829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1983.531117][T15829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1983.541731][T15829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1983.550272][T15829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1983.563070][T15829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1983.571473][T15829] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1983.578602][T20890] Bluetooth: hci4: command tx timeout [ 1985.334918][ T3285] Bluetooth: hci6: command tx timeout [ 1985.340707][T20890] Bluetooth: hci7: command tx timeout [ 1985.494928][T20890] Bluetooth: hci8: command tx timeout [ 1985.655213][ T3285] Bluetooth: hci4: command tx timeout [ 1985.655213][T20890] Bluetooth: hci9: command tx timeout [ 1987.414889][T20890] Bluetooth: hci7: command tx timeout [ 1987.416045][ T3285] Bluetooth: hci6: command tx timeout [ 1987.575101][ T3285] Bluetooth: hci8: command tx timeout [ 1987.736393][T20890] Bluetooth: hci9: command tx timeout [ 1987.741930][ T3285] Bluetooth: hci4: command tx timeout [ 1989.494863][ T3285] Bluetooth: hci7: command tx timeout [ 1989.500360][ T3285] Bluetooth: hci6: command tx timeout [ 1989.655073][ T3285] Bluetooth: hci8: command tx timeout [ 1989.815271][ T3285] Bluetooth: hci4: command tx timeout [ 1989.815518][T20890] Bluetooth: hci9: command tx timeout [ 1991.584979][T20890] Bluetooth: hci6: command tx timeout [ 1991.590481][T20890] Bluetooth: hci7: command tx timeout [ 1991.734948][T20890] Bluetooth: hci8: command tx timeout [ 1991.895436][T20890] Bluetooth: hci9: command tx timeout [ 2022.394003][ T5912] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2022.418441][ T5912] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2022.435462][ T5912] usb 3-1: USB disconnect, device number 21 [ 2024.455008][T15829] Bluetooth: hci2: command 0x0406 tx timeout [ 2037.740826][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.755614][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.814842][T15829] Bluetooth: hci0: command 0x0406 tx timeout [ 2041.479952][T15829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2041.493068][T15829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2041.504327][T15829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2041.520645][T15829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2041.528770][T15829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2043.448754][T15829] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2043.464883][T15829] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2043.473922][T15829] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2043.489217][T15829] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2043.499307][T15829] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2043.574949][ T3285] Bluetooth: hci10: command tx timeout [ 2043.665671][T15829] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2043.679845][ T2152] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2043.681582][T20890] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2043.697302][ T2152] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2043.708520][T20890] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2043.717792][ T2152] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2043.727373][ T2152] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2043.735042][T20890] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2043.771559][T20890] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2043.780291][T20890] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2043.879978][T15829] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2043.895216][T15829] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2043.907364][T15829] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2043.916471][T15829] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2043.925905][T15829] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2045.574872][T15829] Bluetooth: hci11: command tx timeout [ 2045.654868][T15829] Bluetooth: hci10: command tx timeout [ 2045.816204][T15829] Bluetooth: hci13: command tx timeout [ 2045.816284][T20890] Bluetooth: hci12: command tx timeout [ 2045.985232][T20890] Bluetooth: hci14: command tx timeout [ 2047.655642][T20890] Bluetooth: hci11: command tx timeout [ 2047.734900][T20890] Bluetooth: hci10: command tx timeout [ 2047.895168][T20890] Bluetooth: hci12: command tx timeout [ 2047.900741][T20890] Bluetooth: hci13: command tx timeout [ 2048.060556][T20890] Bluetooth: hci14: command tx timeout [ 2049.735060][T20890] Bluetooth: hci11: command tx timeout [ 2049.815007][T20890] Bluetooth: hci10: command tx timeout [ 2049.975365][T20890] Bluetooth: hci13: command tx timeout [ 2049.975377][ T3285] Bluetooth: hci12: command tx timeout [ 2050.060428][T20890] Bluetooth: hci3: command 0x0406 tx timeout [ 2050.151844][T15829] Bluetooth: hci14: command tx timeout [ 2051.815392][T15829] Bluetooth: hci11: command tx timeout [ 2052.055062][T15829] Bluetooth: hci12: command tx timeout [ 2052.055097][T20890] Bluetooth: hci13: command tx timeout [ 2052.215537][T20890] Bluetooth: hci14: command tx timeout [ 2060.305134][T15829] Bluetooth: hci5: command 0x0406 tx timeout [ 2099.178381][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.184913][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.616178][T15829] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2101.634795][T15829] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2101.647345][T15829] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2101.666085][T15829] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2101.679836][T15829] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2103.735623][T20890] Bluetooth: hci15: command tx timeout [ 2104.205857][T15829] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2104.225358][T15829] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2104.236159][T15829] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2104.248923][T15829] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2104.257209][T15829] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2104.343043][ T3344] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2104.355761][ T3344] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2104.366945][ T3344] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2104.395418][ T3344] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2104.411692][ T3344] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2104.491612][ T3343] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 2104.504212][ T3343] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 2104.513704][ T3343] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 2104.523277][ T3343] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 2104.532438][ T3343] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 2104.605608][ T3344] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 2104.622844][ T3344] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 2104.633673][ T3344] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 2104.643055][ T3344] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 2104.651400][ T3344] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 2105.815126][ T3343] Bluetooth: hci15: command tx timeout [ 2106.295256][ T3343] Bluetooth: hci16: command tx timeout [ 2106.383066][ T3343] Bluetooth: hci4: command 0x0406 tx timeout [ 2106.383097][ T3344] Bluetooth: hci6: command 0x0406 tx timeout [ 2106.389583][ T3344] Bluetooth: hci7: command 0x0406 tx timeout [ 2106.401794][ T3344] Bluetooth: hci8: command 0x0406 tx timeout [ 2106.401817][ T3343] Bluetooth: hci9: command 0x0406 tx timeout [ 2106.456984][ T2152] Bluetooth: hci17: command tx timeout [ 2106.614872][ T3286] Bluetooth: hci18: command tx timeout [ 2106.694994][ T3286] Bluetooth: hci19: command tx timeout [ 2107.895124][ T3286] Bluetooth: hci15: command tx timeout [ 2108.375168][ T3286] Bluetooth: hci16: command tx timeout [ 2108.535072][ T3286] Bluetooth: hci17: command tx timeout [ 2108.694881][ T3286] Bluetooth: hci18: command tx timeout [ 2108.775017][ T3286] Bluetooth: hci19: command tx timeout [ 2109.980145][ T3286] Bluetooth: hci15: command tx timeout [ 2110.455084][ T3286] Bluetooth: hci16: command tx timeout [ 2110.614865][ T3286] Bluetooth: hci17: command tx timeout [ 2110.774922][ T3286] Bluetooth: hci18: command tx timeout [ 2110.854946][ T3286] Bluetooth: hci19: command tx timeout [ 2112.534813][ T3286] Bluetooth: hci16: command tx timeout [ 2112.694893][ T3286] Bluetooth: hci17: command tx timeout [ 2112.854883][ T3286] Bluetooth: hci18: command tx timeout [ 2112.934948][ T3286] Bluetooth: hci19: command tx timeout [ 2127.334965][ T31] INFO: task kworker/u8:6:31229 blocked for more than 143 seconds. [ 2127.342943][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2127.354265][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2127.363063][ T31] task:kworker/u8:6 state:D stack:22216 pid:31229 tgid:31229 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2127.375205][ T31] Workqueue: events_unbound linkwatch_event [ 2127.381166][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2127.384482][ T31] [ 2127.387782][ T31] __schedule+0x16f5/0x4d00 [ 2127.392361][ T31] ? __lock_acquire+0xa90/0xd20 [ 2127.398037][ T31] ? schedule+0x165/0x360 [ 2127.402424][ T31] ? __pfx___schedule+0x10/0x10 [ 2127.407638][ T31] ? schedule+0x91/0x360 [ 2127.411951][ T31] schedule+0x165/0x360 [ 2127.416262][ T31] schedule_preempt_disabled+0x13/0x30 [ 2127.421773][ T31] __mutex_lock+0x724/0xe80 [ 2127.428503][ T31] ? __mutex_lock+0x51b/0xe80 [ 2127.433242][ T31] ? linkwatch_event+0xe/0x60 [ 2127.438307][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2127.443390][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2127.448715][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2127.454482][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2127.460370][ T31] linkwatch_event+0xe/0x60 [ 2127.465002][ T31] process_scheduled_works+0xae1/0x17b0 [ 2127.470638][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2127.476751][ T31] worker_thread+0x8a0/0xda0 [ 2127.481378][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2127.488001][ T31] ? __kthread_parkme+0x7b/0x200 [ 2127.495323][ T31] kthread+0x70e/0x8a0 [ 2127.499461][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2127.504620][ T31] ? __pfx_kthread+0x10/0x10 [ 2127.569374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2127.574628][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2127.598077][ T31] ? __pfx_kthread+0x10/0x10 [ 2127.602721][ T31] ret_from_fork+0x3fc/0x770 [ 2127.607913][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2127.613822][ T31] ? __switch_to_asm+0x39/0x70 [ 2127.618719][ T31] ? __switch_to_asm+0x33/0x70 [ 2127.623634][ T31] ? __pfx_kthread+0x10/0x10 [ 2127.632048][ T31] ret_from_fork_asm+0x1a/0x30 [ 2127.638286][ T31] [ 2127.641411][ T31] INFO: task syz.6.8866:1804 blocked for more than 143 seconds. [ 2127.649168][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2127.657109][ T31] Blocked by coredump. [ 2127.661728][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2127.677484][ T31] task:syz.6.8866 state:D stack:26200 pid:1804 tgid:1804 ppid:27523 task_flags:0x40044c flags:0x20004006 [ 2127.689789][ T31] Call Trace: [ 2127.693094][ T31] [ 2127.696459][ T31] __schedule+0x16f5/0x4d00 [ 2127.701021][ T31] ? stack_trace_save+0x9c/0xe0 [ 2127.706240][ T31] ? __lock_acquire+0xa90/0xd20 [ 2127.711140][ T31] ? schedule+0x165/0x360 [ 2127.715782][ T31] ? __pfx___schedule+0x10/0x10 [ 2127.720696][ T31] ? schedule+0x91/0x360 [ 2127.725394][ T31] schedule+0x165/0x360 [ 2127.729598][ T31] schedule_preempt_disabled+0x13/0x30 [ 2127.739006][ T31] __mutex_lock+0x724/0xe80 [ 2127.743559][ T31] ? __mutex_lock+0x51b/0xe80 [ 2127.748686][ T31] ? tun_chr_close+0x3e/0x1c0 [ 2127.753428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2127.759039][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 2127.764205][ T31] tun_chr_close+0x3e/0x1c0 [ 2127.768846][ T31] __fput+0x44c/0xa70 [ 2127.773063][ T31] task_work_run+0x1d1/0x260 [ 2127.777986][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2127.783157][ T31] do_exit+0x6ad/0x22e0 [ 2127.787580][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2127.792989][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2127.798407][ T31] ? __pfx_do_exit+0x10/0x10 [ 2127.803038][ T31] do_group_exit+0x21c/0x2d0 [ 2127.807911][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2127.813149][ T31] get_signal+0x1286/0x1340 [ 2127.818374][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 2127.823973][ T31] ? __pfx_get_old_timespec32+0x10/0x10 [ 2127.829610][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2127.837698][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 2127.843204][ T31] exit_to_user_mode_loop+0x75/0x110 [ 2127.848640][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 2127.853891][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2127.859425][ T31] do_fast_syscall_32+0x34/0x80 [ 2127.864319][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2127.871097][ T31] RIP: 0023:0xf704e539 [ 2127.875481][ T31] RSP: 002b:00000000f503e460 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 2127.883929][ T31] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 2127.891946][ T31] RDX: 00000000f503e494 RSI: 00000000f503e48c RDI: 00000000f503e494 [ 2127.900355][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2127.908419][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2127.916666][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2127.924955][ T31] [ 2127.928040][ T31] INFO: task syz.0.9221:3257 blocked for more than 143 seconds. [ 2127.937255][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2127.945210][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2127.953907][ T31] task:syz.0.9221 state:D stack:23656 pid:3257 tgid:3256 ppid:2772 task_flags:0x400140 flags:0x20004004 [ 2127.967469][ T31] Call Trace: [ 2127.970785][ T31] [ 2127.973740][ T31] __schedule+0x16f5/0x4d00 [ 2127.979667][ T31] ? __lock_acquire+0xa91/0xd20 [ 2127.984559][ T31] ? schedule+0x165/0x360 [ 2127.989310][ T31] ? __pfx___schedule+0x10/0x10 [ 2127.994213][ T31] ? schedule+0x91/0x360 [ 2127.998530][ T31] schedule+0x165/0x360 [ 2128.002880][ T31] schedule_preempt_disabled+0x13/0x30 [ 2128.008585][ T31] __mutex_lock+0x724/0xe80 [ 2128.013137][ T31] ? __mutex_lock+0x51b/0xe80 [ 2128.018052][ T31] ? rtnl_dellink+0x331/0x710 [ 2128.022757][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2128.028163][ T31] ? dev_hard_start_xmit+0x2d4/0x830 [ 2128.033484][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 2128.040297][ T31] ? netlink_unicast+0x72f/0x8d0 [ 2128.045538][ T31] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2128.050890][ T31] ? do_fast_syscall_32+0x34/0x80 [ 2128.056105][ T31] ? __nla_parse+0x40/0x60 [ 2128.060737][ T31] rtnl_dellink+0x331/0x710 [ 2128.071715][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 2128.077963][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 2128.083410][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2128.094068][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 2128.100004][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2128.105239][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2128.110389][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2128.117915][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 2128.122990][ T31] ? __copy_skb_header+0xa7/0x550 [ 2128.133007][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 2128.139778][ T31] ? __skb_clone+0x63/0x7a0 [ 2128.145634][ T31] netlink_rcv_skb+0x208/0x470 [ 2128.150452][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2128.161634][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2128.167175][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2128.172433][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2128.179060][ T31] netlink_unicast+0x75b/0x8d0 [ 2128.183884][ T31] netlink_sendmsg+0x805/0xb30 [ 2128.188732][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2128.194032][ T31] ? __import_iovec+0x5d4/0x7f0 [ 2128.198983][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 2128.203964][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2128.210559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2128.216421][ T31] __sock_sendmsg+0x219/0x270 [ 2128.221167][ T31] ____sys_sendmsg+0x505/0x830 [ 2128.226434][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2128.232023][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 2128.237418][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 2128.242268][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2128.249985][ T31] ? __fget_files+0x2a/0x420 [ 2128.254617][ T31] ? __fget_files+0x3a0/0x420 [ 2128.259492][ T31] __sys_sendmsg+0x164/0x220 [ 2128.264104][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 2128.269385][ T31] ? rcu_is_watching+0x15/0xb0 [ 2128.274195][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2128.281122][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2128.286471][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2128.291626][ T31] do_fast_syscall_32+0x34/0x80 [ 2128.296628][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2128.303000][ T31] RIP: 0023:0xf7f18539 [ 2128.307209][ T31] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2128.315927][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000140 [ 2128.323963][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2128.332373][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2128.340707][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2128.350869][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2128.360235][ T31] [ 2128.363351][ T31] INFO: task syz.4.9223:3264 blocked for more than 144 seconds. [ 2128.371466][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2128.379191][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2128.388182][ T31] task:syz.4.9223 state:D stack:23656 pid:3264 tgid:3263 ppid:2155 task_flags:0x400140 flags:0x20004004 [ 2128.401365][ T31] Call Trace: [ 2128.404814][ T31] [ 2128.407788][ T31] __schedule+0x16f5/0x4d00 [ 2128.412352][ T31] ? __lock_acquire+0xa91/0xd20 [ 2128.417612][ T31] ? schedule+0x165/0x360 [ 2128.422014][ T31] ? __pfx___schedule+0x10/0x10 [ 2128.427199][ T31] ? schedule+0x91/0x360 [ 2128.431486][ T31] schedule+0x165/0x360 [ 2128.435938][ T31] schedule_preempt_disabled+0x13/0x30 [ 2128.441441][ T31] __mutex_lock+0x724/0xe80 [ 2128.446416][ T31] ? __mutex_lock+0x51b/0xe80 [ 2128.452727][ T31] ? rtnl_dellink+0x331/0x710 [ 2128.458051][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2128.463229][ T31] ? dev_hard_start_xmit+0x2d4/0x830 [ 2128.469066][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 2128.474397][ T31] ? netlink_unicast+0x72f/0x8d0 [ 2128.479427][ T31] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2128.484863][ T31] ? do_fast_syscall_32+0x34/0x80 [ 2128.492083][ T31] ? __nla_parse+0x40/0x60 [ 2128.499612][ T31] rtnl_dellink+0x331/0x710 [ 2128.504137][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 2128.513820][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 2128.522099][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2128.530935][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 2128.537127][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2128.542111][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2128.547502][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2128.554130][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 2128.559290][ T31] ? __copy_skb_header+0xa7/0x550 [ 2128.564373][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 2128.569907][ T31] ? __skb_clone+0x63/0x7a0 [ 2128.574456][ T31] netlink_rcv_skb+0x208/0x470 [ 2128.582326][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2128.590809][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2128.599212][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2128.604445][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2128.610193][ T31] netlink_unicast+0x75b/0x8d0 [ 2128.618147][ T31] netlink_sendmsg+0x805/0xb30 [ 2128.622990][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2128.628461][ T31] ? __import_iovec+0x5d4/0x7f0 [ 2128.633359][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 2128.638387][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2128.643704][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2128.649243][ T31] __sock_sendmsg+0x219/0x270 [ 2128.655092][ T31] ____sys_sendmsg+0x505/0x830 [ 2128.659902][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2128.665567][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 2128.670910][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 2128.676089][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2128.681349][ T31] ? __fget_files+0x2a/0x420 [ 2128.686403][ T31] ? __fget_files+0x3a0/0x420 [ 2128.691141][ T31] __sys_sendmsg+0x164/0x220 [ 2128.696135][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 2128.701303][ T31] ? rcu_is_watching+0x15/0xb0 [ 2128.706565][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2128.713208][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2128.718688][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2128.723993][ T31] do_fast_syscall_32+0x34/0x80 [ 2128.733429][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2128.740470][ T31] RIP: 0023:0xf7f27539 [ 2128.744559][ T31] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2128.760506][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000140 [ 2128.770385][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2128.779805][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2128.789969][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2128.801628][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2128.812041][ T31] [ 2128.818519][ T31] INFO: task syz.6.9225:3269 blocked for more than 144 seconds. [ 2128.828575][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2128.841266][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2128.852314][ T31] task:syz.6.9225 state:D stack:29208 pid:3269 tgid:3268 ppid:27523 task_flags:0x400140 flags:0x20004004 [ 2128.866598][ T31] Call Trace: [ 2128.869911][ T31] [ 2128.872859][ T31] __schedule+0x16f5/0x4d00 [ 2128.877571][ T31] ? stack_trace_save+0x9c/0xe0 [ 2128.882467][ T31] ? __lock_acquire+0xa91/0xd20 [ 2128.887524][ T31] ? schedule+0x165/0x360 [ 2128.891910][ T31] ? __pfx___schedule+0x10/0x10 [ 2128.896901][ T31] ? schedule+0x91/0x360 [ 2128.901177][ T31] schedule+0x165/0x360 [ 2128.906414][ T31] schedule_preempt_disabled+0x13/0x30 [ 2128.911925][ T31] __mutex_lock+0x724/0xe80 [ 2128.916520][ T31] ? __mutex_lock+0x51b/0xe80 [ 2128.921223][ T31] ? dev_ioctl+0x83c/0x1150 [ 2128.925835][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2128.930888][ T31] ? dev_load+0x21/0x1f0 [ 2128.935331][ T31] ? dev_load+0x21/0x1f0 [ 2128.939598][ T31] dev_ioctl+0x83c/0x1150 [ 2128.943947][ T31] sock_ioctl+0x719/0x790 [ 2128.950516][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 2128.956769][ T31] compat_sock_ioctl+0x285/0xc80 [ 2128.962959][ T31] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2128.969954][ T31] ? __fget_files+0x3a0/0x420 [ 2128.975057][ T31] ? __fget_files+0x2a/0x420 [ 2128.979715][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2128.985788][ T31] __ia32_compat_sys_ioctl+0x540/0x840 [ 2128.991329][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2128.997823][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 2129.003341][ T31] ? fd_install+0x97/0x540 [ 2129.008323][ T31] ? rcu_is_watching+0x15/0xb0 [ 2129.013148][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2129.020635][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2129.026202][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2129.031372][ T31] do_fast_syscall_32+0x34/0x80 [ 2129.036827][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2129.043191][ T31] RIP: 0023:0xf704e539 [ 2129.047837][ T31] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2129.056682][ T31] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 2129.066283][ T31] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2129.074350][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2129.082437][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2129.090551][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2129.100972][ T31] [ 2129.104092][ T31] INFO: task syz.2.9226:3272 blocked for more than 145 seconds. [ 2129.112204][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2129.120131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2129.129051][ T31] task:syz.2.9226 state:D stack:25792 pid:3272 tgid:3271 ppid:2643 task_flags:0x400140 flags:0x20004004 [ 2129.141066][ T31] Call Trace: [ 2129.144378][ T31] [ 2129.147368][ T31] __schedule+0x16f5/0x4d00 [ 2129.151943][ T31] ? __lock_acquire+0xa90/0xd20 [ 2129.157035][ T31] ? schedule+0x165/0x360 [ 2129.161409][ T31] ? __pfx___schedule+0x10/0x10 [ 2129.167829][ T31] ? schedule+0x91/0x360 [ 2129.172118][ T31] schedule+0x165/0x360 [ 2129.177149][ T31] schedule_preempt_disabled+0x13/0x30 [ 2129.182647][ T31] __mutex_lock+0x724/0xe80 [ 2129.187253][ T31] ? __mutex_lock+0x51b/0xe80 [ 2129.192103][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 2129.198697][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2129.203772][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2129.209460][ T31] ? __nla_parse+0x40/0x60 [ 2129.213913][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 2129.219263][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 2129.224988][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 2129.230409][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2129.235747][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2129.240901][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2129.246494][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 2129.251664][ T31] ? __copy_skb_header+0xa7/0x550 [ 2129.257662][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 2129.263090][ T31] ? __skb_clone+0x63/0x7a0 [ 2129.269136][ T31] netlink_rcv_skb+0x208/0x470 [ 2129.273942][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2129.279778][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2129.285280][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2129.290511][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 2129.295991][ T31] netlink_unicast+0x75b/0x8d0 [ 2129.300811][ T31] netlink_sendmsg+0x805/0xb30 [ 2129.306745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2129.312079][ T31] ? __import_iovec+0x5d4/0x7f0 [ 2129.317297][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 2129.322270][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2129.327605][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2129.332915][ T31] __sock_sendmsg+0x219/0x270 [ 2129.337910][ T31] ____sys_sendmsg+0x505/0x830 [ 2129.342708][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2129.348417][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 2129.353760][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 2129.358837][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2129.364099][ T31] ? __fget_files+0x2a/0x420 [ 2129.368786][ T31] ? __fget_files+0x3a0/0x420 [ 2129.374620][ T31] __sys_sendmsg+0x164/0x220 [ 2129.379324][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 2129.384490][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2129.391433][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2129.396960][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2129.402099][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2129.407358][ T31] do_fast_syscall_32+0x34/0x80 [ 2129.412243][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2129.420337][ T31] RIP: 0023:0xf70fe539 [ 2129.424443][ T31] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2129.433103][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000380 [ 2129.441402][ T31] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2129.449583][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2129.457900][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2129.466165][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2129.475292][ T31] [ 2129.478409][ T31] INFO: task syz-executor:3277 blocked for more than 145 seconds. [ 2129.486705][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2129.494374][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2129.503480][ T31] task:syz-executor state:D stack:27112 pid:3277 tgid:3277 ppid:1 task_flags:0x400140 flags:0x20004004 [ 2129.515885][ T31] Call Trace: [ 2129.519253][ T31] [ 2129.522232][ T31] __schedule+0x16f5/0x4d00 [ 2129.526837][ T31] ? arch_stack_walk+0xfc/0x150 [ 2129.531732][ T31] ? __lock_acquire+0xa91/0xd20 [ 2129.536682][ T31] ? schedule+0x165/0x360 [ 2129.541058][ T31] ? __pfx___schedule+0x10/0x10 [ 2129.546299][ T31] ? schedule+0x91/0x360 [ 2129.550583][ T31] schedule+0x165/0x360 [ 2129.555212][ T31] schedule_preempt_disabled+0x13/0x30 [ 2129.560726][ T31] __mutex_lock+0x724/0xe80 [ 2129.565697][ T31] ? __mutex_lock+0x51b/0xe80 [ 2129.570444][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 2129.578921][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2129.583998][ T31] ? net_generic+0x1e/0x240 [ 2129.588599][ T31] ? net_generic+0x1e/0x240 [ 2129.593452][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 2129.599745][ T31] ops_init+0x35c/0x5c0 [ 2129.603935][ T31] setup_net+0x219/0x4b0 [ 2129.609049][ T31] ? __pfx_setup_net+0x10/0x10 [ 2129.613842][ T31] ? copy_net_ns+0x304/0x4d0 [ 2129.623170][ T31] ? down_read_killable+0x1d1/0x350 [ 2129.629651][ T31] copy_net_ns+0x31b/0x4d0 [ 2129.634110][ T31] create_new_namespaces+0x3f3/0x720 [ 2129.640407][ T31] ? security_capable+0x7e/0x2e0 [ 2129.645499][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 2129.651267][ T31] ksys_unshare+0x4c8/0x8c0 [ 2129.656923][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 2129.661997][ T31] ? dnotify_flush+0x1db/0x5e0 [ 2129.666934][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 2129.672268][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2129.680732][ T31] __ia32_sys_unshare+0x37/0x40 [ 2129.685685][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2129.690831][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2129.696624][ T31] do_fast_syscall_32+0x34/0x80 [ 2129.701522][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2129.708355][ T31] RIP: 0023:0xf7ff2539 [ 2129.712463][ T31] RSP: 002b:00000000f75dff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2129.721322][ T31] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2129.729536][ T31] RDX: 00000000f7482ff4 RSI: 00000000f73080dc RDI: 0000000030000000 [ 2129.737964][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2129.746999][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2129.755258][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2129.763272][ T31] [ 2129.770205][ T31] INFO: task syz-executor:3289 blocked for more than 145 seconds. [ 2129.780747][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2129.788624][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2129.797453][ T31] task:syz-executor state:D stack:27272 pid:3289 tgid:3289 ppid:1 task_flags:0x400140 flags:0x20004004 [ 2129.809493][ T31] Call Trace: [ 2129.812791][ T31] [ 2129.816180][ T31] __schedule+0x16f5/0x4d00 [ 2129.820740][ T31] ? arch_stack_walk+0xfc/0x150 [ 2129.827858][ T31] ? __lock_acquire+0xa91/0xd20 [ 2129.832763][ T31] ? schedule+0x165/0x360 [ 2129.837201][ T31] ? __pfx___schedule+0x10/0x10 [ 2129.842304][ T31] ? schedule+0x91/0x360 [ 2129.846824][ T31] schedule+0x165/0x360 [ 2129.851051][ T31] schedule_preempt_disabled+0x13/0x30 [ 2129.856655][ T31] __mutex_lock+0x724/0xe80 [ 2129.861361][ T31] ? __mutex_lock+0x51b/0xe80 [ 2129.866167][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 2129.872371][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2129.877484][ T31] ? net_generic+0x1e/0x240 [ 2129.883215][ T31] ? net_generic+0x1e/0x240 [ 2129.888134][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 2129.894167][ T31] ops_init+0x35c/0x5c0 [ 2129.899095][ T31] setup_net+0x219/0x4b0 [ 2129.903401][ T31] ? __pfx_setup_net+0x10/0x10 [ 2129.908720][ T31] ? copy_net_ns+0x304/0x4d0 [ 2129.913353][ T31] ? down_read_killable+0x1d1/0x350 [ 2129.918623][ T31] copy_net_ns+0x31b/0x4d0 [ 2129.923206][ T31] create_new_namespaces+0x3f3/0x720 [ 2129.928962][ T31] ? security_capable+0x7e/0x2e0 [ 2129.933961][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 2129.940166][ T31] ksys_unshare+0x4c8/0x8c0 [ 2129.946063][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 2129.951135][ T31] ? dnotify_flush+0x1db/0x5e0 [ 2129.956318][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 2129.961655][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2129.968703][ T31] __ia32_sys_unshare+0x37/0x40 [ 2129.973586][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2129.978895][ T31] do_fast_syscall_32+0x34/0x80 [ 2129.985071][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2129.991449][ T31] RIP: 0023:0xf7f25539 [ 2129.996431][ T31] RSP: 002b:00000000f750ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2130.009772][ T31] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2130.019008][ T31] RDX: 00000000f73b2ff4 RSI: 00000000f72380dc RDI: 0000000030000000 [ 2130.031888][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2130.040089][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2130.052909][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2130.063033][ T31] [ 2130.066441][ T31] INFO: task syz-executor:3290 blocked for more than 146 seconds. [ 2130.074281][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2130.082087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2130.092928][ T31] task:syz-executor state:D stack:26760 pid:3290 tgid:3290 ppid:1 task_flags:0x400140 flags:0x20004004 [ 2130.105374][ T31] Call Trace: [ 2130.108692][ T31] [ 2130.111657][ T31] __schedule+0x16f5/0x4d00 [ 2130.118471][ T31] ? arch_stack_walk+0xfc/0x150 [ 2130.123386][ T31] ? __lock_acquire+0xa91/0xd20 [ 2130.132007][ T31] ? schedule+0x165/0x360 [ 2130.138894][ T31] ? __pfx___schedule+0x10/0x10 [ 2130.143809][ T31] ? schedule+0x91/0x360 [ 2130.148503][ T31] schedule+0x165/0x360 [ 2130.152714][ T31] schedule_preempt_disabled+0x13/0x30 [ 2130.160876][ T31] __mutex_lock+0x724/0xe80 [ 2130.169113][ T31] ? __mutex_lock+0x51b/0xe80 [ 2130.173835][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 2130.180429][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2130.185940][ T31] ? net_generic+0x1e/0x240 [ 2130.191985][ T31] ? net_generic+0x1e/0x240 [ 2130.196613][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 2130.202625][ T31] ops_init+0x35c/0x5c0 [ 2130.206920][ T31] setup_net+0x219/0x4b0 [ 2130.211205][ T31] ? __pfx_setup_net+0x10/0x10 [ 2130.216511][ T31] ? copy_net_ns+0x304/0x4d0 [ 2130.221134][ T31] ? down_read_killable+0x1d1/0x350 [ 2130.229387][ T31] copy_net_ns+0x31b/0x4d0 [ 2130.233857][ T31] create_new_namespaces+0x3f3/0x720 [ 2130.241492][ T31] ? security_capable+0x7e/0x2e0 [ 2130.249884][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 2130.258116][ T31] ksys_unshare+0x4c8/0x8c0 [ 2130.262658][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 2130.269037][ T31] ? dnotify_flush+0x1db/0x5e0 [ 2130.273854][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 2130.279313][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2130.286011][ T31] __ia32_sys_unshare+0x37/0x40 [ 2130.292123][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2130.297619][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2130.302881][ T31] do_fast_syscall_32+0x34/0x80 [ 2130.307886][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2130.314254][ T31] RIP: 0023:0xf709e539 [ 2130.319725][ T31] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2130.328224][ T31] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2130.336396][ T31] RDX: 00000000f7402ff4 RSI: 00000000f72880dc RDI: 0000000030000000 [ 2130.344401][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2130.352475][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2130.360516][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2130.368591][ T31] [ 2130.371635][ T31] INFO: task syz-executor:3291 blocked for more than 146 seconds. [ 2130.379831][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2130.387773][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2130.398341][ T31] task:syz-executor state:D stack:28232 pid:3291 tgid:3291 ppid:1 task_flags:0x400140 flags:0x20004004 [ 2130.411269][ T31] Call Trace: [ 2130.414579][ T31] [ 2130.417897][ T31] __schedule+0x16f5/0x4d00 [ 2130.422439][ T31] ? arch_stack_walk+0xfc/0x150 [ 2130.427704][ T31] ? __lock_acquire+0xa90/0xd20 [ 2130.432608][ T31] ? schedule+0x165/0x360 [ 2130.437339][ T31] ? __pfx___schedule+0x10/0x10 [ 2130.442264][ T31] ? schedule+0x91/0x360 [ 2130.447073][ T31] schedule+0x165/0x360 [ 2130.451358][ T31] schedule_preempt_disabled+0x13/0x30 [ 2130.457110][ T31] __mutex_lock+0x724/0xe80 [ 2130.461682][ T31] ? __mutex_lock+0x51b/0xe80 [ 2130.466823][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 2130.473022][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2130.478447][ T31] ? net_generic+0x1e/0x240 [ 2130.482989][ T31] ? net_generic+0x1e/0x240 [ 2130.487868][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 2130.493894][ T31] ops_init+0x35c/0x5c0 [ 2130.499602][ T31] setup_net+0x219/0x4b0 [ 2130.503907][ T31] ? __pfx_setup_net+0x10/0x10 [ 2130.508772][ T31] ? copy_net_ns+0x304/0x4d0 [ 2130.513537][ T31] ? down_read_killable+0x1d1/0x350 [ 2130.519026][ T31] copy_net_ns+0x31b/0x4d0 [ 2130.523491][ T31] create_new_namespaces+0x3f3/0x720 [ 2130.529025][ T31] ? security_capable+0x7e/0x2e0 [ 2130.534105][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 2130.546588][ T31] ksys_unshare+0x4c8/0x8c0 [ 2130.551149][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 2130.556662][ T31] ? dnotify_flush+0x1db/0x5e0 [ 2130.561469][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 2130.567231][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2130.573865][ T31] __ia32_sys_unshare+0x37/0x40 [ 2130.578850][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2130.584152][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2130.589457][ T31] do_fast_syscall_32+0x34/0x80 [ 2130.594625][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2130.602196][ T31] RIP: 0023:0xf711e539 [ 2130.606374][ T31] RSP: 002b:00000000f75dff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2130.615047][ T31] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2130.623047][ T31] RDX: 00000000f7482ff4 RSI: 00000000f73080dc RDI: 0000000030000000 [ 2130.631089][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2130.639359][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2130.647443][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2130.655664][ T31] [ 2130.658715][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 2130.668301][ T31] INFO: task syz-executor:3293 blocked for more than 146 seconds. [ 2130.676442][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 2130.684113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2130.693227][ T31] task:syz-executor state:D stack:26856 pid:3293 tgid:3293 ppid:1 task_flags:0x400140 flags:0x20004004 [ 2130.709988][ T31] Call Trace: [ 2130.713315][ T31] [ 2130.720391][ T31] __schedule+0x16f5/0x4d00 [ 2130.727336][ T31] ? arch_stack_walk+0xfc/0x150 [ 2130.732238][ T31] ? __lock_acquire+0xa90/0xd20 [ 2130.741137][ T31] ? schedule+0x165/0x360 [ 2130.747873][ T31] ? __pfx___schedule+0x10/0x10 [ 2130.752774][ T31] ? schedule+0x91/0x360 [ 2130.762057][ T31] schedule+0x165/0x360 [ 2130.768656][ T31] schedule_preempt_disabled+0x13/0x30 [ 2130.774132][ T31] __mutex_lock+0x724/0xe80 [ 2130.787710][ T31] ? __mutex_lock+0x51b/0xe80 [ 2130.792436][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 2130.801434][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2130.808839][ T31] ? net_generic+0x1e/0x240 [ 2130.813401][ T31] ? net_generic+0x1e/0x240 [ 2130.820792][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 2130.830622][ T31] ops_init+0x35c/0x5c0 [ 2130.837188][ T31] setup_net+0x219/0x4b0 [ 2130.841456][ T31] ? __pfx_setup_net+0x10/0x10 [ 2130.850384][ T31] ? copy_net_ns+0x304/0x4d0 [ 2130.858047][ T31] ? down_read_killable+0x1d1/0x350 [ 2130.863311][ T31] copy_net_ns+0x31b/0x4d0 [ 2130.869776][ T31] create_new_namespaces+0x3f3/0x720 [ 2130.875368][ T31] ? security_capable+0x7e/0x2e0 [ 2130.880348][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 2130.886230][ T31] ksys_unshare+0x4c8/0x8c0 [ 2130.890764][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 2130.895859][ T31] ? dnotify_flush+0x1db/0x5e0 [ 2130.900739][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 2130.907315][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2130.913957][ T31] __ia32_sys_unshare+0x37/0x40 [ 2130.918947][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2130.924096][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2130.934121][ T31] do_fast_syscall_32+0x34/0x80 [ 2130.942197][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2130.952185][ T31] RIP: 0023:0xf7f12539 [ 2130.959225][ T31] RSP: 002b:00000000f74fff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2130.971103][ T31] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2130.982848][ T31] RDX: 00000000f73a2ff4 RSI: 00000000f72280dc RDI: 0000000030000000 [ 2130.994358][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2131.005603][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2131.019738][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2131.029052][ T31] [ 2131.032100][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 2131.041687][ T31] [ 2131.041687][ T31] Showing all locks held in the system: [ 2131.049827][ T31] 4 locks held by kworker/u8:0/12: [ 2131.055072][ T31] #0: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2131.065197][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 2131.076759][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 2131.085910][ T31] #3: ffffffff99cab338 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 2131.096698][ T31] 1 lock held by khungtaskd/31: [ 2131.101573][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2131.112822][ T31] 2 locks held by getty/5597: [ 2131.117575][ T31] #0: ffff8880307a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2131.127664][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2131.137982][ T31] 3 locks held by kworker/u8:7/10273: [ 2131.143518][ T31] #0: ffff88814c791148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2131.155231][ T31] #1: ffffc90003cbfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2131.177595][ T31] #2: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 2131.187489][ T31] 3 locks held by kworker/0:14/20755: [ 2131.192892][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2131.203965][ T31] #1: ffffc9000bc17bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2131.216240][ T31] #2: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 2131.226763][ T31] 3 locks held by kworker/u8:13/21151: [ 2131.232249][ T31] #0: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2131.242338][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 2131.253847][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 2131.263326][ T31] 4 locks held by kworker/u8:5/31228: [ 2131.268792][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2131.279762][ T31] #1: ffffc9000bac7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2131.290439][ T31] #2: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2131.299873][ T31] #3: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 2131.310602][ T31] 3 locks held by kworker/u8:6/31229: [ 2131.321136][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2131.335728][ T31] #1: ffffc9000afa7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2131.351845][ T31] #2: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2131.361132][ T31] 3 locks held by kworker/1:2/1265: [ 2131.366731][ T31] #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2131.379233][ T31] #1: ffffc9000ab07bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2131.395678][ T31] #2: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 2131.405623][ T31] 1 lock held by syz.6.8866/1804: [ 2131.410681][ T31] #0: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2131.424165][ T31] 2 locks held by syz.1.9218/3251: [ 2131.429417][ T31] 1 lock held by syz.0.9221/3257: [ 2131.434473][ T31] #0: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 2131.443732][ T31] 1 lock held by syz.4.9223/3264: [ 2131.448829][ T31] #0: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 2131.457894][ T31] 1 lock held by syz.6.9225/3269: [ 2131.462913][ T31] #0: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 2131.471877][ T31] 1 lock held by syz.2.9226/3272: [ 2131.476982][ T31] #0: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 2131.488238][ T31] 2 locks held by syz-executor/3277: [ 2131.493560][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.503145][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.513745][ T31] 2 locks held by syz-executor/3289: [ 2131.519188][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.531265][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.541943][ T31] 2 locks held by syz-executor/3290: [ 2131.547373][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.558084][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.568684][ T31] 2 locks held by syz-executor/3291: [ 2131.574028][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.583583][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.594323][ T31] 2 locks held by syz-executor/3293: [ 2131.601566][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.611168][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.621749][ T31] 2 locks held by syz-executor/3306: [ 2131.628494][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.638861][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.653781][ T31] 2 locks held by syz-executor/3313: [ 2131.661775][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.671525][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.682126][ T31] 2 locks held by syz-executor/3316: [ 2131.687760][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.701482][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.713920][ T31] 2 locks held by syz-executor/3317: [ 2131.719468][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.730328][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.741026][ T31] 2 locks held by syz-executor/3319: [ 2131.746493][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.756030][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.766708][ T31] 2 locks held by syz-executor/3336: [ 2131.772054][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.781984][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.792578][ T31] 2 locks held by syz-executor/3342: [ 2131.798121][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.807718][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.818744][ T31] 2 locks held by syz-executor/3347: [ 2131.824069][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.835015][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.845599][ T31] 2 locks held by syz-executor/3350: [ 2131.850912][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.860457][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.871005][ T31] 2 locks held by syz-executor/3351: [ 2131.876350][ T31] #0: ffffffff8f503450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2131.885867][ T31] #1: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2131.896488][ T31] [ 2131.898858][ T31] ============================================= [ 2131.898858][ T31] [ 2131.907338][ T31] NMI backtrace for cpu 0 [ 2131.907354][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 2131.907377][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2131.907389][ T31] Call Trace: [ 2131.907398][ T31] [ 2131.907406][ T31] dump_stack_lvl+0x189/0x250 [ 2131.907439][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2131.907466][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2131.907497][ T31] ? __pfx__printk+0x10/0x10 [ 2131.907532][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2131.907557][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2131.907579][ T31] ? _printk+0xcf/0x120 [ 2131.907615][ T31] ? __pfx__printk+0x10/0x10 [ 2131.907638][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2131.907666][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2131.907695][ T31] watchdog+0xfee/0x1030 [ 2131.907724][ T31] ? watchdog+0x1de/0x1030 [ 2131.907757][ T31] kthread+0x70e/0x8a0 [ 2131.907784][ T31] ? __pfx_watchdog+0x10/0x10 [ 2131.907810][ T31] ? __pfx_kthread+0x10/0x10 [ 2131.907833][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2131.907861][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2131.907888][ T31] ? __pfx_kthread+0x10/0x10 [ 2131.907910][ T31] ret_from_fork+0x3fc/0x770 [ 2131.907942][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2131.907975][ T31] ? __switch_to_asm+0x39/0x70 [ 2131.907995][ T31] ? __switch_to_asm+0x33/0x70 [ 2131.908013][ T31] ? __pfx_kthread+0x10/0x10 [ 2131.908036][ T31] ret_from_fork_asm+0x1a/0x30 [ 2131.908074][ T31] [ 2131.908082][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2132.068351][ C1] NMI backtrace for cpu 1 [ 2132.068370][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 2132.068391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2132.068402][ C1] Workqueue: bat_events batadv_nc_worker [ 2132.068429][ C1] RIP: 0010:lock_is_held_type+0x24/0x190 [ 2132.068455][ C1] Code: 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 65 48 8b 05 26 e4 36 07 48 89 44 24 08 bb ff ff ff ff <83> 3d 25 3e 3b 04 00 0f 84 fe 00 00 00 65 8b 05 28 24 37 07 85 c0 [ 2132.068470][ C1] RSP: 0018:ffffc90000117478 EFLAGS: 00000086 [ 2132.068484][ C1] RAX: 0c082783e97ff700 RBX: 00000000ffffffff RCX: 0c082783e97ff700 [ 2132.068496][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b863b918 [ 2132.068508][ C1] RBP: ffffc90000117570 R08: ffff888032a1a777 R09: 1ffff110065434ee [ 2132.068520][ C1] R10: dffffc0000000000 R11: ffffed10065434ef R12: ffff8880b873b900 [ 2132.068532][ C1] R13: dffffc0000000000 R14: ffff888125d52000 R15: ffff8880b873c758 [ 2132.068544][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 2132.068557][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2132.068569][ C1] CR2: 000055d67cf67000 CR3: 0000000063204000 CR4: 00000000003526f0 [ 2132.068586][ C1] DR0: 0000040000000000 DR1: 000000000000000c DR2: 0000000000000006 [ 2132.068604][ C1] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2132.068614][ C1] Call Trace: [ 2132.068621][ C1] [ 2132.068631][ C1] mm_cid_get+0x216/0x6c0 [ 2132.068651][ C1] ? __pfx_mm_cid_get+0x10/0x10 [ 2132.068665][ C1] ? psi_task_switch+0x2e6/0x6d0 [ 2132.068685][ C1] __schedule+0x15b4/0x4d00 [ 2132.068707][ C1] ? __schedule+0x1713/0x4d00 [ 2132.068733][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 2132.068757][ C1] ? __pfx___schedule+0x10/0x10 [ 2132.068776][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2132.068798][ C1] ? __pfx___schedule+0x10/0x10 [ 2132.068817][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2132.068842][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 2132.068864][ C1] preempt_schedule_irq+0xb5/0x150 [ 2132.068885][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2132.068912][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2132.068936][ C1] irqentry_exit+0x6f/0x90 [ 2132.068957][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2132.068974][ C1] RIP: 0010:lock_acquire+0x58/0x360 [ 2132.068994][ C1] Code: 8b 05 7c ab fe 10 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 7f ab fe 10 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 28 d4 02 0e <73> 16 e8 71 f1 08 00 84 c0 75 0d f6 05 69 c2 ec 0d 01 0f 84 d7 01 [ 2132.069007][ C1] RSP: 0018:ffffc90000117910 EFLAGS: 00000297 [ 2132.069020][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 2132.069030][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13eda0 [ 2132.069040][ C1] RBP: ffffffff8b343a4a R08: 0000000000000000 R09: 0000000000000000 [ 2132.069050][ C1] R10: dffffc0000000000 R11: fffffbfff1f4211f R12: 0000000000000002 [ 2132.069061][ C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000000 [ 2132.069073][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 2132.069104][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 2132.069124][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 2132.069146][ C1] batadv_nc_process_nc_paths+0xdb/0x3a0 [ 2132.069168][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 2132.069189][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 2132.069212][ C1] batadv_nc_worker+0x429/0x610 [ 2132.069233][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2132.069256][ C1] process_scheduled_works+0xae1/0x17b0 [ 2132.069290][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2132.069319][ C1] worker_thread+0x8a0/0xda0 [ 2132.069345][ C1] kthread+0x70e/0x8a0 [ 2132.069364][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2132.069386][ C1] ? __pfx_kthread+0x10/0x10 [ 2132.069403][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2132.069424][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2132.069445][ C1] ? __pfx_kthread+0x10/0x10 [ 2132.069462][ C1] ret_from_fork+0x3fc/0x770 [ 2132.069485][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2132.069508][ C1] ? __switch_to_asm+0x39/0x70 [ 2132.069523][ C1] ? __switch_to_asm+0x33/0x70 [ 2132.069539][ C1] ? __pfx_kthread+0x10/0x10 [ 2132.069556][ C1] ret_from_fork_asm+0x1a/0x30 [ 2132.069579][ C1] [ 2132.070398][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2132.500561][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 2132.512381][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2132.522471][ T31] Call Trace: [ 2132.525762][ T31] [ 2132.528703][ T31] dump_stack_lvl+0x99/0x250 [ 2132.533318][ T31] ? __asan_memcpy+0x40/0x70 [ 2132.538020][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2132.543236][ T31] ? __pfx__printk+0x10/0x10 [ 2132.547848][ T31] panic+0x2db/0x790 [ 2132.551767][ T31] ? __pfx_panic+0x10/0x10 [ 2132.556202][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2132.562018][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2132.567402][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2132.573574][ T31] watchdog+0x102d/0x1030 [ 2132.577926][ T31] ? watchdog+0x1de/0x1030 [ 2132.582365][ T31] kthread+0x70e/0x8a0 [ 2132.586447][ T31] ? __pfx_watchdog+0x10/0x10 [ 2132.591136][ T31] ? __pfx_kthread+0x10/0x10 [ 2132.595742][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2132.600962][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2132.606183][ T31] ? __pfx_kthread+0x10/0x10 [ 2132.610785][ T31] ret_from_fork+0x3fc/0x770 [ 2132.615393][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2132.620528][ T31] ? __switch_to_asm+0x39/0x70 [ 2132.625303][ T31] ? __switch_to_asm+0x33/0x70 [ 2132.630079][ T31] ? __pfx_kthread+0x10/0x10 [ 2132.634687][ T31] ret_from_fork_asm+0x1a/0x30 [ 2132.639477][ T31] [ 2132.642785][ T31] Kernel Offset: disabled [ 2132.647112][ T31] Rebooting in 86400 seconds..