last executing test programs: 2m31.51919179s ago: executing program 3 (id=134): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 5) 2m30.782410692s ago: executing program 3 (id=140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0x200ab8, 0x9, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x0, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x6c}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x16, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b3470", 0x14}, {&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5", 0x5e}, {&(0x7f0000000800)="38c4340e8710b8eaedd392cbf07690d4a3f2b8eadcac25284b2afc2a941cbe880cf2d0823ecd83a7b84b4154e5a802b7de51c5b236647c77656a585c60798db780", 0x41}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44004) recvmmsg(r4, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000001b40)=""/154, 0x9a}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 2m27.341275894s ago: executing program 3 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312c", @ANYRESDEC=0x0, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (fail_nth: 5) 2m26.654053325s ago: executing program 3 (id=153): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0xfffffffffffffffe) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x1, 0x6, @local}, 0x14) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x8, 0x0, 0x5b) syz_usb_control_io(r3, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000880)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000009c0)=0x0) syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/ipc\x00') bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000a00)={0x2, 0x4ea2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) sendmmsg(0xffffffffffffffff, &(0x7f0000008040)=[{{&(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="f94bfb3d101fd5f52b50c6367decb920f7cb7c326275be61ab8f3b80a171e7c305c3c28002f7960043aeaee255f833d76c7d26ba4d0756aa6c184c8d90088fa10f16124885abc1f209a5a7682bb067a751a402fff5155fb06321c6e7e0177ce54138cf09c9a807a03c41568adbc4d4ca4c479867b9ae1b15fcfa24504d", 0x7d}, {&(0x7f0000002080)="5b07ee5558616b1fc3bea4126427d38ef56b17bd3e300c2e63e0f66398f615decf30a35a4a1bf10cdca803e01878c4f5e05fd05b4e0c064d9b22e4bf1d80a3cd69dd7e717941729748210e7178bb43106f8106cfacc7917e06c9cde06deafcba", 0x60}, {&(0x7f0000000240)="fcef9876357eefc88cb63dcb204d42605755218c2529cdb9b259a1cb8bf32bd7a8a91cfea2a1df908541cd2dde064ab4f5100310a8da47441360f5a6982cac2ad46249f2f3b46a86868dfa1e47a975a53af49a5db3ec81c811b794e629e7f35bfa9f30b35f3230bc90fac40f62614c4f623d108fbeb628000f50796bd16314375ef9318f05", 0x85}, {&(0x7f0000000300)="b27487c75a2f625fecd0ee57ad1bb78f2d426f7a8dab5e8c48a9c447d4a5cfb5fa4c8f574f50c71e5e247328fd75c5f81accde4ecc4312f024dcb5c152ec0b3361def4f74d1afc422b930ee948a318a6553d29228261a79a87427108bc755be797d37ee310a529c516371b0eae1e2bb7070ca7b45d697019fbc2548821e2aa2a668c83af65e7d15ff245c6bcbd0b351b65d97d7953ffb0e6f1f1cb47c7cfbbeaeab0d2388c6f", 0xa6}, {&(0x7f00000003c0)="ca820fbd17f95b57513224b8e538ae57b1db03b8d762e48d3ecc272b910dd431c78f37d5f1f427c188b2049e264d6639defc10b4979b93a8677eb8eab858eba6ae9de22a8c3a7d9663", 0x49}, {&(0x7f0000000440)="41372948bb987378b34111036c05954f551354bae8bbd1d7c4f81fd9403c2f7654630ea3ca2c8ef99243428495bae56286df4226ae7ecd59f656c22fead9683d25e14c938681f3b4ebe856114e7b679383ce38dc359d471ed78ba121ac21695b0afa96712f5f9779bac1e7bfb52dedafaa9735326356895d3712d9a277731306f70998ea93da615765d2010338509230a7d695733b81696e2298063a3b94c694e516b6454df4f7f407d91bbd853ea5", 0xaf}, {&(0x7f0000008180)}, {&(0x7f0000000500)="3574f372e3c2600107a4513fc2ba127b4ac3410728b5ad513a3af195e0b78b1337b89b98b2c024b85d46ae9d26575d51f23e21e9b1d5b048fd6b56b6ad570a4ad728ad7dad405d2510f586e1af89e9f11bd2914b25b8a063f2dc523caaf4c43c62c2e3b28f9ff17dffc8e1a5da08c4890029e80650cbbbf7ca84c9dd7a4f08e704573a42d94c3cf241fa7a37fb5812315f68fac6c3c2b92affd73d9a09d8fe11d57638601e734889afb6c58b3d9e6409b48a6b889c66b14d2b14248437de3b3a54df67cf569e8e8f1c8cc642b4005dff10dffe06574f9f0082f4758a91fedab16a5c88d581b5ad9005c8060f1b4abcb04a883e5adc", 0xf5}], 0x8}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000680)="1a5cb9e384e305fcfff6e56f93530dcbf5995933a507ad80e2e510abcc89b40e56bb1669cd7de8faec60640403153ea96c429c195104e0c72abf95557fec7e848e1a7f1edaa542bf10ff3ce926f97b0b4d49eab3b256e09835062c03d4aed8b16de9077f541bb1920366efcaabad74c5b55d36d53fcfc77901e5b24638e883b27d9e00e4634066187ca52ec99a95b058d60d924a6b99111fa55f2c7f19ef794891f2afd56149416204e8a406bd8658314ff5c1552324f2a0f3a1", 0xba}, {&(0x7f0000000740)="e4530ca9142a062a60acd4e3a66047bf5b73bbfdf1a022f9090d557f0036c4c17fe34f9feb1336a18852f9a0232a03151f8788918907729bfe36e92ce687ae943e18993fc3205123860aa7c8fe9017ba7ec82a4eff736f28d1d7fdf007d0002c1991b2415d", 0x65}, {&(0x7f00000007c0)="b9d35bcb30e813a8fc8731001aca3d44952d8e82a4d882f04ede3bb601a1a746f80678b8bd02fd7cfba6220cc6e4ab83a589be8ea2c4af2a1f597a963e1f28a5c8c45a960734a8250f9a6c7f6451439622d948b0b829049d43547d41716d8edb687939259d0f8de685a90adbeff322842a18ed2ded2c34f14b5eb0e15769731917bf6002853c74a0d128d17ae3caa8f295671ba54b96e210c20325", 0x9b}, {&(0x7f0000000880)="1707d68240e51e4148478a2d156e9e2a2f1367fda09e9e2bcc8839ee0b06d9a479344c", 0x23}, {&(0x7f00000008c0)="77be3cb7dfa8b21d729f9c4f16bb5a4d2ada53ba9161909adde9d45f555c756f376559c95638a4ccd4dc8e0ea60e794bbb2bdf02ff09893ac74f90a12d9c7f96ec8df25b45b39f5ce7994ca11122faccb2dc89338d850bb18527c51916e23c13a9a088ff6928f8664c29e5a1d4fe8939003761361603dcf04ac7b17fa47fa3fd3617bcf515f2d3cae427d626aba96b42d4bd5c34435682e931cf2c910f3aacb5bc3f4347af971a5ac3716ea29239ce7a1dfc0c6b14c489fac99865443a1729171425b0fd99a79b950ac054b24dc58c0559ea4d513e11d8fa38e6598499ce0a6ff74356d678615be971f3df80d768f32c5629cc", 0xf3}, {&(0x7f0000003540)="1653", 0x2}, {&(0x7f0000000ac0)="8e208a6ea54c3eee02c9b9eec73e450a7730e6bbbeb089180ce3ccc0ae7fd8e8bebe762a3ecf0933cd4a8734749586ab54b9d2c9774d5b59b9fd0503b93daf7604e3bb0a768796ad1a118ffb9c2a0ddb91f15407c45e564ab4f3cb0ab0ad386056c3b522307152491af94af6421b7336aa1db848fdc6d75eb53815de3e1da6e77be1098eda0a9d850391eb9b8d93508ea606cb4e26681d4388dd214b0194244feaad4e39769abf03019c8277d8358df67355b1", 0xb3}, {&(0x7f0000000b80)="e3b30abb6ca15101b10e5ae3f91d2618e0d99be31e4accd381ff960f503e9baabd", 0x21}, {&(0x7f0000000bc0)="3c311caaee22d6ceb1286421f2cc7c438c30deb0476970f6f674eb8f7a3c5da58724c0acf6497bcde4e4e7aa3f73a485f709d9d00eb76a11d53657cce36ea6c6f0", 0x41}, {&(0x7f0000000c40)="fd4bfacae294d634c27825a17e0bb31c3e40a7a7fa6a60186d79ff4373b7dc36436e13953be6efee93887822ffc6a9c33a8edd85a3dbcbd1c54429a3214d27a6832c875ec71811a30f41f924f5fdff77712fbdee088af6eb18", 0x59}], 0xa}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="f153ae7cd3270ba428626b6e81f13fbc850ff890defb1f329ba9a25fa520e8adcc2215aa6327197a255f95f0755df6ee437ad29ad576a6494c6fdde3eb2392c557b61874141202447975086656242eb62bf1d5063c8fbe4aef3faef26acdc7d9124ac43d57ab9bcb7b1d38ee1860b08ece1e5ec381ab4cfe36f000d85f9ddb29159fa55b0a3a8a5af0bc", 0x8a}, {&(0x7f0000000ec0)="d1e1cacd9a7f32f0e266579fd769e7450e50311d87dc01a7a4cde5bd36e85afcbd11bdc3359f58ddd7c04546a46ad07e76973500acccac1ea9b7811c916e9caa92901d5192b7ce954e", 0x49}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000058c0)=ANY=[@ANYBLOB="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"], 0x2130}}], 0x4, 0x0) 2m22.120227997s ago: executing program 3 (id=179): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1c, 0x2, 0x0, "11010100111400000100b64cd11e005c4b7c1500"}) (async, rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000069a000/0x1000)=nil, 0x1000, &(0x7f0000000000)=':{\x00') (async, rerun: 32) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 2m21.361880378s ago: executing program 3 (id=182): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64090102}, 0x10) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r3, 0x1000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 2m17.006617342s ago: executing program 2 (id=194): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) (async) tee(r0, r3, 0x60000000000, 0x0) (async) read$msr(r2, &(0x7f0000002140)=""/102400, 0x19000) (async) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r4, 0x0, 0x0, 0x1001f0) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) 2m16.839677022s ago: executing program 2 (id=195): r0 = socket(0x15, 0x3, 0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009040081000000000100000000000008", 0x1d) r1 = timerfd_create(0x9, 0x80000) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r3, 0x3, &(0x7f00000001c0)={{}, {r4, r5+10000000}}, 0x0) read(r1, &(0x7f0000000000)=""/162, 0xa2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c742000000000000000002030303030ff014f3343288d850ed587303030303030"], 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x2000a0d0}, 0xc084) 2m15.919779678s ago: executing program 2 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$media(&(0x7f0000000180), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0287c02, &(0x7f0000000d80)={{0x80000000, 0x0, 0x0, [0x1000000]}}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x40002, 0x0, [0x80, 0x0, 0x8, 0x4, 0x3, 0x5, 0x401, 0xffffffffffffffff]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r4}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r5, &(0x7f0000000080)=""/252, 0xfc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000280)) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x228200, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f0000000040)=0x2000) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) read(r6, &(0x7f0000000100)=""/159, 0xfffffe5a) 2m14.866460518s ago: executing program 2 (id=197): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x158, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4a34}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000008000100feffff7f5cf34f2a058564474e8cdaf20a7fc57672a7918a1fad4a7ff661f1ed988253f4079d5a6a387d606852d349614f1619945187697109a5324ee55406014a5b2861e6f7c28ac02be9b0651ebdec75691771af6e5bf1cb4cf702e0fd22d5ed9b42fd602bb3b947801b9491b0f5050d033717e725fc5cf74fd82c4201489b3ceb72d44d8993a00af0e308d2d8b104fcf25bffd71ba37322d51d8b1a72b451e4d48550c1b076257b757bd4ec7f4bd65352040f211b"], 0x1c}}, 0x0) 2m14.828175127s ago: executing program 2 (id=198): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}]}, 0x34}, 0x1, 0x400000000000000, 0x0, 0x4}, 0x0) 2m14.74817063s ago: executing program 2 (id=199): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000026002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000ab2000/0x3000)=nil, 0x3000, 0x16) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x1, 0xfffffffa, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x66, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@timestamp={0x44, 0xc, 0xce, 0x0, 0x3, [0x6, 0x0]}, @generic={0x86, 0x2}, @noop, @cipso={0x86, 0x49, 0x3, [{0x2, 0xa, "28c54a85f5bcb293"}, {0x5, 0xc, "006e6ac26ad8c5ddc319"}, {0x0, 0x5, "750df3"}, {0x2, 0x8, "5a79c543bf27"}, {0x0, 0x12, "839096175505399155ff7577fcf13adf"}, {0x6, 0x2}, {0x7, 0xc, "51b5c9b07274618793c2"}]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0xc, [{@broadcast, 0x4}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@local, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x1, 0x8, 0x3ff, 0x0, {{0x13, 0x4, 0x0, 0x1a, 0x4c, 0x66, 0x0, 0xe, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0xf, 0x3f, [@loopback, @local, @multicast2]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x6, 0x9, "fabfa051da0c1c"}, {0x7, 0x2}]}, @generic={0x82, 0x12, "3935cf11e4160bff99e7c11ca036a8c9"}]}}}}}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000780)=0x1) madvise(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x31}}}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x2557}, @broadcast, @broadcast, @random="c88d3bd2c825", {0x9, 0xa6c}}, 0x8, @val={0x8c, 0x10, {0xd59, "ed8278ed4ec8", @short="c73412cad5d3c97e"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040001}, 0x40004) (async) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 2m13.714526182s ago: executing program 32 (id=147): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0xd, 0x8, 0x104, 0x0}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2284, &(0x7f0000000040)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) getcwd(&(0x7f00000003c0)=""/238, 0xee) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2102, 0x0) r3 = dup(r2) fallocate(r3, 0x11, 0x100000000, 0x10000074000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r5, 0xffffff81) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket(0x22, 0x2, 0x4) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) getcwd(&(0x7f00000004c0)=""/216, 0xd8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) ioctl$BLKGETDISKSEQ(r9, 0x80081280, &(0x7f0000000200)) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r10, &(0x7f0000000000)=0xfe8e, 0x12) landlock_restrict_self(r8, 0x0) tkill(r7, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) 2m7.442180931s ago: executing program 33 (id=175): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x390, 0x0, 0x4}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 2m6.182920736s ago: executing program 34 (id=182): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64090102}, 0x10) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r3, 0x1000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 1m59.641943815s ago: executing program 35 (id=199): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000026002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000ab2000/0x3000)=nil, 0x3000, 0x16) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x1, 0xfffffffa, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x66, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@timestamp={0x44, 0xc, 0xce, 0x0, 0x3, [0x6, 0x0]}, @generic={0x86, 0x2}, @noop, @cipso={0x86, 0x49, 0x3, [{0x2, 0xa, "28c54a85f5bcb293"}, {0x5, 0xc, "006e6ac26ad8c5ddc319"}, {0x0, 0x5, "750df3"}, {0x2, 0x8, "5a79c543bf27"}, {0x0, 0x12, "839096175505399155ff7577fcf13adf"}, {0x6, 0x2}, {0x7, 0xc, "51b5c9b07274618793c2"}]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0xc, [{@broadcast, 0x4}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@local, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x1, 0x8, 0x3ff, 0x0, {{0x13, 0x4, 0x0, 0x1a, 0x4c, 0x66, 0x0, 0xe, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0xf, 0x3f, [@loopback, @local, @multicast2]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x6, 0x9, "fabfa051da0c1c"}, {0x7, 0x2}]}, @generic={0x82, 0x12, "3935cf11e4160bff99e7c11ca036a8c9"}]}}}}}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000780)=0x1) madvise(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x31}}}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x2557}, @broadcast, @broadcast, @random="c88d3bd2c825", {0x9, 0xa6c}}, 0x8, @val={0x8c, 0x10, {0xd59, "ed8278ed4ec8", @short="c73412cad5d3c97e"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040001}, 0x40004) (async) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 1m25.791052748s ago: executing program 5 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c150000", @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r2, @ANYBLOB="3000c7000201770605037a020f02040204c9"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1m25.37398262s ago: executing program 5 (id=373): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=[@code={0x1, 0x63, {"c403d149a301000000470f35c402c9968700000000c402792c3966b823008ee8420f0766baf80cb89c247b86ef66bafc0c66b8a2cd66efb805000000b9373800000f01c1c401a5efa60f00000065420f01c4"}}, @cpuid={0x2, 0x18, {0xffffffff}}, @cpuid={0x2, 0x18, {0x6, 0x6}}, @cpuid={0x2, 0x18, {0x6, 0xfffff2ee}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x2, 0x2}}, @cpuid={0x2, 0x18, {0x1, 0x4}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x10001}, @uexit={0x0, 0x18, 0xff}, @code={0x1, 0x5a, {"66410f3881668e410f326665f3420fc775d8c403656cbc94001800000066430f38825376660f6c9b54f809c143deab33000000c462698eabcd11df490f01f86665f041f79a0e000000"}}, @cpuid={0x2, 0x18, {0x8, 0x8}}, @code={0x1, 0x43, {"65640f01ca3645da370f0175370f01f8450f001a66b873008ee0650fc7b6167e000066baa000ecb9dd0b00000f32440f01d1"}}, @cpuid={0x2, 0x18, {0x0, 0x8}}, @code={0x1, 0x49, {"0f00d00f01f8c4a2092d27660f60e0470f2f0166baf80cb8efb7b38eef66bafc0cecc4419c5816c4e2c502a8a285e5b1d92966b8bb008ed8"}}, @uexit={0x0, 0x18, 0xf50}, @uexit={0x0, 0x18, 0x5}], 0x281}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000300)={[0x1, 0x2, 0x2, 0x0, 0x2, 0x9, 0x1000, 0x6, 0x0, 0xd, 0x4, 0x1, 0x5, 0x9, 0x2, 0x10000], 0x2, 0x2404}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x4, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) close(r0) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000480)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000440)}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000004c0)={0x8, r2}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x619}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2604}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x16}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc0000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x30000040}, 0x800) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000780)=0x20d02, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) process_madvise(r1, &(0x7f0000000840)=[{&(0x7f00000007c0)="a0b11e9e2265e84adf1628d70875533db8ad90781f912d0bff168241dc66ea644b628a6454a2a04e5c7fde21c5968a73ac85a82a6aa49a26a911c5d37122fb0ebc1b6b7a8e2e3884b24f1e5581e5a21534b4", 0x52}], 0x1, 0x19, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000880)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f00000008c0)={0x48, 0xb, r1, 0x0, r4}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000980)={0x28, 0x1, 0x0, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000940)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f00000009c0)={0x10, 0x1, r5}) r6 = syz_io_uring_complete(0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000a00)={0x10, 0x0, r2}) preadv2(r0, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/134, 0x86}], 0x2, 0x1, 0x9, 0x8) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000c80)={0x28, 0x0, r4, 0x0, &(0x7f0000000c00)="9d449c24826e7bb5ad42b0942dd7ba0d9a06b93b4e8543adc24b4e3c945f366bba040529a18c075657c8de484aa03995e6b5863e949eca055df1a52146b4f4caa86da25211c799", 0x47, 0x1ff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000e40)={0x11, 0x0, 0x0}, &(0x7f0000000e80)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000f40)={'syztnl1\x00', &(0x7f0000000ec0)={'erspan0\x00', 0x0, 0x20, 0x40, 0x8, 0xc, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x7, 0xec, [@rand_addr=0x64010101]}, @ssrr={0x89, 0xb, 0x98, [@multicast1, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001540)={&(0x7f0000000cc0), 0xc, &(0x7f0000001500)={&(0x7f0000001180)={0x36c, r8, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x81, 0x8, 0xeb, 0x400}, {0xff, 0x1, 0x6, 0xe}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf72a}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x36c}, 0x1, 0x0, 0x0, 0x44000}, 0x80) 1m25.188477667s ago: executing program 5 (id=375): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xc}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb276}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x63, 0x12, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x54) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060065580000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (fail_nth: 6) 1m24.75986916s ago: executing program 5 (id=378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x601, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) (fail_nth: 6) 1m23.905703332s ago: executing program 5 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a58000000060a09040000000000000000020000032c00048028000180080001006c6f67001c0002800500e13f00000000060001400004000008000340000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m23.642503882s ago: executing program 5 (id=382): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) dup(r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x29, 0x1a, 0x0, 0x100000015) pipe2$watch_queue(&(0x7f00000035c0)={0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000047442800c00018006000600800a0000100002800c00148005001980"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008840) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000240)=[{0x200, 0x7b, 0x5, 0x80000000}]}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902820003010030010904000000010100000a24018b01000201020724070500000a0c24eb0100010325fe81017ba43404020300fa09240304070304020409040100000102000009040101010102000009050109ffd971800707250101070d00090402000001020000090402010101020000090582090800000600072501022401f804554bd3c35715869a60226b135e65634c8ff7986e56b2f977940381f7e8db57c66d1bde901c2616a7b7c440e6d987d280bc24fedacef853b66fe3a5899cbaf2751094ddbecd4537291d1c8119a0c93716727692d5"], 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r10, 0xae80, 0x0) faccessat2(r1, &(0x7f0000000240)='./file0\x00', 0x300, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 1m21.770629361s ago: executing program 4 (id=392): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup(r0, 0x0, 0x200002, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc212}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000240)=ANY=[], 0xfdef) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f00000000c0)=@routing={0x3b, 0x2, 0x2, 0x7, 0x0, [@private2]}, 0x18) 1m21.382109906s ago: executing program 4 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (fail_nth: 5) 1m20.80500505s ago: executing program 4 (id=398): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe000078009106000000000000004a073e"], 0xfe33) (fail_nth: 6) 1m20.612555676s ago: executing program 4 (id=400): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, &(0x7f0000000000)="4e277d7808f7d93b12d6cadeb17f6eb1a30d5fcad87621a18f53c6c162f9bf4c6195a4ba466b9b10723e1c44d9da6c1ed615256e49c5fb43fa982ba27b4ad98ed17a323539a95b7f04c58820ef011753dbacb4c0748f16610c3a15db984d9dbc147355d36dca47cfcf5bf4fe179c5b97adf991a3629eaf81041a95f48478baccdc7bc263197890a3e572fbdc94d416ed6ead4ad7efb670612da33798049b", 0x9e, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000002c0)=""/133, 0x85}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="0401000010000100"], 0x104}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d3e2dbd7000000000511c"], 0x28}, 0x1, 0x0, 0x0, 0x40025}, 0x4024044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e746572000400028008000340000001"], 0xcc}}, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000001400)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180), 0x2428, &(0x7f0000000380)={[{@quota}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x32, 0x35, 0x78, 0x32, 0x6d]}}]}) 1m20.418899287s ago: executing program 4 (id=402): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000240)=0x10) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1, {0x0, 0xff, 0x2}, 0xfd}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {0x1}, 0x1}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) r6 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)="f83ffdec01065b96c1f045660bfa0a63fc35b9f6dbfccede845c9469d93812456d7e8198324786a54a26f0df9365a08196024a9ac3ee70a3010aa619b893b7ab50ed6d2f95317570916c21ce94653611d232b099d7d2b2cac87a591db35f795d1d9f29b79b7818be78282288ea1736189d8e6cbaec52f42702ab4859da57f666263d1a97d854c419f5e851b30aa637417a1bde0a89695b70e3f3a2fbfb6bf48b09b7d2b2260824a428fbd8aec97625a9541a071ee806c74a647374c5ccb66bb211", 0x3d}}, 0x240048c5) 1m20.304325786s ago: executing program 4 (id=403): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000004000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES32=r1, @ANYRESHEX=r0], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x95, &(0x7f0000000380)="4b216cc06dce0943e4d71a6fa8e3ba369777bea23222b3965c429614ab18492ead840842b7d073a1e53c2ac11ace421a1f0a19bc9c68393248ee5904b903d94d0aeda68f211790c4d5fb61fbb9476f0ca16d0ced1d5037288750e1ee8e1acade15851be81790543704fd62973a3b49b978b3fe0be68bc1ffbaac1fbd0425113925f2c44b59771e85b500"/149) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000180)="ce", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb9) keyctl$revoke(0x3, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x7456c2, 0x0) r6 = dup(r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000047442800c00018006000600800a0000100002800c00148005001980"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008840) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000240)=[{0x200, 0x7b, 0x5, 0x80000000}]}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902820003010030010904000000010100000a24018b01000201020724070500000a0c24eb0100010325fe81017ba43404020300fa09240304070304020409040100000102000009040101010102000009050109ffd971800707250101070d00090402000001020000090402010101020000090582090800000600072501022401f804554bd3c35715869a60226b135e65634c8ff7986e56b2f977940381f7e8db57c66d1bde901c2616a7b7c440e6d987d280bc24fedacef853b66fe3a5899cbaf2751094ddbecd4537291d1c8119a0c93716727692d5"], 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r10, 0xae80, 0x0) faccessat2(r1, &(0x7f0000000240)='./file0\x00', 0x300, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 1m5.170823803s ago: executing program 37 (id=403): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000004000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES32=r1, @ANYRESHEX=r0], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x95, &(0x7f0000000380)="4b216cc06dce0943e4d71a6fa8e3ba369777bea23222b3965c429614ab18492ead840842b7d073a1e53c2ac11ace421a1f0a19bc9c68393248ee5904b903d94d0aeda68f211790c4d5fb61fbb9476f0ca16d0ced1d5037288750e1ee8e1acade15851be81790543704fd62973a3b49b978b3fe0be68bc1ffbaac1fbd0425113925f2c44b59771e85b500"/149) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000180)="ce", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb9) keyctl$revoke(0x3, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x7456c2, 0x0) r6 = dup(r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x48, r1, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x10000000, 0x0, 0x200000d0}, 0x40) 1m2.584230087s ago: executing program 7 (id=472): rt_sigqueueinfo(0x0, 0x13, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x20c072, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x41, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x109082) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x3, 0x32, 0x0}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001480)={'bridge0\x00', 0x1000}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) fchmodat(r2, &(0x7f0000000040)='./cgroup\x00', 0x54) 1m2.568948592s ago: executing program 6 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000020000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000480140005"], 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) (fail_nth: 6) 1m2.408528974s ago: executing program 7 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001c0018"], 0x80}}, 0x8080) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0xb, r4, 0x0, r3}) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100020a000000000000000000000003000600332000009ffd000000000000000000400000000005000500001000000a0000000000000000000000000000000000ffffffffffff0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000600)=""/4112, 0x1010}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='c >'], 0x8) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "74b658a7aa0b2d59", "a4918a29c9ea8feb40a19d514e52f36f", "c7e0a3c2", "ff9019438d66c38c"}, 0x28) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x1e}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000480)={0x0, 0x80000, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x400009, 0x0) ioctl$sock_SIOCADDDLCI(r9, 0x8980, &(0x7f00000018c0)={'ip6gre0\x00', 0x5}) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000001640)={0x274, 0x14, 0x200, 0x70bd2c, 0x25dfdbfd, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "c3547ebe60e688a781694cd039a66fdc3ce0552fcb515028eddec2a9a9af9992e9861aece4bf7e9916e860cc3f7c1fd751d2a5aa3d6f1b0f56e6570460c876cb2dbffba6465efd9d15543a8e0d140c7f6a4e4cdc0fc2a4578aaf9d9f67e3174defea8139f0de0919d0c317b01a0ddbe7c0855d374ac9"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "baeebc368ab6130e4b05ea9c663c5a69f8b2e3f745db1ea0325249ff0131df54366bca220babb3c398a63910f58eb1e2a9b2481a0d803fd6e8da3a557fbdffc6fb683af7653b9ac706e8048c5ea16b2d92edb8be6b2c4ac17191d2e40d74a8a2f7d0b228eae6c74624172cce4cc231440aa9d580bad3ad1082cd9504e304b60982b1b1541636aeec4faf10a72c4033d81fe39356"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "de383ed12c4dfbd2f185d514512b447bda3e0ba6528f73d2d200ae0db1c62fb6e5e5416f5d04fe0300d9ed5b48c45d148357d09bcad38882494d4653"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "8ac30ee0444c71fcf89c5aa64ef48b4aa8c6a26adfbcf30c376ed6222442bb35f7222e381c5e9d0df4adbd"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "23426adff237edcaa6891ff08907ddcc56c51162c3813c5bd5e7ca5b"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "08a337139ff378d40c955d61c5e9a619db828f2dcbe599b56d6e58dbef92f1cbe5b383bd1fa7c54969527def02b33ad68f7f2bdb87163c3ed48ad14afa8ee028ad2a8a0bedf6e271974d7fbca32f0d18f052a30a6859372d06bbd0496a12465da8d49c5a78eabd0c9f499517c13de20cca4bdfbbfc914be0e11c7bccf69f4f532de03ed7368bd79732028e5e5e765fd14af4e679b70f13"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "0b7012b3473c22d5937c96e465a390d79150494ca6adf90da2"}]}, 0x274}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) 1m1.930638043s ago: executing program 6 (id=475): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400901, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x2, 0x800, 0x3cd6, 0x7}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) capset(&(0x7f0000000480)={0x20080522}, 0x0) 1m1.857448902s ago: executing program 6 (id=476): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000000c0)=[{0x5, 0xe1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @raw8={"1b28c02c97e8c88ddd550281"}}], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x13, 0x2, {0x3, 0xa0be0780d6235545, 0x40000000}, 0x2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x2}}, 0x20) fadvise64(r4, 0x18, 0x0, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x80195000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000007380)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x48, r1, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40) 1m1.678912327s ago: executing program 7 (id=477): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x34, @broadcast}, 0x10) 1m1.349412401s ago: executing program 7 (id=478): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x8, r2, 0x2}) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000140)={@dev, @remote, @private}, &(0x7f0000000180)=0xc) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000001c0)={0x2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r4, 0x102, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x80}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b5241251efce7f5b45236ff6178f313af0a0a9bc2358176d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ba421dffbe370884"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a5b5abe2a6b0cc569993c8b8931521fe"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4a763105babfa8a51a6eadfa93f0fcb44b071e863d84149d"}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f00000003c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000440)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000480), 0x8280, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0xaa, "ff97718c8a408f4754518d13ff7f47ae0859058324d03b93e2a193427d8f1e82980116eb88930f43136407c81887dfe2b3cd559a1d3e44ee4626314a853a21598ba18b854d783d5b5d57c96471079a4457968360ea6cc50afeff5b29b7662deb78e55e0642df6d86c1640f887b367cce2594b417df32a6354e892cf36dc5ef58808b49798e542b370b12faab028eaa57b53933aa6ea67adecd7425f686d4ab715ec617ceb8a6c4e786a4"}, &(0x7f00000005c0)=0xb2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r9, 0x1000, 0x4}, 0xc) syz_usb_connect(0x5, 0x290, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0xa, 0x58, 0xcb, 0xff, 0x1557, 0x8150, 0xfd1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27e, 0x1, 0xf, 0x8, 0x60, 0x50, [{{0x9, 0x4, 0x10, 0x5, 0x6, 0x24, 0xa7, 0xad, 0x9, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, ' w'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xef, 0x1, 0x1, 0xdc}, {0x6, 0x24, 0x1a, 0x6, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x1}, @obex={0x5, 0x24, 0x15, 0xce}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x401, 0x1, 0x40, 0x7c4, 0x7}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0x80, 0x0, 0x4, [@generic={0xde, 0x9, "4586b8a9d5166857b1d909ba3717ef170b39e7d6c0ab930feadfb12d6959fc229a5469843bc8f4e3fef26bd9a9c903c227e1b3e8cc97c8982069cb2e39f7845c1bfbed8deb0647bfeeaaf49b9877b584b872d15b1bd9d824d567a843c35c727d824da40db72c1bc62344cc43ffaa322ee159d3d82a866cbdf8442ed985fd6028923f9239896d7b8944f35911e921f0fda40538f29d537ab251306c0016e70dad2aa309c0abd0316a5e9fc84af1affbd7db3df2975ed6921747985b7347e9c7e3a383a620c0f23372112852b71a8e4148d218673db5006bfde8603ef2"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x418, 0x1, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8e, 0x2}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x9, 0x8, 0x4, [@generic={0x8c, 0x9, "0ff6ee3b0c40ba2bac044f59847953aa6f735282b0af056d1ead7d0d78d7e7095e660e0443bc4be96f041030e86253465207ca32bb814e7b5da7f994986ac2c9d355a38ca871a290d04a54439d3c7ff1a615195b01c95c7d5308a7b195c35faa27d8c4c9c384fbe8c6fb1698bf0353d326a402ce5c68041699b14a9af0540323db90324f8079a2fac16e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xf, 0x7, 0x3, [@generic={0x43, 0x11, "f5cfd4e43a05066e13abcb9a9841c2e56d0cf47d8c887628e0c6a81ff87ec3cae8c24b5299a4b121cacadab07f2a5e8a61d33d685b95f0c1106bde84fb5c673b17"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x4, 0x3, 0x1, [@generic={0x3d, 0x10, "7513411db9c1985532bf3ab9d93b5a851bd5755f5617320ffef8757147eb197df67d7feeefe115ccad4375a11e9b40bd166f40a6ecff71138ccd95"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0xc5e}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x5, 0x9, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5e, 0x2}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x250, 0x9, 0x8, 0xb6, 0x10, 0x6}, 0x47, &(0x7f0000000940)={0x5, 0xf, 0x47, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0xaa, 0xfff}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x5, 0xf00, 0x6, [0xff3f00, 0xffff0f, 0xc030, 0xc00f, 0xde]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x2, 0x3}]}, 0x1, [{0xcf, &(0x7f00000009c0)=@string={0xcf, 0x3, "2af46df92afd2603f99619fdc5ea7574bbc104c123f5b16de57fa9776d9b8cd111beccfecaa8b6207c96f3cc885b792e68218a457320315be560c2111545582e489fe7358d533a4c23a3e83f0bba000a7bac6a9b7aa92bc180b421d7b3310eaf55347cf8d80a4becc205aec338d69be45c3531b176028c821c9c6d77329cc612dcda636800b5dc8b6a1a359e93d112b94ef5a47d90590adf03d94656d19b3cdf699e75fbfd2f2d1586a779dc206da594d3934e4f0ae609bab9f08bc58b94b767a7177901accf7ef74c0880d25a"}}]}) read$dsp(r6, &(0x7f0000000b00)=""/92, 0x5c) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000b80)) r10 = fcntl$dupfd(r6, 0x406, r8) ioctl$VT_WAITACTIVE(r10, 0x5607) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000003bc0)={0x0, @multicast1, @private}, &(0x7f0000003c00)=0xc) sendmmsg$inet6(r6, &(0x7f0000005f40)=[{{&(0x7f0000000c00)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000c40)="4776b803d8061b893aa944beafc641e334217e7100506da6d2754f692ec43e117b9c1be6919f7a871fc2181b099220776b", 0x31}, {&(0x7f0000000c80)="9d557ebd2de51ee8c4ac9c36af9acb09bc6493c7bca631f33082f6dd2f0b49f96514e2ae3b6c401c2b3089e08ea95f70bc50b7775faede4334ff77a28cb728788f397cf852fe9fb91d765cf1052fcfe5a20c3a60abb122030ad5a9c61be5698ffb5809f984ddc615cf331a9dacae1017f68c764e4586ebd86e57505de3e0fd5ba7f8a214b9c27446ccc3f42b28bbf37af95af483eae2117f2c25d8d4f47dc3e1245287e2303a878d0a44d067253e", 0xae}, {&(0x7f0000000d40)="af32441e83343b80be1534ffe0a1be378df13914dd761386a7181c7a37ee80b9c7f6d826db77ac64079412af20a1ac70d23119af3ea3dad8ac8c2b58a8dc3f75c1736258405acf12a531d99d4cadd9b39069223d403eaf0fd61a7bf19a914539e3c89fef88ca7faad5c1e18fdde26af1f2f1e70208c9d5db6f8eb1dd3986f563018e8bdafcecf43d03e4baee3dfe94edb528c1c34c70e4f2f7374e3d70135daa41b07f85d51a3b2795a9f9b7170ba9490a0cf03d361c3c39a8687ad8d4345e3479e8630464e09f5c2505b6d98c17ae", 0xcf}, {&(0x7f0000000e40)="a57c5a0d92524a77bd0278b390a9f702891d747c64d2924e89e38f630af4fb06c301e12f1affff80ed0baae44ddc65900680207db3e61c914037519a5026583bc6793e26d6fdbc087e05485038f5d8c67d6c438b2caf7519f5a30800b07d88753865b634a61f88966c676da0b8a050dfe8e46cbe21b082e88c6f3788550f45f90ccd0edf54974ad20139", 0x8a}, {&(0x7f0000000f00)="3eb1ea0a2b9ff2f2e122417898569a79a7", 0x11}], 0x5, &(0x7f0000000fc0)=[@tclass={{0x14, 0x29, 0x43, 0xc07}}, @tclass={{0x14, 0x29, 0x43, 0xb}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001000)="1c53c2d25bab8645d1a861002a651bb97c145f5709248f34673c4884db687a76136fa377611fb1b229fedd64a3bddfe8c4cb58938220c80dddd2c9976f2a4cbe2f85988622ce9973162824cf44810bd0e506945f39fdd4fe4469e9535b9e4191caed03752bf143ca26ef5587bc2d9adb2e8354b8b27505172e5cb17523e539efa8c59cd3753adfa5e55e14e346364ce701ba3dee476891dd9ca6814d", 0x9c}, {&(0x7f00000010c0)="2d4d1aeb5f02a3f73197ed7f40e18a58efa4a141b09683f90a720c5f1b773560ccf85c8bea2a4fc40a27320f226bfac96681ea0dca5dd857054189179001496012ad7ed2e2dafa4b9e2feaffe7a2b27899fa3ebbb087d654419e9f17c87d716f07e7e8b629f9f3528ca2272b6a34219e262848ac6baf9b2048b93300a25af978c1eb56b1ac05e3d71f9d8a7988c38b7750908f603d", 0x95}], 0x2, &(0x7f00000011c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x67, 0x1a, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7f, 0x2, [0x7, 0xe0, 0x5]}}, @generic={0x6, 0x88, "9b857aa6742aa2f8552f84283b6bc45cbe0f231f99e8915f1fe258229e7107d36e598e486279c4e59272ecb793ca06f6f583674122db5af769e0a40b1d6313924dee34210bf3bc455ceb3e2d84d013a177f511360d414a9134604de66735ce782c299a2eb230a01fe0e6f7c2215f65adfeaf40080356b7d7471d1a2c831a3213ef2464ad574373cf"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hopopts={{0x68, 0x29, 0x36, {0x5c, 0x9, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xc}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x40, 0x1, "0e"}, @pad1, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x8, [0x4, 0x7, 0x2790]}}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x401}}, @hopopts={{0x70, 0x29, 0x36, {0x73, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0xa}, @pad1, @calipso={0x7, 0x48, {0x1, 0x10, 0x7f, 0x3, [0xf80, 0x5, 0x8, 0xcc5, 0x8, 0x8000000000000000, 0x9, 0x2]}}]}}}, @dstopts_2292={{0x1020, 0x29, 0x4, {0x5c, 0x200, '\x00', [@pad1, @generic={0x9, 0x1000, "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"}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x84, 0x6, 0x1, 0xff, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @local}, @private1]}}}], 0x1278}}, {{&(0x7f0000002440)={0xa, 0x4e23, 0xfc, @remote, 0x7113}, 0x1c, &(0x7f0000002680)=[{&(0x7f0000002480)="5cf30a63d45307a9e86d816d2aa3eb677f2c717a5c6156670dbc59b329bbe256326ae284b953d50c7f8872085f1369d0af14e521e3c5bd389a099cca65b8d9d3b4d431fc8e4022c4a40e531c1bd8d76c8506558ea4b447a318f1d1e74cae04e897e15fb02915f23080614ea351dc64d0d46c", 0x72}, {&(0x7f0000002500)="d409cbeaa4d922f8873033ca38895731277be79dcce562af620bc6468e26f1db", 0x20}, {&(0x7f0000002540)="f6d5b3d6192815a45ac574b96332e677c24c63a2c314e35d013e31172bd03202d346ff47d1804c22575b76bae4b787cd3fab9aa3a3ea100153d4884265a80d17d0b72f585fb1c414fed7cf8dc02b7fd6aad8f48a16024e82396776dee2c888ba3955fcdb7a80bd85442ab38b9f6365594ae8fe179512807cef3bdcda9c42034e903173452e69e70bcfa77f9fb08f366f70eebd3f1603a993e006913bc3d908ecc5da33688c", 0xa5}, {&(0x7f0000002600)="8728593825eba12477b18685d54b2f7584dce654d14b69ba58033c3726fd331f3a5b5471ea6997ccd00b393884b5b378f096352934831f8545395b85719621881d21ab712a568caa544ca4196b09e7532d4a3629b275043a4363", 0x5a}], 0x4, &(0x7f00000026c0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x800}, @jumbo]}}}, @rthdr={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x2, 0x5, 0x0, [@private0, @empty, @remote, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x33, 0xd, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0xd, [0x2e250209, 0x0, 0x100000000]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @rthdrdstopts={{0x140, 0x29, 0x37, {0x0, 0x24, '\x00', [@ra={0x5, 0x2, 0x7f}, @generic={0x0, 0xf4, "670ce6e2d31bee7c0a909f0eb741ba98db67d09c02438e37e78e26b4f11709d145dd9c285f47c469d53aa948967f1ac8e9950eea2db4f22eb15656eac1809ae798e60c54dbeb0ef87b5e3404a17513aadccb1c3384f4d293847b3ce838c584471dbc7fd8da416061971b73db9b16b9786be47c4a3e3f3019a9ba7188f9d597edf004abac9f2f7b129120e53d1c67aa65554c7317fe93599c80b948e4467eefe936c49f161509cae19dd01dce2100c5da79c4ac0928b0e3abc409d8b49f20279629942f9091257b0a556a020cef2fba62a50e59aa3c457f7364237acb2b1159b7e866a51dbf9d64e26ef10e5b7de33c19f4bdadc7"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x0, [0xb0, 0x5, 0x6, 0x8]}}]}}}], 0x320}}, {{&(0x7f0000002a00)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6487}, 0x1c, &(0x7f0000003b80)=[{&(0x7f0000002a40)="b41810d38f93ad84cea617fc08cf", 0xe}, {&(0x7f0000002a80)="9f5bc67d276124fa05509b11d6a289041f921701a46e5f26e6aacc64e83edff61e29202ed0898c51318e2e71eaca0e03f4d666d15ed6da8b27e2014fbca297b8a8e458a3aa0ad5326995616280e69182b7a9c73472b600eadfa4ad1d3a95c9bd0d09eec418eb70066b789ed51589455025feb7ab86d0d73860e21035dcfb5f88ecf827774fd63364fb87e811bfa5a871d1242c4623c8f340a1a8d47edad6d8089436e8026ab1e994fafc00a305f403e9b367c091776b7d6e4cff732a5d1a464921cf06aa974c4b80851e007adecc15a9201a983caae538a6c16187e0c0548a1feb4809fc248c58794caf145e4001be7444013e4c8ad27f41ea2d138e23f2b8ca5cf10424b76d1eeba9b87caf547b40f071df2b6b06512087ee6c5c81f4aabe78812923b60f5bb01abfc1129d01ea816e2d06b846e2c1a19623766ccb994a11d26dc9111019f456f4531078103ae95789e75a3baf8e6c8b701a027b6db75bd2a07b3207fc39142b1495bc6fca51bf899b5192842bad50b1f44d89351dadefcaa5b2bc192a8622e791b1ccc68d7f1b3a8fa295b398ff49accb51eb8b93bd5ed42384634511843f2f9da6f6f44895d86931a415ef30e6b02fd97d31c0a0b91bfdceca5038dd5f996b4248c6c31f3485cb29f4e5d9df5f366c7317afb2300a70f290b375849b489a14f209676fe18afd9909924f6b83c84f9eb1313416ba7bff9e2256b3f24ca808b6bc5bdeeac055695c94c8081989a8528dbdbb6cd5af0a1fc7c7317a8f6cff4dbbf6ee8b67496e69ba9d40071f7930517c7ecd2af70197f825eae90612be1f1d378eec2531ce43a8fe2ae34159a4bd9ec2fc0b4f19487b7987f6e4add76211b26690c0b51452104160f1339233ab6a983a12bf6221580831b6a8c471c054b53aa2e2837cfb1fe7bbf3be7c198d770160ad0e73b31b822f17d3e374fa395da3d57b1561b34e0b7a4fe08bcc4b98b8c8842a0f4254142fdd5e96773b93da081c57b69b521b06d629fe6c22cc82fcbfae37d2cc2559fb9f1a930eb7221b5d28b6929a68faffc071d5b3e1c4b5e0bca7633bdbb69bdde54ab762052e3f7b51d635b2e499ad32d81caf7fe9528a17456ab7267603bbce0947db9bb27d64cfb3b0d6f3d213dbbbe7b47c1fc8e7e1cab63a5237f37c57756c289df888a5e64904440688cbc82ee2883702556c6aec27529c919f5e21bcffb355c1fc725a1be7651012db896cb487ff6dc3bb69f9d61018ddb3313955fc1c3608fdcfb9e21b564943071ab2f9d4d1ff22428a9fe3ae7db8a31556d0c659ef479469f88e61888d29a76c5755011fecc3556b87a0ba3dafaac7c92e459617dd2105674cf05cbed447d1ccf399bfccb21f65ee67f9e709bfbe8859cd4b04258739b4c6f4a41edee6ad83e195c88398ebe77bba5522b04dd6b45d72625dec5386937ed0a9d66528faf140e793d982ad90257b222194aa432eac3886648b61ca6ed29138ac4eb3a2c3f4a5032368bfca7fee3dcda7c5a7633dae12e74367e9c38eecf1246faf7b5d6665ffd5672afde4c656f62537011bf452cdcc94a43afcfd449d0437a178c31dde73faa4485bba00a7c008bf1d913b6335710e639f9844d88937098c8a829b73657d182a6e2728e06465a572b86dfae93ad0799483988024cbd2961a687588eac03bd8c04ce5bdec8abe8b3c672271a2e232e6462f54605139343ecff37d85681412bb7930bf054b2b303146c73e24eff27fb16a06065821ed0a2796a40fbe59ca1374c2fbb0ce8020a6206fbab320376c5eaee48ea43c36b46d16928e3897ab86335833ee77bf9fa1920eceb135a2b1c0b2bac512a21bd6c1bf03d9b998cf3e1e37c88f3dffdd7dd045fc90a4cf1b359f82a3dcd5ef8d19c51e08d0dc5ee8c3c16665a482ab61e98400c1a50633645b1a0ec93bb01dc5dbca100d592b6540964628027e783de82ed5614c8420f302da63482b201b4b178809ee9ba4729bf50a16e6470235b37400bf3eb429547264652aa0cf501eeb7f9d4d8c039dfa5d5343ed7ed6025f4cc662ad03d5eb87d261b03d5dcc771f6da1bc9fe07f87afc23e5908f244c1cf9c08e850a6f8fa39ec539580f2c5edb385bc2282342e0100a9597a383587cb1c00da2a210f4cb23688be3c126e28ca93c209bec8b41019fe1b3cae6013cb053990c428fa0ad99e32497646564dfd8778848f9cc0a6f95abe0df377f8927fad5fd26ecdf627ae6ad3a1a28efca69096db422564b6840bf035c2ae01e2226439a55988790041d95df38dacbe781ed8c8026efee77c02d06a7b6c5b5f4d5af55c1433ca560145332eedd6a96f427eaf670ada0757016799f9d2d495c5cf084c4e89da16967646bc426a19fe32b929cd8a691f7702ecb16223d8d0d0cacb2975367a1cd045f443b23b9f1652a610ba127b3c5c4a0b00b13a76634bf03f24370214d3d96e487ca89f9d19ea2674ca1755e45a147492205a32827cd460b913991d3414db66208827a6e66efa93934bb2c90b649d24a5fdb82ab527bf737f77ea2f74b050ae947d53f1783c6fbe1ee04759fa5a9ae1fd5d39d9cc1bb8b18b5811c72d467ed0baccf2edc199e2fce5f7a9fc85b4b8f45bd71dbe537a92fa6da170688c46a9c2450bd7f4c6a456fa1a609106f3dde18f3ce617d368968a3932f2d151c63fc10e9f7a8ad181a01e1d1c12082007fe300a8b15041fecc7bd14c8a60b0ded67e758d89cfdf83dc9ed09354872e4213e17f3dbb57f1698a152ddc0981ecd5035ca08fb02ae5668563d2cead89465265440f79a56019cdda1e0ac98ce13388bb8248b1f6d4d365b69662554884f581e60eb627737184d11380ef53d5a12198b97ce1534d0d48387f5e13a8a5ae2e93c209479b3ad8bc5a144c23e811221b529572b00d1a8d2a3b188896fb0dd44624ee2510c4e75fcdba03b7bc8c71024092996628332a3553312b96f4e317d1efe7bb302a052effaf3ed6bf25d351a7e7519868ee2156b24d0f4dc39ce0ddbca3bfc4e50688af91cf0f2e1e0045a2e2b974083a20a8946bfb506b10cd18f80ef58ca4bcf5dce4673e5908f939515ae91b67fd96dfd00b3c46ff28d6a4c116f37a1e82f8c4c0e5da8ee2d0077efec57adac8a7ac690f31c8fdd0a254d1155de71e6cfbe34b285fdd219d2d4b29d7a45cef07a591e96f8df89308ab34b50ef177d7a4265c07b8c870646092fff2cf55cd49ee2f87681d9bef45bb72b3741ae66289d82aa0ed002e633f85c58c5ab05b4cf196358f0d96df75fc664b796684f3b259df185a2360083e34807fc79c993e8e0593628509a89f61499f48b61ef93de6609633e0bf5a38cd6d8b0e61a2961cb9b5313571923287995e062e8fe86a8e8e48ad9b6aa34dfcd96daf8b44fb845f70a3eeb4cfde5e5deeb942d62a0fee5a28825f1da649f68c31f8cd1be62972aa0481d9f481b892ac133357f728b798cbfab176a37cdc9d51e7117e98588d7ed82d7c3e792f1d158e6526e9284fa914f7e5ea0896c0a03770bf0f773945e80032730382691ccd32d10cf54b9f0f2cfaf8266d5efaa64aaacfcfe76f847c813f7fa246ae12abd99188a80430ff73934756741f6dcfaec523758d58dfc0908f7dacd3479d34db30ad3b03c9b4f9a84b0849a19f66da44f8a306f933d6744642f376274b0551611c1a34dba3eb16e22cd51e241feb9218bc7d2a24326d103809f4aa6f8f2a031543fc678105ecd9121a58344b4d774a7d1ccd0b43e372525268098ca9d0ee204b67cddb17148628123ff968a5959213d594b5ae2ba8bcfa82b680f09abb2bc545d9643bdf63246410d9415489ec3d0a2e96d7924b520a071d0c0940b34c49df81ae335faee66f3225395b3b8bed41238fb7cca74d64450728855c07b159e232c76944937c0f6a88065ed01f37ffa83f5ee9b1aa0f65fe34c86077e4138e6af5da8645d706bf1046293d9822e9b0d9a6d77ccf7c078ae4386e6258c2213cb70a38be06fc635dfb34a1b5ed54bb4043707003808a6ca0f700137fef6528a93508b3a476ab9a01ef1b2945446b4dcb71516929d49aa94c36db19a1729258123f730a36485c6fdfa5108442f0673437b9caf025625f9706db6933d2659535d183064813fc3307ba3eebc8d75bbbe678f94843bb6ffc0f97945db4ab6e876e38f8271d8e2426f7bae173198be4675120ef0c84901231a95a719606a6e5fb19cb11be9c512e70e0518099ff879a978950e7b482df9b0cbd4e61a43db998dbef7a9200f1ee05bb60904a7f0716df748a1067888cbdf5769c491b50a188f8e49111f439e7f195d4dd675d26ec612c72959a21e7d277d82cf8755768d39815b5af183a08c3ed0b24a2f0b323e1836a3eac29d377ba602eb5fbda97311ca1e850583da9504db2d49d7fa83ff62d1e7815c287a3eb436e74469309866b9c68b4e6b1fbee2d3b0aa27c9eea3baa6e50f7f6a1b5d1de383dabc5a53fa045a001efc3aec17c850b9d6076295c0083a44c1c1734acabc7fefb1ae576ee3e853ebc4d7306ebda5a545df04b9ffabe767a99b9929749cb10e39aa8486954db198d1e3653e67b3404507107a347863383a06eeb213891059ecb696c626452a3d2f1f91444686771332c40aab221437683e437123e71818e7795b78c31541d8acd2588077a2fb5d5ad61f0f9c4e9b0ad3c29e2ed82c0de1c12c0cf83d126e76e7a22f5a1dfceef79b38605c7771357b78ca22ed3a192e03bc9c080945898e7f7ebb93d9b2b988e6c9ae10f039ac566529d9ffcc12050007d084a0f5ce3f36ded0866a4f29b942d8d8e6189357b05b34fbfa9248baea79b92b59a0a86ba078322aa1cc713293368c01a8c4f2a1f23a06451fb9d56ab03e241ec989c27cd17206c240393a144c079a56f7c7596b4f755f967da73279b4e784d438428f89987c6d5c827fd2c11a4d6bcd5472bf718281e756f6c7d756a9ba0463439b2d09eaa22ef676616042102bb975da2b7ac742c934e6caa4db4fabd61bfb4fe8c4cba59b5912b3f42be706779a89c05c9ee83ec4590a45909ff68ab1ec25a3d8432931f5b56b3d30fddf75de28cb873ff307432a7715df1cd9d3b30a6a3fc93211284c5750bf5363b0ab31c34e13da7c64bf4e8d3670ef288a2253bf016e958d6759fe3e0b7042698e15232443a6509dfd42a4b4084d96983178825c6055ff639b63df05d1c1357beea3ab6d1a456a2a52f29aabaa7043d8705bf4316d07a7abb0525e9bad18103e3fdbee8bd329faf7d299775471699327ba973cc6454f8dde0cc39be8dc185c09f69d9972ca5885e26a59783c37144292fe3ddc786b4f512f2f19c57c85415614c31143c083551d19a2909fabaa683a3822d38cdbe839648bdad13525b188d28f7c0bbe697cc0412eed7dcb5183c1bb4f8e545ca328a8c26ae1247d8c76f1db28f6de5e3ef1312db45277a1942eef712ce31169853815821e05194d6e67a63570601f5a2a1e9c04d4dd333c83c08e02c58797c349abc86e533f7a01263a08c96fa02d1db119d88ea429b6f50811cd0e7042bb2304e670b249db0fb11b9cab7df0b62e6779f799b65cdb0c995a7e9ce422b507d1af29b64e746fdc811a2a65031c8a29e4dafa1c1797e55ca8c4c58718dc5045dbf55c57c9efc511cf5524f8d3e25173d9149e2c672135bc1ed0e3d6aba5c3e017529e24f82d4e0bd1aa66d8e0b3c492746879141343d02153cbc1a5fb2c7e745067df4cdedf967302a56deba2754c6edb2732df00bdf7294794bb2e2f040831f3423eb402d0b885fa38ad06408e10", 0x1000}, {&(0x7f0000003a80)="717d1b82db63a564e36cb8b27e9f9862a134cc5bbd3d1ad08ba550d16ff33c22fb1240fce548e38155324b10c00cf675256d85c8a083cf959673832dad8e0f5ed36b240c3b7e3e5a317f9969662ade09d7bdb0d1ce5bacaa744ffe0c50b7994bd06dafa5501e3a28317bc756c36939d1b8c1cbc8842864e91ad2ff95cde7cb20c20432b333bd6ab78a198e8d3edde9e64990a97ff1e39ab33408f0a6f173691f9bacf5c6326ac6d7a2bb91055bd3cf3a6a9e90038414c2f092185299486e4e3198094e4a1fe8b6", 0xc7}], 0x3, &(0x7f0000003c40)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}, r11}}}, @tclass={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2, 0x3}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x6c, 0xc, '\x00', [@generic={0x6, 0x60, "1bb8bf4e6fec5ce8c539c6dd73a5fccf245b5f9e1ace1a6d940927c1c71b7e757235669b72466bd4535752c311820931370796d50531b90bb54c0ca88f47c468d03a057102496ff0db9ae67be11db93dd260538bb5bf9d8da1cf66ec27761d94"}]}}}], 0x100}}, {{&(0x7f0000003d40)={0xa, 0x4e23, 0x7fff, @local, 0x7}, 0x1c, &(0x7f0000004280)=[{&(0x7f0000003d80)="892ebb5c8e03bed835d335e6ecac81437932621478508f4df6d0d5e38662821fac4734c24cc7d321fa6b0f1d6f408c763a08a11a1d77e7e77dbd27a102e1e11dc73b7bf494befe87b8a4203ef38388fdae3480", 0x53}, {&(0x7f0000003e00)="7b59c909c24863ed6de2e264d0e69ed44ddee0f3c99f63f5fa58bdfb06baf442e193f0e578fbda290b2da35dd140549b202a067c6cef6ca2d1a266fff114293f68969ee4e2ef0255b0db3b29e1812301045c1d954416af29c3392cca", 0x5c}, {&(0x7f0000003e80)="b326373754f841a4815997e0d3bb24d1a3b42218b169d61eef2105bf262fe0270a0506602f3f63407c80ebb7ebd55adc38e4a14f71fda21fe2d41a76ad336c92b9c4f285352bcb574198fc4a45153cef03e20d3d93f16c90152458bdf058996566c16fa9032fe29160fb7f4fc9eafc6049bd3ff346ef0f0cb7de4a7670b16d9305889ee97e94740789128b0b08ef6d3adf7c1a9ab17b91588dfb6fab061865dadd4fa807a988bbf2288b79a49fa8ea03fe087120fb74892005a8fee83d379f2008", 0xc1}, {&(0x7f0000003f80)}, {&(0x7f0000003fc0)="8ff60e4cf2066954eb8d4b2fde10ce2f77f4d3bc7fb3169522c4bbe0ed9cab29f15174b5dd6f6cf138ba19ac4717f2ab641156c33748b317a29ac0c1699e2957395c41fb5fcf6c9ccc5c77bea56184ba73f171f1d7acbfdc31e765616db4524901c429a28184e88ffcdfc953754d8c272879425d5e5de7a47e389782bb1e8c6a37290a95e2922ba9dec820", 0x8b}, {&(0x7f0000004080)="a0ff1eae935c0dcd4e4773f799b8136e4cfd21dc22cce704b4c1699f6b3371f37320bd2c4677606c8327cec19c49f4b3e47cb1db1ecb71ec8e46c401c21d47e5403f9980a6aa13389a1fe42310d48dc8e65f3618e1859d6662a76899b6847b3d907467736b04ac06b4203a934cfe41f6dffbeca22555461c008467f4296c49f18277cc1b6c4954942087ccd274c8ed05b1d11059129bf7fba7aa54204c74850edb9fad7a4e22ea5e53cf4db414e2b60a605598d1f33827072e51ebf079a0b4323d8d4c34b5fff6658961df", 0xcb}, {&(0x7f0000004180)="a41d5d5fe37e1f154fa9ed147752116cded9a3bfebd36790a2729812cf64766838583c8f7dd8547e8740de0aa68294b41800343b94fb623760dba2ed5d050058b55d0d45817745742fc9f11fea2819b16a7c456aec43e1e2f316e5dbcb6ea6cc62b057b39c3d17", 0x67}, {&(0x7f0000004200)="c6605fb262ecbbf155045e85f69578a559210089f4475373b19781327cf0f028748a23c6304e677f3477755a709e75f600c70d2a085f", 0x36}, {&(0x7f0000004240)="22d462f2bbce96021569f8d23f453005ebb3caed9cc5f8899489f09213ebdd", 0x1f}], 0x9, &(0x7f0000004340)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0xd8, 0x29, 0x37, {0x89, 0x18, '\x00', [@generic={0x8, 0x88, "a3c9541d0dc9cec738f3f2c2924856cd562534de2b94805a41cfdc765ea74e5a5ece5b05bcbdcd835b80a80560ba75ef2adecd78724cd454b63a9ec8653e0fd93332ff088a039510608844ff0f64d1cce811be7f2a03a0a0d39b8cc63a5781a56644fd5341576e98d5f6c206cd786e4ad4c4a5b939178136f3691c21efa62207508a8766bcc6472f"}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x11}}, @hao={0xc9, 0x10, @mcast1}]}}}, @hopopts={{0x60, 0x29, 0x36, {0x33, 0x8, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xe0ca}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x3}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x180}}, {{&(0x7f00000044c0)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f00000045c0)=[{&(0x7f0000004500)="4c0edaf82b1dfe0aa789bab1eb63e57e781c7ad760c8cc223f90662503b7c91a3e274491ae813042333da0f877b283e91954672abd268023809615f877e20f4383cb184c873489e9efa4d43c25e7864863f2ccd22a435d2d6652329a6f10923026a8b70de429b00f5f8272a253deb185e1cbc7c8df7f9b72940cc393f48c43721e07f92f91cfa4a24ed4ed28902f571d393c68c216", 0x95}], 0x1}}, {{&(0x7f0000004600)={0xa, 0x4e23, 0x1d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000005740)=[{&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="0cbdf2aa7b0a61e9cd1ba28702bbce2454a1ba009b0a1caa939f52d12271aa7b4c4f900598420e8e0287159909bc69e575c572777d07665d096227fc5b6bcae0bc192f0552ab106edf0f633c3b627e40a252457b611bd93f2242885dd5e6f4f3d7af488f587a567f43", 0x69}, {&(0x7f00000056c0)="f1ef242bc220b3b942f5d497260afb4f514159838a3829ef45bb718c88d2ea16fe898dd30c371310ff6f7503d340afc4c4053f2e029a89a3a59d88131f175d3efb45dbb876", 0x45}], 0x3}}, {{&(0x7f0000005780)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c, &(0x7f0000005b40)=[{&(0x7f00000057c0)="f30d62286de5f08612ba957ddc8129508aaba9142b04be8cfac2b933f7a249f7e2ca5e1fa0c92bba4732c8d950a972cf927c4e48aa6b94326e5e4d74ba8fa623a9cd79cd8342ee5862d0daa6d101ec76368e70da44cc0b5c99d95b1092499966f9d66347e39d0cc5c57f1d60df8568ffd52cd31506d7e5952ddcc4a724962771c69f9f6ca813812e5234e07e435fdfd5353d509a59dd57300f890661b7d38809208f94fd492267604c884bf643fb593da7e17e5b65a83618dbfc4c9f4ee0098187634f9d6751e7cc5f1c2f3150a82f54004d2bebf43899d30c0416029f95d135", 0xe0}, {&(0x7f00000058c0)="454847c29175dbd5f67c9b0b57c42ca4a735efa5567c0961b595f3149257f9f644c34953f442e1152ae97359cdcbe7ccaf20d77b07d263ccbaa97b69f7952088ede444af52c1d1e9ad244620251c6a1c4fa336d06320f1454b582643e9f073a2170f5e7f8dece265c352dbb9d2e0c091304dfbf4ba6dfe484531120be52da30ab1bbfb9b52648d7356881dd980e1", 0x8e}, {&(0x7f0000005980)="15a5f774e89deeaa4d3137b2078c166e87dc8e0d26568f76c507b4c102fc1c08", 0x20}, {&(0x7f00000059c0)="2caa5d95c9", 0x5}, {&(0x7f0000005a00)='g', 0x1}, {&(0x7f0000005a40)="74eefb9757cc19a6b1f45625", 0xc}, {&(0x7f0000005a80)="390f4a99b36df88e97d9f8cb11f247634a63d12a1aad95e263aaa9b00706ddf22e305a8080ed1e0a2d9d115f0b6b8f62cc6c8e467d153527de5524e21e2e0b85d3811cf79051eaf031553ac6745148b450cf6a56a25f9871def8dca0ef63e4995279cefb734339fd53a1b2bc5e70cb5575a0bb57ea8b0642d8cf8eea2b2dbc9b5fb6f07ece52f85f5afdcc3ca45f206245", 0x91}], 0x7}}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000005bc0)="6829a09d2c481de8ebceba7cc0ecbe440caaef42bbace043e8fe153d820775037c24c75a629590d6b736b67a8795151ec16bf9d114bb4a3fa15dea41603ea7b1763f53bf01ca2f55d5c0d91b0efc6c74ca49056c2b5e8f7bc99f4b66be68fc850366ca38d538f648cb5040f9573131282a38fb8ebd1e3090d91dac", 0x7b}, {&(0x7f0000005c40)="ed16ef765e60cbe61f1a79503bb7c0478a5a898740d022cea57c5ed743dcaed221fe8970fdf13541a9dffd254ae6778c9e3b899629adeb3fbd9f821da48458dcda35e6755093031b33c610b677a06f7e5be5112dd9e52276c73437b9cbb6c7d260682fa349e2105ebef74169d8542bf7901c4578656020ca", 0x78}, {&(0x7f0000005cc0)="a7feb210432dce55d698d893688bc4097bc46b12854ced31fe1db4308341142caf180d7002ced36ff61d49108793acf208d59145546a41bd25a03052f8b518c49b7b65cc4967fecbe6b21af73125678e4494baa48130edfccf6597a9f23ed16de51f59a8fadfd1371c25bf3f0b1e21ab169a40212b6745ca3479d51d03db00fa864bdb4cbcbea47fb255d40e9ea0edb0eec3a3cb4715dbc13ca89613d2723589002dc9c4e79d1ad14f8ff59224cac185d73d4908582fb6c8d5cffe580d32b553eb21e23e43a644ec7eec4e0718d1f7afccb657f1506b710fdf4061864a7f7d2a", 0xe0}], 0x3, &(0x7f0000005e00)=[@hopopts={{0x28, 0x29, 0x36, {0x5e, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xc}, @ra]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x3a, 0x11, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x4, 0x83, "8f2c4fe1cbfd9e8e04fb345f238f9c0c2adc1ddc9473d167caabf72be60d9e0c18141c938dfbab8b51aa00227422b27cb9dbdc094cad60c01d4b9742114c10cc5e0e9315cfb51a49b8c5a8c2fb9822577918936b3c54009dfd30fc99179d6d91dfc7da2a9f2761df46673fec7b275fe16b1f4f071fc1541c47972ee369918fdb6badda"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x8, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x89, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xcc}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x128}}], 0x9, 0x4000004) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000006180)) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f00000061c0), 0xa02, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 58.295920797s ago: executing program 7 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) (fail_nth: 6) 57.674572029s ago: executing program 7 (id=480): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0xffffc000) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0xa, &(0x7f00000000c0)=[{0x80, 0x81, 0x7, 0x1000}, {0xf, 0x8, 0x10, 0x7}, {0x6, 0x4b, 0x6f, 0x7}, {0x1, 0x1e, 0x17, 0x8}, {0x1, 0x6, 0x7, 0xf5}, {0x101, 0x6, 0xf8, 0x2}, {0x4, 0xfa, 0x4, 0x8}, {0x6, 0x7, 0xa, 0x9}, {0x10, 0x8, 0x3b, 0x7f}, {0xfff6, 0x5, 0x5, 0x7}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000600)="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", 0xfd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x386a, '\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a000600ffffffffffff0000060066001431238a2000330018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 46.700638074s ago: executing program 38 (id=476): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000000c0)=[{0x5, 0xe1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @raw8={"1b28c02c97e8c88ddd550281"}}], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x13, 0x2, {0x3, 0xa0be0780d6235545, 0x40000000}, 0x2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x2}}, 0x20) fadvise64(r4, 0x18, 0x0, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x80195000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000007380)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x48, r1, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40) 42.407444827s ago: executing program 39 (id=480): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0xffffc000) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0xa, &(0x7f00000000c0)=[{0x80, 0x81, 0x7, 0x1000}, {0xf, 0x8, 0x10, 0x7}, {0x6, 0x4b, 0x6f, 0x7}, {0x1, 0x1e, 0x17, 0x8}, {0x1, 0x6, 0x7, 0xf5}, {0x101, 0x6, 0xf8, 0x2}, {0x4, 0xfa, 0x4, 0x8}, {0x6, 0x7, 0xa, 0x9}, {0x10, 0x8, 0x3b, 0x7f}, {0xfff6, 0x5, 0x5, 0x7}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000600)="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", 0xfd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x386a, '\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a000600ffffffffffff0000060066001431238a2000330018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12.517764723s ago: executing program 0 (id=663): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2a200, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x2}, &(0x7f0000000040)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x4a8, 0xe8, 0x1d8, 0xe8, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000600), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xb}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xf, 0x3, 0x3, 0x2}}}, {{@arp={@empty, @private=0xa010101, 0x0, 0x0, 0x3, 0xc, {@mac=@random="9873986125d5", {[0xff, 0x0, 0xff, 0x1b5e58bb35b6a4be, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x149, 0x7, 0x400, 0x8000, 0x2b1, 0x2, '\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x82}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4f, 'system_u:object_r:getty_exec_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x4f8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r4 = syz_io_uring_setup(0x65a5, &(0x7f0000000380)={0x0, 0x1, 0x4000, 0x0, 0x2ca}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6fd8", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x110, 0x308, 0x4, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x527, 0x6f6, 0x7, 0x5, 0x2, 0x1, 'batadv_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8001, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r9 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01020301090212"], 0x0) setpgid(r9, r9) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)=""/92, 0x5c}], 0x1}, 0x2002) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0xc040ff0b, &(0x7f0000000180)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x38, 0x4, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x82, 0x10, "5a9c5f0bb05aca928b29ce815130"}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0x8c, 0x3, 0x6, [{@remote, 0xc0ef}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9a}, {@private=0xa010101, 0x6}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x8}, {@empty, 0x4}, {@loopback, 0x8}, {@loopback}]}, @timestamp_prespec={0x44, 0x44, 0x92, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0x58}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000003}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0xf3}, {@rand_addr=0x64010100, 0x3}, {@remote, 0xf2}, {@local, 0x10}]}, @rr={0x7, 0x1f, 0xc3, [@rand_addr=0x64010102, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @multicast2]}]}}}}}) 9.363764182s ago: executing program 0 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x4000) 9.033804019s ago: executing program 0 (id=682): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000006c0)=ANY=[@ANYRES8], 0x15) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x1, 0x6, 0x0, 0x4, 0x10003, 0xfa, 0x600200cc4, 0x10000, 0x4, 0xb, 0x0, 0x0, 0x2, 0x1, 0x6a, 0x2], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000000fd0b120178e00102040000002d0002040140110904df550258f9b8060900000100000000000905051300040f060109040c0800960b920b"], 0x0) r4 = dup(r0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(r4, &(0x7f0000002c00)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) set_mempolicy(0x8000, &(0x7f0000000100)=0x3, 0xfffffffffffffffe) gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={&(0x7f00000002c0)="b66ac2f74ffaef48855da4eeb586beb70c0b5681c3e55f38d438893e0b8e618941b5cda0eff40ebbe4c7a422f3d51423aed2087ccb8733f441f5ce76999a33", &(0x7f0000000400)="a79a5ee30be419a31b4479f085d89b11"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5, 0x200000a, 0x1, 0x8, 0xffffffffdffffffe}) set_mempolicy(0xc001, &(0x7f0000000180)=0x1, 0x3ff) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, r5, {0x7, 0x2b, 0x80000000, 0x40800, 0x1, 0x8, 0xdac, 0x9c22, 0x0, 0x0, 0x10, 0x8}}, 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d5184aa085be58dbe9d44ac1972fe1e57880d834d72339076510fb8bb6c6be89f62a898f37a6ef85e4d0b72c6bfb08c37bb1d5a0ab428ac1cc8adae238d30239243f57058af3f66ec79989c80d77bdb6094acaec070b959444acc1e7299d592c64ece9dd6c266126ac0e57c369497c6292b524e6d868f89958c90cc8d274d94fed9c9e36e37ac744fd53b721a9106c5baba81b6037bd62e22e05c0c07108c39e213"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800040, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESOCT=r0]) setrlimit(0xb, &(0x7f0000000300)={0x7f, 0x100}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) 8.664591633s ago: executing program 9 (id=687): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 7) 8.438539386s ago: executing program 9 (id=689): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8009) readv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/130, 0x82}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00'], 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x14) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000752000/0x400000)=nil) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x10) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/237, 0xed, 0x3, 0x6, 0x3, 0x5, 0xf61}}, 0x120) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002563a613a6bbfdadc91e12f2bedb000000000000004831ff48c1c6000004004881c60001000048893e870000000000000000180000"], 0x3d}) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00001cb000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000100)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) close(0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 7.543286393s ago: executing program 1 (id=693): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xf, 0x3, 0x2675c843) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fadvise64(r6, 0x4, 0x1000000008, 0x2) mmap(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x2000000, 0x4020910, r6, 0x1) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0xe, 0x73, {0x73, 0x22, "d1c2d5f571f4730ba4f9824edb903c57d0218305a11ede4132a59e6b7c9aa826b7990808030dd206c8e6d8944e2275c614552f5cace628962693f957d85f666ed5fe4b7d95b75cd61a5faaf9818f76427adcd7f8b8c67bfaac3effab8026b7f1420654744b737a1c7301b25839cc557e6a"}}, &(0x7f0000000100)={0x0, 0x3, 0x60, @string={0x60, 0x3, "4e89bbe64d73fd40ec52cbe067e8186669d40c03899db68da170eb4621c9a7b9c7f4c5b0afb16938fd7af12273869f9ceea7bd65af12eac70459adfe6651a8c9d13f4c737543787bdec5e3ca3ee2bf577dacd7e7ef3379b0e81071fe3ee4"}}, &(0x7f00000001c0)={0x0, 0xf, 0x59, {0x5, 0xf, 0x59, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x3, 0xf000, 0x7, [0x0, 0x7f405f, 0x3f0f, 0xc000, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xdc768209e1bbee27, 0x2, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x6, 0x4, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x7, 0x3, 0x6, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d43627aed4723eebe591a69b40ec0831"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x2, 0x0, "823fe112", "59ee9338"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x9, 0x2, 0xc0, 0x4, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x16, 0x16, "c2da9b8fb105ab090cb22a889424cc0181825cb6fb57"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x1000, 0x20, [0xfff]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xa12}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, "98dd"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "08c8"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x5}}) 7.439039529s ago: executing program 9 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x80, 0x6) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xffff, 0xc4d4}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4048800}, 0x4008081) 7.254652423s ago: executing program 9 (id=695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000020) 7.214674621s ago: executing program 9 (id=696): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="232587dc8edf7d68eff2d4d58151f9a1d027584728be94210baec609cfb9f4f12dc648d926728d17383da79c2a5286ccde8fc25f99045cdf42bb5a277659158c0f2d08fa4b785ad6dafab3c007c062ca0fdc9fd408e048b6eccc5db6b3bc34796bf1f6f53742350da7e683b87e83e586bc1a9e9960f7b301518b5fa1090374b581581d9e33165a77670bef205469869c144f6ebca178beb677aed821c711cd9335a06d8e8bc195e80009c0b041c841ba4d6351f6af0e", 0xb6}, {&(0x7f0000000640)="8c5237b9242a595e6dcd24d0f983641e34262fd5a1ed9f83e06970b6ba3f29fba7f20f9c6beab82305c1e918fea4693064a366a80f0c9fcee7fd4585ae3889e062b0569d6c10f660233df18f19964bcc9ad4ab638962b49496f90b17565b9237eb6227a1f202218adc1accb163c9305a216acf5bae57e2912e6929daf74f43a1cb2b447a56c0672f30b7cf45e069037d0b661530d7e926f74bd6f439a2b12d5523d7323e", 0xa4}, {&(0x7f00000009c0)="8b73faccb49c333264de748dfed20749da939f576c9fde9c94a284061e5144d031f04148d1098015a8932a5b397b90abe8a4def993408e90dd20e7821663a30d6a7e21061784a6f182613ac8ffbe3fda338e6b2381d70f0631e6ba99049d8ea04c1ba77ad505bfbce3b8f88dead4eaa7f95eff994ec23beb4a625a2d31d9c2cd7962f4ec730eb0d75a12ebfaa004a0d66e5757f0b33a966cdac9c2889d178ca618b73f0b4c40a03708d340710ac900913e5c3a9590003e9e2e0b16c4af8c0d12491888b9fb45cab7a42f29c5", 0xcc}, {&(0x7f0000000ac0)="ef0f823b1a4602d4da04579b36fdf6684a5afc44ecad23e308bfb731674c0f9ffef203e281c110e53f742a2665c95c8d0c4c7f2864d4b70ba02029f85884385550f4e3bb228a49bd3fe02ae74446f2c33410236cc6c9fab616d93b3eae59a41d2260f44fdb4d2de9c2d102baa1b44f089fd8f09f2a71ed17688a91e0ef43782db2e90a5329e6603a93bedf17ed843438aacc2a83a265b6e4b6edb49e381de9244bbaeab5077289071148425a02905f8a6c0016fc33afa83aa2f73983ae96b875d61de7", 0xc3}, {&(0x7f00000003c0)="32c528853233b20c6d98d577dce5e3b2482397769a790451ded2d90969aeef191e9d44c35b0bf99634225ffe0c810b8e14655dd2553bec659c2b91f3b2893e733a6ec55f963ec53184a5e7f5d16c5418eb6b053fa7be43460a9536315842ca9be6adc46b70", 0x65}, {&(0x7f0000000bc0)="5c06ff212ff4729a575cb2d949d68aef2b1022a3458a3fba2f49428c82519a4b8759e02d0eb06c86547918614af942f39ed45562794c47bd193d58e10480b9041a0c4d5318c395bcb73166cd3718eb789d75ffebaee5d8cc231a6c8b62c31fa3c345b826e3d608c51a929e71336d16c08b7d123d6b81f0424452795872bbbd8961ba553bfc338611f29eafa5729e937e200a7211de108f743d3917c2dfbc99113ac5e0553eed351a0b23478ac0fb33714b48cb63e2ff67bac14f547d30337ea1df7e1ef5b1e483f4d9da80fdbce8f6ce81dc1c", 0xd3}, {&(0x7f0000000700)="cfcdc9ffb0c02c826cc52869a4f3e89ffc4c2412c8d84a91dfcad15b133e4cc21f8eaf5845ce02305b5bd2b0adee70638e0a3b1eb698abe11899d4ee445c5bc48573d9f68abdf00d8517fc3e593a2cfe868484e6ee72b648eb860e7669626928f76f5b2f7e70fc81f7385be82f51a666fa6aa121fd10136bccc9a418fe50369984a6a1f6a691f49de14806aac27f1313b98fd7c33a9684bb4857f913399be1066151835972", 0xa5}], 0x7}}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000000900)="0f91a6a1fe7a1f68c3637f321238359b9df6", 0x12}], 0x1}}], 0x3, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) 7.133276584s ago: executing program 9 (id=697): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) (async) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 5.466603398s ago: executing program 0 (id=702): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000a80)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x1000000}, 0x20000000) 5.281830684s ago: executing program 8 (id=703): syz_usb_connect(0x0, 0x24, &(0x7f0000001440)=ANY=[@ANYBLOB="12010000b7950420d804300ae9e90102030109021200c267c5f2a50ebd01000000000904"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090000000000040009"], 0x184}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x324, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x164, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a222a29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x757ec68c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ba89b3a}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ab3c5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4553414d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a29ae10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4911e973}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60071c74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52f07cea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541f5f7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fdf9d8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x610b9e19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d30a67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cdf6ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4861bb28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b43}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x150, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x367bf2c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x410ff37b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2881718}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x514ce446}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb823fb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4236bfe6}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eaa3c4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ae556a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5737ad9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb083a14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a8cfd04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d32695f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30c595ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x301831ed}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee8c0d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3730b790}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66b43159}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bc42a96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x491741a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59ae66c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e3ba563}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x324}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000a80)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}}, 0x20000000) 5.086625925s ago: executing program 0 (id=704): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000020) 4.999749899s ago: executing program 0 (id=705): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) getpid() 4.400898764s ago: executing program 1 (id=706): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000240)) (async) r1 = socket$caif_stream(0x25, 0x1, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xa, 0x13, r1, 0x7dfff000) 4.174430061s ago: executing program 1 (id=707): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x1003f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x8, @loopback, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede010203010902120001000010000904000200000e99385c6bb09babc8d909e8368bbad1c9537613aaa437cb5b1fd70a1068779b69369eb4ab3fc7879e254dddd176e97805e63069294d7de6b5481722a080bb51e22f771431b7ad558f254579b3269ef2e6e1f1170f170930438fda17a793c6a680491335dccbcd9f8d19339cf0bb981c5d2e9e0beb08d45adaf4e84c9e00003dd8819564b95935cbcb90f8c99ef00a60d70c02822c94e51cad6c92"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) shutdown(r1, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={r5, 0x9}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r5, 0x7fff, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) timer_create(0x3, 0x0, &(0x7f0000000980)=0x0) timer_gettime(r7, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r6}, &(0x7f0000000200)=0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x5}}}}, 0x9) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) 3.811420067s ago: executing program 8 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000042000b0023ad7000fedbdf25050000000800020005"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) (fail_nth: 7) 3.649501225s ago: executing program 8 (id=709): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa2001, 0x0) socket$kcm(0x11, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r1 = socket$kcm(0x10, 0x5, 0x4) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d298bb318000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="978e40001965bd1faca773e1", 0xc}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) personality(0x5400004) personality(0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/201) 3.182535164s ago: executing program 8 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b400001d", @ANYRES16=0x0, @ANYBLOB="00022dbd70000000002003000000a0000280080002000700000024000380080001000600000008000100ffffffff08000100ffffff7f080001000800000014000380080001000400000008000200eae1c05408000200050000004c00038008000200ff000000080002000200000008000100010000000800020007000000080002000400000008000200080000000800020008000000080001004502000008000100030000000800010009000000"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x20000010) 3.083770989s ago: executing program 8 (id=711): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="232587dc8edf7d68eff2d4d58151f9a1d027584728be94210baec609cfb9f4f12dc648d926728d17383da79c2a5286ccde8fc25f99045cdf42bb5a277659158c0f2d08fa4b785ad6dafab3c007c062ca0fdc9fd408e048b6eccc5db6b3bc34796bf1f6f53742350da7e683b87e83e586bc1a9e9960f7b301518b5fa1090374b581581d9e33165a77670bef205469869c144f6ebca178beb677aed821c711cd9335a06d8e8bc195e80009c0b041c841ba4d6351f6af0e", 0xb6}, {&(0x7f0000000640)="8c5237b9242a595e6dcd24d0f983641e34262fd5a1ed9f83e06970b6ba3f29fba7f20f9c6beab82305c1e918fea4693064a366a80f0c9fcee7fd4585ae3889e062b0569d6c10f660233df18f19964bcc9ad4ab638962b49496f90b17565b9237eb6227a1f202218adc1accb163c9305a216acf5bae57e2912e6929daf74f43a1cb2b447a56c0672f30b7cf45e069037d0b661530d7e926f74bd6f439a2b12d5523d7323e", 0xa4}, {&(0x7f00000009c0)="8b73faccb49c333264de748dfed20749da939f576c9fde9c94a284061e5144d031f04148d1098015a8932a5b397b90abe8a4def993408e90dd20e7821663a30d6a7e21061784a6f182613ac8ffbe3fda338e6b2381d70f0631e6ba99049d8ea04c1ba77ad505bfbce3b8f88dead4eaa7f95eff994ec23beb4a625a2d31d9c2cd7962f4ec730eb0d75a12ebfaa004a0d66e5757f0b33a966cdac9c2889d178ca618b73f0b4c40a03708d340710ac900913e5c3a9590003e9e2e0b16c4af8c0d12491888b9fb45cab7a42f29c5", 0xcc}, {&(0x7f0000000ac0)="ef0f823b1a4602d4da04579b36fdf6684a5afc44ecad23e308bfb731674c0f9ffef203e281c110e53f742a2665c95c8d0c4c7f2864d4b70ba02029f85884385550f4e3bb228a49bd3fe02ae74446f2c33410236cc6c9fab616d93b3eae59a41d2260f44fdb4d2de9c2d102baa1b44f089fd8f09f2a71ed17688a91e0ef43782db2e90a5329e6603a93bedf17ed843438aacc2a83a265b6e4b6edb49e381de9244bbaeab5077289071148425a02905f8a6c0016fc33afa83aa2f73983ae96b875d61de7", 0xc3}, {&(0x7f00000003c0)="32c528853233b20c6d98d577dce5e3b2482397769a790451ded2d90969aeef191e9d44c35b0bf99634225ffe0c810b8e14655dd2553bec659c2b91f3b2893e733a6ec55f963ec53184a5e7f5d16c5418eb6b053fa7be43460a9536315842ca9be6adc46b70", 0x65}, {&(0x7f0000000bc0)="5c06ff212ff4729a575cb2d949d68aef2b1022a3458a3fba2f49428c82519a4b8759e02d0eb06c86547918614af942f39ed45562794c47bd193d58e10480b9041a0c4d5318c395bcb73166cd3718eb789d75ffebaee5d8cc231a6c8b62c31fa3c345b826e3d608c51a929e71336d16c08b7d123d6b81f0424452795872bbbd8961ba553bfc338611f29eafa5729e937e200a7211de108f743d3917c2dfbc99113ac5e0553eed351a0b23478ac0fb33714b48cb63e2ff67bac14f547d30337ea1df7e1ef5b1e483f4d9da80fdbce8f6ce81dc1c", 0xd3}, {&(0x7f0000000700)="cfcdc9ffb0c02c826cc52869a4f3e89ffc4c2412c8d84a91dfcad15b133e4cc21f8eaf5845ce02305b5bd2b0adee70638e0a3b1eb698abe11899d4ee445c5bc48573d9f68abdf00d8517fc3e593a2cfe868484e6ee72b648eb860e7669626928f76f5b2f7e70fc81f7385be82f51a666fa6aa121fd10136bccc9a418fe50369984a6a1f6a691f49de14806aac27f1313b98fd7c33a9684bb4857f913399be1066151835972", 0xa5}], 0x7}}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000000900)="0f91a6a1fe7a1f68c3637f321238359b9df6", 0x12}], 0x1}}], 0x3, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) 2.934326006s ago: executing program 8 (id=712): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x1, 0xfffd, 0x0, 0x82fb, 0x0, "0000000000000100"}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f00000000c0)=0x4) write$UHID_INPUT(r1, &(0x7f0000001a00)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x39be, 0xd000, 0x20}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040), 0x4) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000001640), 0x2, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0x401c5820, &(0x7f0000000300)={@id={0x18, 0x0, @c}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r11], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 712.067416ms ago: executing program 1 (id=713): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000020) 554.623223ms ago: executing program 1 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (fail_nth: 7) 0s ago: executing program 1 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback, 0xa2}}, 0x0, 0x0, 0x27, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "000000008100e108", "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) kernel console output (not intermixed with test programs): 860] usb 10-1: Product: syz [ 478.980764][ T5860] usb 10-1: Manufacturer: syz [ 478.986046][ T5860] usb 10-1: SerialNumber: syz [ 479.011281][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.037519][ T5860] usb 10-1: config 0 descriptor?? [ 479.040763][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.043338][ T7675] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 479.095629][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.115514][ T5820] usb 9-1: 0:2 : does not exist [ 479.146140][ T5860] hub 10-1:0.0: bad descriptor, ignoring hub [ 479.162051][ T5820] usb 9-1: USB disconnect, device number 5 [ 479.175470][ T5860] hub 10-1:0.0: probe with driver hub failed with error -5 [ 479.271776][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.318381][ T7641] hsr_slave_0: entered promiscuous mode [ 479.325244][ T7641] hsr_slave_1: entered promiscuous mode [ 479.345553][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.384357][ T7641] Cannot create hsr debugfs directory [ 479.875233][ T7602] veth0_vlan: entered promiscuous mode [ 479.934905][ T7602] veth1_vlan: entered promiscuous mode [ 479.937353][ T43] usb 10-1: USB disconnect, device number 3 [ 480.070954][ T7641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.239059][ T7641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.280137][ T7602] veth0_macvtap: entered promiscuous mode [ 480.311828][ T7602] veth1_macvtap: entered promiscuous mode [ 480.400419][ T7641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.485531][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.613734][ T7641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.696624][ T5878] Bluetooth: hci10: command tx timeout [ 480.712078][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.768527][ T7602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.826801][ T7602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.846834][ T7602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.855710][ T7602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.936886][ T5878] Bluetooth: hci11: command tx timeout [ 481.349472][ T7641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.446857][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.454713][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.496175][ T7641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.530399][ T7641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.553330][ T7641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.699960][ T6913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.718468][ T6913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.734840][ T7706] FAULT_INJECTION: forcing a failure. [ 481.734840][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 481.776966][ T7706] CPU: 0 UID: 0 PID: 7706 Comm: syz.8.542 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 481.776997][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.777010][ T7706] Call Trace: [ 481.777018][ T7706] [ 481.777027][ T7706] dump_stack_lvl+0x189/0x250 [ 481.777057][ T7706] ? __pfx____ratelimit+0x10/0x10 [ 481.777088][ T7706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.777110][ T7706] ? __pfx__printk+0x10/0x10 [ 481.777136][ T7706] ? __pfx___might_resched+0x10/0x10 [ 481.777158][ T7706] ? fs_reclaim_acquire+0x7d/0x100 [ 481.777191][ T7706] should_fail_ex+0x414/0x560 [ 481.777221][ T7706] should_failslab+0xa8/0x100 [ 481.777248][ T7706] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 481.777273][ T7706] ? __alloc_skb+0x112/0x2d0 [ 481.777301][ T7706] __alloc_skb+0x112/0x2d0 [ 481.777328][ T7706] netlink_ack+0x146/0xa50 [ 481.777349][ T7706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.777376][ T7706] ? ref_tracker_free+0x63a/0x7d0 [ 481.777400][ T7706] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 481.777427][ T7706] ? __pfx_nl80211_post_doit+0x10/0x10 [ 481.777455][ T7706] ? __pfx_ref_tracker_free+0x10/0x10 [ 481.777491][ T7706] netlink_rcv_skb+0x28c/0x470 [ 481.777515][ T7706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.777545][ T7706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.777586][ T7706] ? down_read+0x1ad/0x2e0 [ 481.777609][ T7706] genl_rcv+0x28/0x40 [ 481.777635][ T7706] netlink_unicast+0x75b/0x8d0 [ 481.777668][ T7706] netlink_sendmsg+0x805/0xb30 [ 481.777702][ T7706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.777730][ T7706] ? aa_sock_msg_perm+0x94/0x160 [ 481.777752][ T7706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.777781][ T7706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.777806][ T7706] __sock_sendmsg+0x21c/0x270 [ 481.777834][ T7706] ____sys_sendmsg+0x505/0x830 [ 481.777865][ T7706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.777900][ T7706] ? import_iovec+0x74/0xa0 [ 481.777921][ T7706] ___sys_sendmsg+0x21f/0x2a0 [ 481.777946][ T7706] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.778006][ T7706] ? __fget_files+0x2a/0x420 [ 481.778034][ T7706] ? __fget_files+0x3a0/0x420 [ 481.778073][ T7706] __x64_sys_sendmsg+0x19b/0x260 [ 481.778101][ T7706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.778136][ T7706] ? __pfx_ksys_write+0x10/0x10 [ 481.778159][ T7706] ? rcu_is_watching+0x15/0xb0 [ 481.778186][ T7706] ? do_syscall_64+0xbe/0x3b0 [ 481.778210][ T7706] do_syscall_64+0xfa/0x3b0 [ 481.778228][ T7706] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.778256][ T7706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.778275][ T7706] ? clear_bhb_loop+0x60/0xb0 [ 481.778299][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.778319][ T7706] RIP: 0033:0x7f718ff8e929 [ 481.778337][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.778354][ T7706] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.778375][ T7706] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 481.778390][ T7706] RDX: 0000000010008830 RSI: 0000200000000240 RDI: 0000000000000004 [ 481.778404][ T7706] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 481.778416][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.778428][ T7706] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 481.778458][ T7706] [ 482.196990][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.321221][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.375472][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.382687][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.508655][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.515850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.701298][ T7641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.806344][ T7727] FAULT_INJECTION: forcing a failure. [ 482.806344][ T7727] name failslab, interval 1, probability 0, space 0, times 0 [ 482.842512][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz.0.546 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 482.842543][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.842556][ T7727] Call Trace: [ 482.842564][ T7727] [ 482.842573][ T7727] dump_stack_lvl+0x189/0x250 [ 482.842602][ T7727] ? __pfx____ratelimit+0x10/0x10 [ 482.842632][ T7727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.842656][ T7727] ? __pfx__printk+0x10/0x10 [ 482.842684][ T7727] ? __pfx___might_resched+0x10/0x10 [ 482.842706][ T7727] ? fs_reclaim_acquire+0x7d/0x100 [ 482.842747][ T7727] should_fail_ex+0x414/0x560 [ 482.842776][ T7727] should_failslab+0xa8/0x100 [ 482.842804][ T7727] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 482.842828][ T7727] ? __alloc_skb+0x112/0x2d0 [ 482.842857][ T7727] __alloc_skb+0x112/0x2d0 [ 482.842883][ T7727] netlink_ack+0x146/0xa50 [ 482.842905][ T7727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.842951][ T7727] netlink_rcv_skb+0x28c/0x470 [ 482.842975][ T7727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.843004][ T7727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.843040][ T7727] ? down_read+0x1ad/0x2e0 [ 482.843064][ T7727] genl_rcv+0x28/0x40 [ 482.843091][ T7727] netlink_unicast+0x75b/0x8d0 [ 482.843123][ T7727] netlink_sendmsg+0x805/0xb30 [ 482.843157][ T7727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.843185][ T7727] ? aa_sock_msg_perm+0x94/0x160 [ 482.843208][ T7727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.843237][ T7727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.843263][ T7727] __sock_sendmsg+0x21c/0x270 [ 482.843286][ T7727] ____sys_sendmsg+0x505/0x830 [ 482.843318][ T7727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.843353][ T7727] ? import_iovec+0x74/0xa0 [ 482.843377][ T7727] ___sys_sendmsg+0x21f/0x2a0 [ 482.843405][ T7727] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.843467][ T7727] ? __fget_files+0x2a/0x420 [ 482.843494][ T7727] ? __fget_files+0x3a0/0x420 [ 482.843532][ T7727] __x64_sys_sendmsg+0x19b/0x260 [ 482.843560][ T7727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.843597][ T7727] ? __pfx_ksys_write+0x10/0x10 [ 482.843619][ T7727] ? rcu_is_watching+0x15/0xb0 [ 482.843647][ T7727] ? do_syscall_64+0xbe/0x3b0 [ 482.843671][ T7727] do_syscall_64+0xfa/0x3b0 [ 482.843689][ T7727] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.843723][ T7727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.843743][ T7727] ? clear_bhb_loop+0x60/0xb0 [ 482.843767][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.843787][ T7727] RIP: 0033:0x7f388b58e929 [ 482.843805][ T7727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.843823][ T7727] RSP: 002b:00007f388c4a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.843844][ T7727] RAX: ffffffffffffffda RBX: 00007f388b7b5fa0 RCX: 00007f388b58e929 [ 482.843858][ T7727] RDX: 000000000000c000 RSI: 0000200000000200 RDI: 0000000000000004 [ 482.843872][ T7727] RBP: 00007f388c4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 482.843885][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.843897][ T7727] R13: 0000000000000000 R14: 00007f388b7b5fa0 R15: 00007ffde6e44f58 [ 482.843928][ T7727] [ 482.964646][ T7732] netlink: 260 bytes leftover after parsing attributes in process `syz.9.549'. [ 483.039851][ T5878] Bluetooth: hci11: command tx timeout [ 483.088793][ T7732] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 483.472920][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.502392][ T7741] (syz.0.551,7741,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 483.535798][ T7741] (syz.0.551,7741,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 483.719547][ T7641] veth0_vlan: entered promiscuous mode [ 483.779016][ T7641] veth1_vlan: entered promiscuous mode [ 483.883375][ T7641] veth0_macvtap: entered promiscuous mode [ 483.912297][ T7641] veth1_macvtap: entered promiscuous mode [ 483.926500][ T5930] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 484.026495][ T5820] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 484.123288][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.135365][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.190074][ T5820] usb 9-1: config 7 has an invalid interface number: 101 but max is 0 [ 484.222079][ T7641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.226774][ T5820] usb 9-1: config 7 has no interface number 0 [ 484.248023][ T7641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.266487][ T7641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.266832][ T5820] usb 9-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 484.275397][ T7641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.293483][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.309775][ T5820] usb 9-1: Product: syz [ 484.315306][ T5820] usb 9-1: Manufacturer: syz [ 484.318631][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 484.335293][ T5820] usb 9-1: SerialNumber: syz [ 484.366652][ T5930] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 484.374891][ T5930] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 484.405372][ T5930] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.431737][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.442472][ T5930] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 484.471316][ T5930] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 484.480489][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.565064][ T5930] usbtmc 1-1:16.0: bulk endpoints not found [ 484.585247][ T5820] as10x_usb: device has been detected [ 484.610110][ T5820] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 484.685664][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.711072][ T5820] usb 9-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 484.716919][ T7754] netlink: 'syz.9.556': attribute type 3 has an invalid length. [ 484.723539][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.790842][ T5820] as10x_usb: error during firmware upload part1 [ 484.812699][ T5820] Registered device Elgato EyeTV DTT Deluxe [ 484.813726][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.846970][ T5820] usb 9-1: USB disconnect, device number 6 [ 484.881784][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.952577][ T5820] Unregistered device Elgato EyeTV DTT Deluxe [ 484.964660][ T5820] as10x_usb: device has been disconnected [ 485.097488][ T5878] Bluetooth: hci11: command tx timeout [ 485.168385][ T7759] Bluetooth: MGMT ver 1.23 [ 485.188738][ T5943] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 485.283968][ T7761] FAULT_INJECTION: forcing a failure. [ 485.283968][ T7761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.305978][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.8.558 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 485.306012][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.306024][ T7761] Call Trace: [ 485.306033][ T7761] [ 485.306042][ T7761] dump_stack_lvl+0x189/0x250 [ 485.306070][ T7761] ? __pfx____ratelimit+0x10/0x10 [ 485.306102][ T7761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.306125][ T7761] ? __pfx__printk+0x10/0x10 [ 485.306148][ T7761] ? __might_fault+0xb0/0x130 [ 485.306183][ T7761] should_fail_ex+0x414/0x560 [ 485.306213][ T7761] _copy_from_iter+0x1db/0x16f0 [ 485.306246][ T7761] ? rcu_is_watching+0x15/0xb0 [ 485.306270][ T7761] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 485.306297][ T7761] ? __pfx__copy_from_iter+0x10/0x10 [ 485.306327][ T7761] ? __build_skb_around+0x257/0x3e0 [ 485.306359][ T7761] ? netlink_sendmsg+0x642/0xb30 [ 485.306379][ T7761] ? skb_put+0x11b/0x210 [ 485.306404][ T7761] netlink_sendmsg+0x6b2/0xb30 [ 485.306436][ T7761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.306462][ T7761] ? aa_sock_msg_perm+0x94/0x160 [ 485.306484][ T7761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.306514][ T7761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.306539][ T7761] __sock_sendmsg+0x21c/0x270 [ 485.306562][ T7761] ____sys_sendmsg+0x505/0x830 [ 485.306593][ T7761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.306626][ T7761] ? import_iovec+0x74/0xa0 [ 485.306647][ T7761] ___sys_sendmsg+0x21f/0x2a0 [ 485.306674][ T7761] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.306739][ T7761] ? __fget_files+0x2a/0x420 [ 485.306767][ T7761] ? __fget_files+0x3a0/0x420 [ 485.306806][ T7761] __x64_sys_sendmsg+0x19b/0x260 [ 485.306835][ T7761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.306870][ T7761] ? __pfx_ksys_write+0x10/0x10 [ 485.306893][ T7761] ? rcu_is_watching+0x15/0xb0 [ 485.306920][ T7761] ? do_syscall_64+0xbe/0x3b0 [ 485.306944][ T7761] do_syscall_64+0xfa/0x3b0 [ 485.306961][ T7761] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.306990][ T7761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.307010][ T7761] ? clear_bhb_loop+0x60/0xb0 [ 485.307034][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.307054][ T7761] RIP: 0033:0x7f718ff8e929 [ 485.307073][ T7761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.307091][ T7761] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.307114][ T7761] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 485.307130][ T7761] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 485.307143][ T7761] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 485.307157][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.307169][ T7761] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 485.307200][ T7761] [ 485.690292][ T5943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.701215][ T5943] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 485.710432][ T5943] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.728782][ T5943] usb 10-1: config 0 descriptor?? [ 485.750206][ T5943] pwc: Askey VC010 type 2 USB webcam detected. [ 486.129117][ T5965] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 486.142191][ T5943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 486.158209][ T5943] pwc: recv_control_msg error -32 req 02 val 2700 [ 486.208522][ T7771] program syz.1.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.278995][ T7772] program syz.1.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.319753][ T5965] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.331561][ T5965] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 486.341039][ T7772] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 486.348741][ T5965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.367139][ T5965] usb 9-1: config 0 descriptor?? [ 486.374662][ T5943] pwc: recv_control_msg error -71 req 04 val 1000 [ 486.402347][ T5965] pwc: Askey VC010 type 2 USB webcam detected. [ 486.411302][ T5943] pwc: recv_control_msg error -71 req 04 val 1300 [ 486.437887][ T5943] pwc: recv_control_msg error -71 req 04 val 1400 [ 486.446854][ T5943] pwc: recv_control_msg error -71 req 02 val 2000 [ 486.479440][ T5943] pwc: recv_control_msg error -71 req 02 val 2100 [ 486.526710][ T5943] pwc: recv_control_msg error -71 req 04 val 1500 [ 486.553973][ T5943] pwc: recv_control_msg error -71 req 02 val 2500 [ 486.561143][ T5943] pwc: recv_control_msg error -71 req 02 val 2400 [ 486.569855][ T7775] FAULT_INJECTION: forcing a failure. [ 486.569855][ T7775] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.580624][ T5943] pwc: recv_control_msg error -71 req 02 val 2600 [ 486.592625][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.1.563 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 486.592654][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.592666][ T7775] Call Trace: [ 486.592675][ T7775] [ 486.592684][ T7775] dump_stack_lvl+0x189/0x250 [ 486.592715][ T7775] ? __pfx____ratelimit+0x10/0x10 [ 486.592746][ T7775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.592770][ T7775] ? __pfx__printk+0x10/0x10 [ 486.592795][ T7775] ? fs_reclaim_acquire+0x7d/0x100 [ 486.592832][ T7775] should_fail_ex+0x414/0x560 [ 486.592863][ T7775] prepare_alloc_pages+0x213/0x610 [ 486.592901][ T7775] __alloc_frozen_pages_noprof+0x123/0x370 [ 486.592936][ T7775] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.592976][ T7775] ? policy_nodemask+0x27c/0x720 [ 486.592999][ T7775] ? __lock_acquire+0xab9/0xd20 [ 486.593026][ T7775] alloc_pages_mpol+0x232/0x4a0 [ 486.593058][ T7775] vma_alloc_folio_noprof+0xe4/0x200 [ 486.593087][ T7775] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 486.593127][ T7775] folio_prealloc+0x30/0x180 [ 486.593155][ T7775] __handle_mm_fault+0x2c88/0x5620 [ 486.593198][ T7775] ? __pfx___handle_mm_fault+0x10/0x10 [ 486.593237][ T7775] ? follow_page_pte+0x8d6/0x14b0 [ 486.593270][ T7775] handle_mm_fault+0x40a/0x8e0 [ 486.593310][ T7775] __get_user_pages+0x1af4/0x30b0 [ 486.593367][ T7775] ? __pfx___get_user_pages+0x10/0x10 [ 486.593388][ T7775] ? __gup_longterm_locked+0xbf7/0x15b0 [ 486.593412][ T7775] ? down_read_killable+0x1d1/0x350 [ 486.593440][ T7775] __gup_longterm_locked+0xd66/0x15b0 [ 486.593475][ T7775] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 486.593498][ T7775] ? gup_fast_fallback+0x1afc/0x2260 [ 486.593524][ T7775] gup_fast_fallback+0x1cd4/0x2260 [ 486.593545][ T7775] ? is_bpf_text_address+0x26/0x2b0 [ 486.593611][ T7775] ? __pfx_gup_fast_fallback+0x10/0x10 [ 486.593632][ T7775] ? stack_trace_save+0x9c/0xe0 [ 486.593662][ T7775] ? stack_depot_save_flags+0x40/0x900 [ 486.593696][ T7775] ? pin_user_pages_fast+0x4d/0xb0 [ 486.593720][ T7775] iov_iter_extract_pages+0x35a/0x5e0 [ 486.593750][ T7775] extract_iter_to_sg+0xe46/0x24e0 [ 486.593795][ T7775] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 486.593843][ T7775] ? __asan_memset+0x22/0x50 [ 486.593866][ T7775] af_alg_get_rsgl+0x436/0x810 [ 486.593906][ T7775] skcipher_recvmsg+0x3c0/0x11c0 [ 486.593933][ T7775] ? aa_sk_perm+0x81e/0x950 [ 486.593976][ T7775] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 486.593996][ T7775] ? __lock_acquire+0xab9/0xd20 [ 486.594019][ T7775] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 486.594048][ T7775] ? security_socket_recvmsg+0x7e/0x2e0 [ 486.594074][ T7775] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 486.594097][ T7775] sock_recvmsg+0x22c/0x270 [ 486.594122][ T7775] ____sys_recvmsg+0x1c9/0x460 [ 486.594159][ T7775] ? __pfx_____sys_recvmsg+0x10/0x10 [ 486.594203][ T7775] ? import_iovec+0x74/0xa0 [ 486.594227][ T7775] ___sys_recvmsg+0x1b5/0x510 [ 486.594260][ T7775] ? __pfx____sys_recvmsg+0x10/0x10 [ 486.594314][ T7775] ? __fget_files+0x3a0/0x420 [ 486.594354][ T7775] do_recvmmsg+0x307/0x770 [ 486.594391][ T7775] ? __pfx_do_recvmmsg+0x10/0x10 [ 486.594431][ T7775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.594471][ T7775] __x64_sys_recvmmsg+0x190/0x240 [ 486.594500][ T7775] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 486.594533][ T7775] ? do_syscall_64+0xbe/0x3b0 [ 486.594556][ T7775] do_syscall_64+0xfa/0x3b0 [ 486.594576][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.594616][ T7775] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.594635][ T7775] ? clear_bhb_loop+0x60/0xb0 [ 486.594660][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.594679][ T7775] RIP: 0033:0x7f0a4178e929 [ 486.594698][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.594716][ T7775] RSP: 002b:00007f0a426b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 486.594736][ T7775] RAX: ffffffffffffffda RBX: 00007f0a419b5fa0 RCX: 00007f0a4178e929 [ 486.594752][ T7775] RDX: 0000000000000001 RSI: 0000200000004440 RDI: 0000000000000004 [ 486.594765][ T7775] RBP: 00007f0a426b8090 R08: 0000000000000000 R09: 0000000000000000 [ 486.594778][ T7775] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 486.594791][ T7775] R13: 0000000000000000 R14: 00007f0a419b5fa0 R15: 00007ffd3f37ab88 [ 486.594823][ T7775] [ 486.601615][ T5943] pwc: recv_control_msg error -71 req 02 val 2900 [ 486.656943][ T5965] pwc: send_video_command error -71 [ 486.686545][ T5860] usb 1-1: USB disconnect, device number 3 [ 486.789468][ T5965] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 486.871432][ T5943] pwc: recv_control_msg error -71 req 02 val 2800 [ 486.872242][ T5943] pwc: recv_control_msg error -71 req 04 val 1100 [ 486.909190][ T5965] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 486.932141][ T5965] usb 9-1: USB disconnect, device number 7 [ 487.165496][ T5943] pwc: recv_control_msg error -71 req 04 val 1200 [ 487.255762][ T5943] pwc: Registered as video103. [ 487.274040][ T5943] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input10 [ 487.301602][ T7781] FAULT_INJECTION: forcing a failure. [ 487.301602][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 487.370817][ T5943] usb 10-1: USB disconnect, device number 4 [ 487.441987][ T7781] CPU: 0 UID: 0 PID: 7781 Comm: syz.9.565 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 487.442017][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.442029][ T7781] Call Trace: [ 487.442037][ T7781] [ 487.442045][ T7781] dump_stack_lvl+0x189/0x250 [ 487.442072][ T7781] ? __pfx____ratelimit+0x10/0x10 [ 487.442103][ T7781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.442126][ T7781] ? __pfx__printk+0x10/0x10 [ 487.442155][ T7781] ? __pfx___might_resched+0x10/0x10 [ 487.442178][ T7781] ? fs_reclaim_acquire+0x7d/0x100 [ 487.442209][ T7781] should_fail_ex+0x414/0x560 [ 487.442238][ T7781] should_failslab+0xa8/0x100 [ 487.442265][ T7781] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 487.442290][ T7781] ? __alloc_skb+0x112/0x2d0 [ 487.442315][ T7781] __alloc_skb+0x112/0x2d0 [ 487.442337][ T7781] netlink_ack+0x146/0xa50 [ 487.442357][ T7781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.442380][ T7781] ? ref_tracker_free+0x63a/0x7d0 [ 487.442408][ T7781] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.442444][ T7781] netlink_rcv_skb+0x28c/0x470 [ 487.442477][ T7781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.442508][ T7781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.442549][ T7781] ? down_read+0x1ad/0x2e0 [ 487.442574][ T7781] genl_rcv+0x28/0x40 [ 487.442600][ T7781] netlink_unicast+0x75b/0x8d0 [ 487.442633][ T7781] netlink_sendmsg+0x805/0xb30 [ 487.442666][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.442693][ T7781] ? aa_sock_msg_perm+0x94/0x160 [ 487.442714][ T7781] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.442743][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.442768][ T7781] __sock_sendmsg+0x21c/0x270 [ 487.442789][ T7781] ____sys_sendmsg+0x505/0x830 [ 487.442816][ T7781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.442849][ T7781] ? import_iovec+0x74/0xa0 [ 487.442870][ T7781] ___sys_sendmsg+0x21f/0x2a0 [ 487.442899][ T7781] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.442956][ T7781] ? __fget_files+0x2a/0x420 [ 487.442983][ T7781] ? __fget_files+0x3a0/0x420 [ 487.443023][ T7781] __x64_sys_sendmsg+0x19b/0x260 [ 487.443053][ T7781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.443087][ T7781] ? __pfx_ksys_write+0x10/0x10 [ 487.443118][ T7781] ? do_syscall_64+0xbe/0x3b0 [ 487.443140][ T7781] do_syscall_64+0xfa/0x3b0 [ 487.443158][ T7781] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.443184][ T7781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.443203][ T7781] ? clear_bhb_loop+0x60/0xb0 [ 487.443224][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.443242][ T7781] RIP: 0033:0x7fbe4118e929 [ 487.443260][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.443276][ T7781] RSP: 002b:00007fbe3eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.443296][ T7781] RAX: ffffffffffffffda RBX: 00007fbe413b5fa0 RCX: 00007fbe4118e929 [ 487.443310][ T7781] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 487.443321][ T7781] RBP: 00007fbe3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.443332][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.443342][ T7781] R13: 0000000000000000 R14: 00007fbe413b5fa0 R15: 00007fff4b919028 [ 487.443369][ T7781] [ 487.445832][ T7788] /dev/rnullb0: Can't open blockdev [ 487.846576][ T5965] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 488.028328][ T5965] usb 9-1: Using ep0 maxpacket: 32 [ 488.071680][ T5965] usb 9-1: config 0 interface 0 has no altsetting 0 [ 488.082102][ T5965] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 488.100323][ T5965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.118036][ T5965] usb 9-1: Product: syz [ 488.126458][ T5965] usb 9-1: Manufacturer: syz [ 488.141216][ T5965] usb 9-1: SerialNumber: syz [ 488.159561][ T5965] usb 9-1: config 0 descriptor?? [ 488.183312][ T5965] gs_usb 9-1:0.0: Required endpoints not found [ 488.223308][ T5888] Bluetooth: hci3: command 0x0406 tx timeout [ 488.286501][ T5943] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 488.470694][ T5943] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 488.480518][ T5943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.491012][ T5943] usb 10-1: Product: syz [ 488.495434][ T5943] usb 10-1: Manufacturer: syz [ 488.507000][ T5943] usb 10-1: SerialNumber: syz [ 488.524877][ T5943] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 488.557532][ T5965] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 488.616897][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 488.642856][ T9] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 488.726468][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 488.734431][ T5965] usb 1-1: descriptor type invalid, skip [ 488.757294][ T5965] usb 1-1: config 1 interface 0 has no altsetting 0 [ 488.773585][ T5965] usb 1-1: New USB device found, idVendor=046d, idProduct=101a, bcdDevice= 0.40 [ 488.783152][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.791764][ T5965] usb 1-1: Product: П [ 488.796031][ T5965] usb 1-1: Manufacturer: ᚋ︽℆鈒é”ᕆ钒êœïªµå ¿ç¹¶ï—騅㕫৛撚姭ᡎ鞩㔙鶥薦ῗ塣ã©å”‡è½¨ã­Šæ¹¸è…“㩙䯴鴜렲䀠潷먦뫙緿唅樃ग़䘷ꨡ嫨톩Ó셉그ⶭ络陳콽ڶ콋詷⇠믌䪴浕ï°ê¹”ᚷ븸騸Դ슡簽⦷꓈엡畗꼔ç‡èŽªå€ï£¹å–”ì‡é¯¾ìŸì¿šæî‹ªáŽ³ã•Ž績å¶ï©ã†ë·è®ï›æ”šØ‰è§£ã‘¾ë‚˜îµ¢é¸£ë…¨î´¹ìŠï½‡äŽ’å®»ë¢ï¼–煷⸳躅è¬í–‹ [ 488.798101][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 488.846489][ T5965] usb 1-1: SerialNumber: syz [ 488.893197][ T5860] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 488.910847][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.930242][ T5860] usb 2-1: config 0 descriptor?? [ 488.964047][ T5860] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 489.087924][ T5943] usb 10-1: USB disconnect, device number 5 [ 489.211936][ T7807] FAULT_INJECTION: forcing a failure. [ 489.211936][ T7807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.249320][ T7807] CPU: 1 UID: 0 PID: 7807 Comm: syz.9.574 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 489.249352][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.249365][ T7807] Call Trace: [ 489.249373][ T7807] [ 489.249382][ T7807] dump_stack_lvl+0x189/0x250 [ 489.249413][ T7807] ? __pfx____ratelimit+0x10/0x10 [ 489.249443][ T7807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.249466][ T7807] ? __pfx__printk+0x10/0x10 [ 489.249502][ T7807] should_fail_ex+0x414/0x560 [ 489.249532][ T7807] _copy_to_user+0x31/0xb0 [ 489.249552][ T7807] simple_read_from_buffer+0xe1/0x170 [ 489.249586][ T7807] proc_fail_nth_read+0x1df/0x250 [ 489.249609][ T7807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.249632][ T7807] ? rw_verify_area+0x258/0x650 [ 489.249657][ T7807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.249678][ T7807] vfs_read+0x200/0x980 [ 489.249708][ T7807] ? __pfx___mutex_lock+0x10/0x10 [ 489.249729][ T7807] ? __pfx_vfs_read+0x10/0x10 [ 489.249755][ T7807] ? __fget_files+0x2a/0x420 [ 489.249788][ T7807] ? __fget_files+0x3a0/0x420 [ 489.249816][ T7807] ? __fget_files+0x2a/0x420 [ 489.249854][ T7807] ksys_read+0x145/0x250 [ 489.249881][ T7807] ? __pfx_ksys_read+0x10/0x10 [ 489.249903][ T7807] ? rcu_is_watching+0x15/0xb0 [ 489.249932][ T7807] ? do_syscall_64+0xbe/0x3b0 [ 489.249956][ T7807] do_syscall_64+0xfa/0x3b0 [ 489.249973][ T7807] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.250002][ T7807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.250022][ T7807] ? clear_bhb_loop+0x60/0xb0 [ 489.250046][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.250066][ T7807] RIP: 0033:0x7fbe4118d33c [ 489.250083][ T7807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.250102][ T7807] RSP: 002b:00007fbe3eff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.250129][ T7807] RAX: ffffffffffffffda RBX: 00007fbe413b5fa0 RCX: 00007fbe4118d33c [ 489.250144][ T7807] RDX: 000000000000000f RSI: 00007fbe3eff60a0 RDI: 0000000000000005 [ 489.250157][ T7807] RBP: 00007fbe3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.250170][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.250182][ T7807] R13: 0000000000000000 R14: 00007fbe413b5fa0 R15: 00007fff4b919028 [ 489.250214][ T7807] [ 489.509970][ T7797] trusted_key: syz.0.572 sent an empty control message without MSG_MORE. [ 489.743295][ T9] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 489.775300][ T5986] usb 9-1: USB disconnect, device number 8 [ 489.814167][ T9] ath9k_htc: Failed to initialize the device [ 489.886537][ T5943] usb 10-1: ath9k_htc: USB layer deinitialized [ 489.967758][ T5965] usbhid 1-1:1.0: can't add hid device: -71 [ 489.984419][ T5965] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 490.013133][ T5965] usb 1-1: USB disconnect, device number 4 [ 490.273914][ T7815] program syz.9.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.461408][ T7820] FAULT_INJECTION: forcing a failure. [ 490.461408][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 490.508090][ T7820] CPU: 0 UID: 0 PID: 7820 Comm: syz.9.579 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 490.508122][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.508135][ T7820] Call Trace: [ 490.508147][ T7820] [ 490.508156][ T7820] dump_stack_lvl+0x189/0x250 [ 490.508193][ T7820] ? __pfx____ratelimit+0x10/0x10 [ 490.508224][ T7820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.508246][ T7820] ? __pfx__printk+0x10/0x10 [ 490.508270][ T7820] ? __pfx___might_resched+0x10/0x10 [ 490.508293][ T7820] ? fs_reclaim_acquire+0x7d/0x100 [ 490.508326][ T7820] should_fail_ex+0x414/0x560 [ 490.508356][ T7820] should_failslab+0xa8/0x100 [ 490.508384][ T7820] __kmalloc_noprof+0xcb/0x4f0 [ 490.508407][ T7820] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 490.508444][ T7820] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 490.508482][ T7820] genl_family_rcv_msg_doit+0xb8/0x300 [ 490.508519][ T7820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.508550][ T7820] ? rcu_is_watching+0x15/0xb0 [ 490.508576][ T7820] ? apparmor_capable+0x137/0x1b0 [ 490.508605][ T7820] ? bpf_lsm_capable+0x9/0x20 [ 490.508627][ T7820] ? security_capable+0x7e/0x2e0 [ 490.508653][ T7820] genl_rcv_msg+0x60e/0x790 [ 490.508688][ T7820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.508714][ T7820] ? ref_tracker_free+0x63a/0x7d0 [ 490.508739][ T7820] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 490.508769][ T7820] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.508802][ T7820] netlink_rcv_skb+0x208/0x470 [ 490.508828][ T7820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.508858][ T7820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.508896][ T7820] ? down_read+0x1ad/0x2e0 [ 490.508919][ T7820] genl_rcv+0x28/0x40 [ 490.508944][ T7820] netlink_unicast+0x75b/0x8d0 [ 490.508977][ T7820] netlink_sendmsg+0x805/0xb30 [ 490.509011][ T7820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.509040][ T7820] ? aa_sock_msg_perm+0x94/0x160 [ 490.509061][ T7820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.509088][ T7820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.509113][ T7820] __sock_sendmsg+0x21c/0x270 [ 490.509136][ T7820] ____sys_sendmsg+0x505/0x830 [ 490.509171][ T7820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.509207][ T7820] ? import_iovec+0x74/0xa0 [ 490.509231][ T7820] ___sys_sendmsg+0x21f/0x2a0 [ 490.509258][ T7820] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.509318][ T7820] ? __fget_files+0x2a/0x420 [ 490.509345][ T7820] ? __fget_files+0x3a0/0x420 [ 490.509382][ T7820] __x64_sys_sendmsg+0x19b/0x260 [ 490.509409][ T7820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.509444][ T7820] ? __pfx_ksys_write+0x10/0x10 [ 490.509477][ T7820] ? do_syscall_64+0xbe/0x3b0 [ 490.509500][ T7820] do_syscall_64+0xfa/0x3b0 [ 490.509515][ T7820] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.509543][ T7820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.509563][ T7820] ? clear_bhb_loop+0x60/0xb0 [ 490.509587][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.509605][ T7820] RIP: 0033:0x7fbe4118e929 [ 490.509622][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.509638][ T7820] RSP: 002b:00007fbe3eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.509657][ T7820] RAX: ffffffffffffffda RBX: 00007fbe413b5fa0 RCX: 00007fbe4118e929 [ 490.509669][ T7820] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 490.509681][ T7820] RBP: 00007fbe3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 490.509692][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.509703][ T7820] R13: 0000000000000000 R14: 00007fbe413b5fa0 R15: 00007fff4b919028 [ 490.509727][ T7820] [ 490.609632][ T7823] FAULT_INJECTION: forcing a failure. [ 490.609632][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 490.833446][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.900069][ T7823] CPU: 1 UID: 0 PID: 7823 Comm: syz.8.581 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 490.900101][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.900114][ T7823] Call Trace: [ 490.900123][ T7823] [ 490.900132][ T7823] dump_stack_lvl+0x189/0x250 [ 490.900159][ T7823] ? __pfx____ratelimit+0x10/0x10 [ 490.900205][ T7823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.900227][ T7823] ? __pfx__printk+0x10/0x10 [ 490.900247][ T7823] ? nfnetlink_parse_nat_setup+0x2af/0x680 [ 490.900281][ T7823] ? __pfx_nfnetlink_parse_nat_setup+0x10/0x10 [ 490.900320][ T7823] should_fail_ex+0x414/0x560 [ 490.900349][ T7823] should_failslab+0xa8/0x100 [ 490.900377][ T7823] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 490.900402][ T7823] ? nf_ct_ext_add+0x1ab/0x450 [ 490.900432][ T7823] ? nf_ct_ext_add+0x1ab/0x450 [ 490.900456][ T7823] krealloc_noprof+0x124/0x340 [ 490.900484][ T7823] nf_ct_ext_add+0x1ab/0x450 [ 490.900517][ T7823] ctnetlink_new_conntrack+0x11e7/0x2070 [ 490.900546][ T7823] ? ctnetlink_new_conntrack+0x6d3/0x2070 [ 490.900579][ T7823] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 490.900603][ T7823] ? rcu_is_watching+0x15/0xb0 [ 490.900626][ T7823] ? trace_contention_end+0x39/0x120 [ 490.900650][ T7823] ? __mutex_lock+0x330/0xe80 [ 490.900673][ T7823] ? __lock_acquire+0xab9/0xd20 [ 490.900696][ T7823] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 490.900749][ T7823] nfnetlink_rcv_msg+0xb4a/0x1130 [ 490.900779][ T7823] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 490.900827][ T7823] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 490.900854][ T7823] ? kasan_save_free_info+0x46/0x50 [ 490.900928][ T7823] netlink_rcv_skb+0x208/0x470 [ 490.900950][ T7823] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 490.900979][ T7823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.901013][ T7823] ? bpf_lsm_capable+0x9/0x20 [ 490.901033][ T7823] ? security_capable+0x7e/0x2e0 [ 490.901068][ T7823] nfnetlink_rcv+0x26a/0x2520 [ 490.901100][ T7823] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 490.901133][ T7823] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 490.901158][ T7823] ? __dev_queue_xmit+0x27e/0x3a70 [ 490.901191][ T7823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.901221][ T7823] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 490.901250][ T7823] ? __pfx___dev_queue_xmit+0x10/0x10 [ 490.901293][ T7823] ? ref_tracker_free+0x63a/0x7d0 [ 490.901317][ T7823] ? __copy_skb_header+0xa7/0x550 [ 490.901346][ T7823] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.901372][ T7823] ? __skb_clone+0x63/0x7a0 [ 490.901402][ T7823] ? __skb_clone+0x483/0x7a0 [ 490.901435][ T7823] ? skb_clone+0x246/0x3a0 [ 490.901465][ T7823] ? __netlink_deliver_tap+0x807/0x850 [ 490.901489][ T7823] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.901520][ T7823] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.901543][ T7823] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.901573][ T7823] netlink_unicast+0x75b/0x8d0 [ 490.901606][ T7823] netlink_sendmsg+0x805/0xb30 [ 490.901641][ T7823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.901670][ T7823] ? aa_sock_msg_perm+0x94/0x160 [ 490.901692][ T7823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.901721][ T7823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.901747][ T7823] __sock_sendmsg+0x21c/0x270 [ 490.901771][ T7823] ____sys_sendmsg+0x505/0x830 [ 490.901803][ T7823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.901839][ T7823] ? import_iovec+0x74/0xa0 [ 490.901862][ T7823] ___sys_sendmsg+0x21f/0x2a0 [ 490.901890][ T7823] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.901954][ T7823] ? __fget_files+0x2a/0x420 [ 490.901982][ T7823] ? __fget_files+0x3a0/0x420 [ 490.902022][ T7823] __x64_sys_sendmsg+0x19b/0x260 [ 490.902050][ T7823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.902087][ T7823] ? __pfx_ksys_write+0x10/0x10 [ 490.902110][ T7823] ? rcu_is_watching+0x15/0xb0 [ 490.902138][ T7823] ? do_syscall_64+0xbe/0x3b0 [ 490.902161][ T7823] do_syscall_64+0xfa/0x3b0 [ 490.902188][ T7823] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.902217][ T7823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.902237][ T7823] ? clear_bhb_loop+0x60/0xb0 [ 490.902262][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.902281][ T7823] RIP: 0033:0x7f718ff8e929 [ 490.902300][ T7823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.902317][ T7823] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.902338][ T7823] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 490.902353][ T7823] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 490.902366][ T7823] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 490.902379][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.902391][ T7823] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 490.902423][ T7823] [ 491.486463][ T7831] FAULT_INJECTION: forcing a failure. [ 491.486463][ T7831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.504046][ T7831] CPU: 0 UID: 0 PID: 7831 Comm: syz.9.584 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 491.504076][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.504090][ T7831] Call Trace: [ 491.504098][ T7831] [ 491.504108][ T7831] dump_stack_lvl+0x189/0x250 [ 491.504133][ T7831] ? __pfx____ratelimit+0x10/0x10 [ 491.504165][ T7831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.504187][ T7831] ? __pfx__printk+0x10/0x10 [ 491.504207][ T7831] ? __might_fault+0xb0/0x130 [ 491.504241][ T7831] should_fail_ex+0x414/0x560 [ 491.504271][ T7831] _copy_from_iter+0x1db/0x16f0 [ 491.504304][ T7831] ? rcu_is_watching+0x15/0xb0 [ 491.504329][ T7831] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 491.504355][ T7831] ? __pfx__copy_from_iter+0x10/0x10 [ 491.504385][ T7831] ? __build_skb_around+0x257/0x3e0 [ 491.504413][ T7831] ? netlink_sendmsg+0x642/0xb30 [ 491.504436][ T7831] ? skb_put+0x11b/0x210 [ 491.504461][ T7831] netlink_sendmsg+0x6b2/0xb30 [ 491.504495][ T7831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.504523][ T7831] ? aa_sock_msg_perm+0x94/0x160 [ 491.504545][ T7831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.504575][ T7831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.504600][ T7831] __sock_sendmsg+0x21c/0x270 [ 491.504622][ T7831] ____sys_sendmsg+0x505/0x830 [ 491.504654][ T7831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.504688][ T7831] ? import_iovec+0x74/0xa0 [ 491.504712][ T7831] ___sys_sendmsg+0x21f/0x2a0 [ 491.504739][ T7831] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.504800][ T7831] ? __fget_files+0x2a/0x420 [ 491.504828][ T7831] ? __fget_files+0x3a0/0x420 [ 491.504867][ T7831] __x64_sys_sendmsg+0x19b/0x260 [ 491.504901][ T7831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.504936][ T7831] ? __pfx_ksys_write+0x10/0x10 [ 491.504960][ T7831] ? rcu_is_watching+0x15/0xb0 [ 491.504987][ T7831] ? do_syscall_64+0xbe/0x3b0 [ 491.505007][ T7831] do_syscall_64+0xfa/0x3b0 [ 491.505022][ T7831] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.505047][ T7831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.505065][ T7831] ? clear_bhb_loop+0x60/0xb0 [ 491.505088][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.505105][ T7831] RIP: 0033:0x7fbe4118e929 [ 491.505123][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.505141][ T7831] RSP: 002b:00007fbe3eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.505162][ T7831] RAX: ffffffffffffffda RBX: 00007fbe413b5fa0 RCX: 00007fbe4118e929 [ 491.505176][ T7831] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000004 [ 491.505188][ T7831] RBP: 00007fbe3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 491.505201][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.505213][ T7831] R13: 0000000000000000 R14: 00007fbe413b5fa0 R15: 00007fff4b919028 [ 491.505239][ T7831] [ 491.530279][ T7833] FAULT_INJECTION: forcing a failure. [ 491.530279][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 491.826824][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.8.585 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 491.826855][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.826868][ T7833] Call Trace: [ 491.826877][ T7833] [ 491.826885][ T7833] dump_stack_lvl+0x189/0x250 [ 491.826916][ T7833] ? __pfx____ratelimit+0x10/0x10 [ 491.826946][ T7833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.826969][ T7833] ? __pfx__printk+0x10/0x10 [ 491.826994][ T7833] ? __pfx___might_resched+0x10/0x10 [ 491.827017][ T7833] ? fs_reclaim_acquire+0x7d/0x100 [ 491.827049][ T7833] should_fail_ex+0x414/0x560 [ 491.827078][ T7833] should_failslab+0xa8/0x100 [ 491.827105][ T7833] __kmalloc_cache_noprof+0x70/0x3d0 [ 491.827129][ T7833] ? hash_ipportnet_create+0x2fe/0xfe0 [ 491.827165][ T7833] hash_ipportnet_create+0x2fe/0xfe0 [ 491.827197][ T7833] ? __nla_parse+0x40/0x60 [ 491.827221][ T7833] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 491.827253][ T7833] ip_set_create+0xa97/0x1940 [ 491.827272][ T7833] ? ip_set_create+0x4a2/0x1940 [ 491.827300][ T7833] ? __pfx_ip_set_create+0x10/0x10 [ 491.827352][ T7833] nfnetlink_rcv_msg+0xb4a/0x1130 [ 491.827383][ T7833] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 491.827424][ T7833] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 491.827451][ T7833] ? kasan_save_free_info+0x46/0x50 [ 491.827528][ T7833] netlink_rcv_skb+0x208/0x470 [ 491.827553][ T7833] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 491.827585][ T7833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.827619][ T7833] ? bpf_lsm_capable+0x9/0x20 [ 491.827642][ T7833] ? security_capable+0x7e/0x2e0 [ 491.827669][ T7833] nfnetlink_rcv+0x26a/0x2520 [ 491.827703][ T7833] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 491.827735][ T7833] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 491.827760][ T7833] ? __dev_queue_xmit+0x27e/0x3a70 [ 491.827785][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.827823][ T7833] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 491.827852][ T7833] ? __pfx___dev_queue_xmit+0x10/0x10 [ 491.827891][ T7833] ? ref_tracker_free+0x63a/0x7d0 [ 491.827914][ T7833] ? __copy_skb_header+0xa7/0x550 [ 491.827942][ T7833] ? __pfx_ref_tracker_free+0x10/0x10 [ 491.827964][ T7833] ? __skb_clone+0x63/0x7a0 [ 491.827993][ T7833] ? __skb_clone+0x483/0x7a0 [ 491.828025][ T7833] ? skb_clone+0x246/0x3a0 [ 491.828053][ T7833] ? __netlink_deliver_tap+0x807/0x850 [ 491.828073][ T7833] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.828103][ T7833] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.828126][ T7833] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.828155][ T7833] netlink_unicast+0x75b/0x8d0 [ 491.828187][ T7833] netlink_sendmsg+0x805/0xb30 [ 491.828220][ T7833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.828247][ T7833] ? aa_sock_msg_perm+0x94/0x160 [ 491.828269][ T7833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.828297][ T7833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.828322][ T7833] __sock_sendmsg+0x21c/0x270 [ 491.828344][ T7833] ____sys_sendmsg+0x505/0x830 [ 491.828375][ T7833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.828410][ T7833] ? import_iovec+0x74/0xa0 [ 491.828433][ T7833] ___sys_sendmsg+0x21f/0x2a0 [ 491.828461][ T7833] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.828524][ T7833] ? __fget_files+0x2a/0x420 [ 491.828552][ T7833] ? __fget_files+0x3a0/0x420 [ 491.828591][ T7833] __x64_sys_sendmsg+0x19b/0x260 [ 491.828619][ T7833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.828656][ T7833] ? __pfx_ksys_write+0x10/0x10 [ 491.828679][ T7833] ? rcu_is_watching+0x15/0xb0 [ 491.828709][ T7833] ? do_syscall_64+0xbe/0x3b0 [ 491.828733][ T7833] do_syscall_64+0xfa/0x3b0 [ 491.828752][ T7833] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.828781][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.828801][ T7833] ? clear_bhb_loop+0x60/0xb0 [ 491.828832][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.828853][ T7833] RIP: 0033:0x7f718ff8e929 [ 491.828872][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.828889][ T7833] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.828906][ T7833] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 491.828921][ T7833] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 491.828934][ T7833] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 491.828948][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.828961][ T7833] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 491.828993][ T7833] [ 492.470150][ T30] audit: type=1326 audit(1750618171.141:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.8.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718ff8e929 code=0x0 [ 492.557784][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.8.587'. [ 492.563161][ T5860] gspca_vc032x: reg_w err -71 [ 492.571828][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.577219][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.582529][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.587878][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.593179][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.598530][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.603829][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.610705][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.616111][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.621720][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.627087][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.632392][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.637774][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.646341][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.651717][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.657077][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.662376][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.667904][ T5860] gspca_vc032x: Unknown sensor... [ 492.673033][ T5860] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 492.689747][ T5860] usb 2-1: USB disconnect, device number 6 [ 492.824140][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.9.589'. [ 493.317309][ T7855] netlink: 168 bytes leftover after parsing attributes in process `syz.1.592'. [ 493.918332][ T5878] block nbd1: Receive control failed (result -32) [ 494.034986][ T7875] €Â: renamed from team_slave_1 (while UP) [ 494.169119][ T7883] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 494.428210][ T7894] FAULT_INJECTION: forcing a failure. [ 494.428210][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 494.461083][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.1.605 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 494.461116][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.461129][ T7894] Call Trace: [ 494.461137][ T7894] [ 494.461146][ T7894] dump_stack_lvl+0x189/0x250 [ 494.461174][ T7894] ? __pfx____ratelimit+0x10/0x10 [ 494.461205][ T7894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.461229][ T7894] ? __pfx__printk+0x10/0x10 [ 494.461257][ T7894] ? __ip_dev_find+0x444/0x4e0 [ 494.461287][ T7894] should_fail_ex+0x414/0x560 [ 494.461316][ T7894] should_failslab+0xa8/0x100 [ 494.461343][ T7894] kmem_cache_alloc_noprof+0x73/0x3c0 [ 494.461367][ T7894] ? dst_alloc+0x105/0x170 [ 494.461398][ T7894] dst_alloc+0x105/0x170 [ 494.461423][ T7894] ? ip_check_mc_rcu+0x443/0x680 [ 494.461453][ T7894] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 494.461493][ T7894] ? ip_route_output_key_hash+0xde/0x2e0 [ 494.461524][ T7894] ip_route_output_key_hash+0x1b9/0x2e0 [ 494.461564][ T7894] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 494.461599][ T7894] ? ip_cmsg_send+0x9c3/0xa70 [ 494.461627][ T7894] ip_route_output_flow+0x2a/0x150 [ 494.461652][ T7894] ? security_sk_classify_flow+0x70/0x180 [ 494.461683][ T7894] raw_sendmsg+0x1038/0x18b0 [ 494.461727][ T7894] ? __pfx_raw_sendmsg+0x10/0x10 [ 494.461775][ T7894] ? aa_sk_perm+0x81e/0x950 [ 494.461809][ T7894] ? __pfx_aa_sk_perm+0x10/0x10 [ 494.461835][ T7894] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 494.461863][ T7894] ? sock_rps_record_flow+0x19/0x410 [ 494.461886][ T7894] ? inet_sendmsg+0x2f4/0x370 [ 494.461904][ T7894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.461937][ T7894] __sock_sendmsg+0x19c/0x270 [ 494.461961][ T7894] ____sys_sendmsg+0x505/0x830 [ 494.461993][ T7894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.462030][ T7894] ? import_iovec+0x74/0xa0 [ 494.462054][ T7894] ___sys_sendmsg+0x21f/0x2a0 [ 494.462083][ T7894] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.462147][ T7894] ? __fget_files+0x2a/0x420 [ 494.462176][ T7894] ? __fget_files+0x3a0/0x420 [ 494.462216][ T7894] __x64_sys_sendmsg+0x19b/0x260 [ 494.462245][ T7894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.462282][ T7894] ? __pfx_ksys_write+0x10/0x10 [ 494.462306][ T7894] ? rcu_is_watching+0x15/0xb0 [ 494.462335][ T7894] ? do_syscall_64+0xbe/0x3b0 [ 494.462359][ T7894] do_syscall_64+0xfa/0x3b0 [ 494.462377][ T7894] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.462406][ T7894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.462426][ T7894] ? clear_bhb_loop+0x60/0xb0 [ 494.462451][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.462470][ T7894] RIP: 0033:0x7f0a4178e929 [ 494.462488][ T7894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.462506][ T7894] RSP: 002b:00007f0a426b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.462528][ T7894] RAX: ffffffffffffffda RBX: 00007f0a419b5fa0 RCX: 00007f0a4178e929 [ 494.462549][ T7894] RDX: 0000000020002880 RSI: 0000200000001640 RDI: 0000000000000003 [ 494.462563][ T7894] RBP: 00007f0a426b8090 R08: 0000000000000000 R09: 0000000000000000 [ 494.462575][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.462587][ T7894] R13: 0000000000000000 R14: 00007f0a419b5fa0 R15: 00007ffd3f37ab88 [ 494.462618][ T7894] [ 494.962829][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 494.968101][ T7888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.027760][ T7901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.092020][ T7909] binder: BINDER_SET_CONTEXT_MGR already set [ 495.135531][ T7908] syz.9.610: attempt to access beyond end of device [ 495.135531][ T7908] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 495.150582][ T7908] SQUASHFS error: Failed to read block 0x0: -5 [ 495.156960][ T7908] unable to read squashfs_super_block [ 495.176938][ T7909] binder: 7907:7909 ioctl 40046207 0 returned -16 [ 495.313785][ T7916] FAULT_INJECTION: forcing a failure. [ 495.313785][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 495.358589][ T7916] CPU: 0 UID: 0 PID: 7916 Comm: syz.9.611 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 495.358619][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.358631][ T7916] Call Trace: [ 495.358639][ T7916] [ 495.358648][ T7916] dump_stack_lvl+0x189/0x250 [ 495.358677][ T7916] ? __pfx____ratelimit+0x10/0x10 [ 495.358706][ T7916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.358727][ T7916] ? __pfx__printk+0x10/0x10 [ 495.358754][ T7916] ? __pfx___might_resched+0x10/0x10 [ 495.358775][ T7916] ? fs_reclaim_acquire+0x7d/0x100 [ 495.358811][ T7916] should_fail_ex+0x414/0x560 [ 495.358841][ T7916] should_failslab+0xa8/0x100 [ 495.358868][ T7916] kmem_cache_alloc_noprof+0x73/0x3c0 [ 495.358890][ T7916] ? skb_clone+0x212/0x3a0 [ 495.358920][ T7916] skb_clone+0x212/0x3a0 [ 495.358944][ T7916] ? nfnetlink_rcv+0x486/0x2520 [ 495.358977][ T7916] nfnetlink_rcv+0x4b4/0x2520 [ 495.359014][ T7916] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 495.359047][ T7916] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 495.359073][ T7916] ? __dev_queue_xmit+0x27e/0x3a70 [ 495.359101][ T7916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.359129][ T7916] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 495.359175][ T7916] ? ref_tracker_free+0x63a/0x7d0 [ 495.359198][ T7916] ? __copy_skb_header+0xa7/0x550 [ 495.359224][ T7916] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.359248][ T7916] ? __skb_clone+0x63/0x7a0 [ 495.359278][ T7916] ? __skb_clone+0x483/0x7a0 [ 495.359310][ T7916] ? skb_clone+0x246/0x3a0 [ 495.359337][ T7916] ? __netlink_deliver_tap+0x807/0x850 [ 495.359360][ T7916] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.359389][ T7916] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.359411][ T7916] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.359438][ T7916] netlink_unicast+0x75b/0x8d0 [ 495.359467][ T7916] netlink_sendmsg+0x805/0xb30 [ 495.359499][ T7916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.359526][ T7916] ? aa_sock_msg_perm+0x94/0x160 [ 495.359548][ T7916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.359576][ T7916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.359602][ T7916] __sock_sendmsg+0x21c/0x270 [ 495.359633][ T7916] ____sys_sendmsg+0x505/0x830 [ 495.359664][ T7916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.359699][ T7916] ? import_iovec+0x74/0xa0 [ 495.359722][ T7916] ___sys_sendmsg+0x21f/0x2a0 [ 495.359751][ T7916] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.359819][ T7916] ? __fget_files+0x2a/0x420 [ 495.359846][ T7916] ? __fget_files+0x3a0/0x420 [ 495.359884][ T7916] __x64_sys_sendmsg+0x19b/0x260 [ 495.359913][ T7916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.359948][ T7916] ? __pfx_ksys_write+0x10/0x10 [ 495.359980][ T7916] ? do_syscall_64+0xbe/0x3b0 [ 495.360004][ T7916] do_syscall_64+0xfa/0x3b0 [ 495.360023][ T7916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.360042][ T7916] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.360062][ T7916] ? clear_bhb_loop+0x60/0xb0 [ 495.360085][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.360105][ T7916] RIP: 0033:0x7fbe4118e929 [ 495.360123][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.360139][ T7916] RSP: 002b:00007fbe3eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.360159][ T7916] RAX: ffffffffffffffda RBX: 00007fbe413b5fa0 RCX: 00007fbe4118e929 [ 495.360174][ T7916] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 495.360188][ T7916] RBP: 00007fbe3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 495.360199][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.360210][ T7916] R13: 0000000000000000 R14: 00007fbe413b5fa0 R15: 00007fff4b919028 [ 495.360240][ T7916] [ 495.725120][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.096877][ T7922] FAULT_INJECTION: forcing a failure. [ 496.096877][ T7922] name failslab, interval 1, probability 0, space 0, times 0 [ 496.141632][ T7922] CPU: 1 UID: 0 PID: 7922 Comm: syz.1.613 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 496.141665][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.141678][ T7922] Call Trace: [ 496.141687][ T7922] [ 496.141696][ T7922] dump_stack_lvl+0x189/0x250 [ 496.141725][ T7922] ? __pfx____ratelimit+0x10/0x10 [ 496.141758][ T7922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.141782][ T7922] ? __pfx__printk+0x10/0x10 [ 496.141811][ T7922] ? __pfx___might_resched+0x10/0x10 [ 496.141834][ T7922] ? fs_reclaim_acquire+0x7d/0x100 [ 496.141868][ T7922] should_fail_ex+0x414/0x560 [ 496.141899][ T7922] should_failslab+0xa8/0x100 [ 496.141927][ T7922] __kmalloc_cache_noprof+0x70/0x3d0 [ 496.141952][ T7922] ? nbd_add_socket+0x37d/0x9a0 [ 496.141989][ T7922] nbd_add_socket+0x37d/0x9a0 [ 496.142029][ T7922] ? __pfx_nbd_add_socket+0x10/0x10 [ 496.142062][ T7922] ? __nla_parse+0x40/0x60 [ 496.142096][ T7922] nbd_genl_connect+0x1114/0x1930 [ 496.142137][ T7922] ? __pfx_nbd_genl_connect+0x10/0x10 [ 496.142182][ T7922] ? __nla_parse+0x40/0x60 [ 496.142214][ T7922] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 496.142256][ T7922] genl_family_rcv_msg_doit+0x215/0x300 [ 496.142296][ T7922] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 496.142354][ T7922] genl_rcv_msg+0x60e/0x790 [ 496.142392][ T7922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.142420][ T7922] ? __pfx_nbd_genl_connect+0x10/0x10 [ 496.142466][ T7922] netlink_rcv_skb+0x208/0x470 [ 496.142497][ T7922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.142529][ T7922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.142574][ T7922] ? down_read+0x1ad/0x2e0 [ 496.142599][ T7922] genl_rcv+0x28/0x40 [ 496.142626][ T7922] netlink_unicast+0x75b/0x8d0 [ 496.142665][ T7922] netlink_sendmsg+0x805/0xb30 [ 496.142701][ T7922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.142729][ T7922] ? aa_sock_msg_perm+0x94/0x160 [ 496.142753][ T7922] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.142783][ T7922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.142810][ T7922] __sock_sendmsg+0x21c/0x270 [ 496.142835][ T7922] ____sys_sendmsg+0x505/0x830 [ 496.142868][ T7922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.142906][ T7922] ? import_iovec+0x74/0xa0 [ 496.142932][ T7922] ___sys_sendmsg+0x21f/0x2a0 [ 496.142961][ T7922] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.143030][ T7922] ? __fget_files+0x2a/0x420 [ 496.143058][ T7922] ? __fget_files+0x3a0/0x420 [ 496.143099][ T7922] __x64_sys_sendmsg+0x19b/0x260 [ 496.143129][ T7922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.143167][ T7922] ? __pfx_ksys_write+0x10/0x10 [ 496.143191][ T7922] ? rcu_is_watching+0x15/0xb0 [ 496.143219][ T7922] ? do_syscall_64+0xbe/0x3b0 [ 496.143243][ T7922] do_syscall_64+0xfa/0x3b0 [ 496.143261][ T7922] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.143291][ T7922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.143311][ T7922] ? clear_bhb_loop+0x60/0xb0 [ 496.143336][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.143356][ T7922] RIP: 0033:0x7f0a4178e929 [ 496.143374][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.143391][ T7922] RSP: 002b:00007f0a426b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.143412][ T7922] RAX: ffffffffffffffda RBX: 00007f0a419b5fa0 RCX: 00007f0a4178e929 [ 496.143427][ T7922] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 496.143441][ T7922] RBP: 00007f0a426b8090 R08: 0000000000000000 R09: 0000000000000000 [ 496.143453][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.143466][ T7922] R13: 0000000000000000 R14: 00007f0a419b5fa0 R15: 00007ffd3f37ab88 [ 496.143505][ T7922] [ 496.746465][ T7929] FAULT_INJECTION: forcing a failure. [ 496.746465][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 496.794171][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.9.616 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 496.794202][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.794215][ T7929] Call Trace: [ 496.794223][ T7929] [ 496.794232][ T7929] dump_stack_lvl+0x189/0x250 [ 496.794259][ T7929] ? __pfx____ratelimit+0x10/0x10 [ 496.794288][ T7929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.794311][ T7929] ? __pfx__printk+0x10/0x10 [ 496.794337][ T7929] ? __pfx___might_resched+0x10/0x10 [ 496.794360][ T7929] ? fs_reclaim_acquire+0x7d/0x100 [ 496.794400][ T7929] should_fail_ex+0x414/0x560 [ 496.794428][ T7929] should_failslab+0xa8/0x100 [ 496.794455][ T7929] __kmalloc_cache_noprof+0x70/0x3d0 [ 496.794479][ T7929] ? nl80211_set_qos_map+0x14a/0x6d0 [ 496.794509][ T7929] nl80211_set_qos_map+0x14a/0x6d0 [ 496.794542][ T7929] genl_family_rcv_msg_doit+0x215/0x300 [ 496.794579][ T7929] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 496.794622][ T7929] ? bpf_lsm_capable+0x9/0x20 [ 496.794643][ T7929] ? security_capable+0x7e/0x2e0 [ 496.794671][ T7929] genl_rcv_msg+0x60e/0x790 [ 496.794707][ T7929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.794729][ T7929] ? ref_tracker_free+0x63a/0x7d0 [ 496.794752][ T7929] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 496.794776][ T7929] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 496.794796][ T7929] ? __pfx_nl80211_post_doit+0x10/0x10 [ 496.794822][ T7929] ? __pfx_ref_tracker_free+0x10/0x10 [ 496.794859][ T7929] netlink_rcv_skb+0x208/0x470 [ 496.794884][ T7929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.794914][ T7929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.794955][ T7929] ? down_read+0x1ad/0x2e0 [ 496.794977][ T7929] genl_rcv+0x28/0x40 [ 496.795003][ T7929] netlink_unicast+0x75b/0x8d0 [ 496.795037][ T7929] netlink_sendmsg+0x805/0xb30 [ 496.795067][ T7929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.795093][ T7929] ? aa_sock_msg_perm+0x94/0x160 [ 496.795115][ T7929] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.795143][ T7929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.795168][ T7929] __sock_sendmsg+0x21c/0x270 [ 496.795191][ T7929] ____sys_sendmsg+0x505/0x830 [ 496.795223][ T7929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.795259][ T7929] ? import_iovec+0x74/0xa0 [ 496.795282][ T7929] ___sys_sendmsg+0x21f/0x2a0 [ 496.795310][ T7929] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.795374][ T7929] ? __fget_files+0x2a/0x420 [ 496.795409][ T7929] ? __fget_files+0x3a0/0x420 [ 496.795449][ T7929] __x64_sys_sendmsg+0x19b/0x260 [ 496.795476][ T7929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.795507][ T7929] ? rcu_is_watching+0x15/0xb0 [ 496.795535][ T7929] ? do_syscall_64+0xbe/0x3b0 [ 496.795559][ T7929] do_syscall_64+0xfa/0x3b0 [ 496.795576][ T7929] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.795603][ T7929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.795623][ T7929] ? clear_bhb_loop+0x60/0xb0 [ 496.795647][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.795666][ T7929] RIP: 0033:0x7fbe4118e929 [ 496.795684][ T7929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.795701][ T7929] RSP: 002b:00007fbe3eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.795722][ T7929] RAX: ffffffffffffffda RBX: 00007fbe413b5fa0 RCX: 00007fbe4118e929 [ 496.795737][ T7929] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 496.795749][ T7929] RBP: 00007fbe3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 496.795761][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.795772][ T7929] R13: 0000000000000000 R14: 00007fbe413b5fa0 R15: 00007fff4b919028 [ 496.795802][ T7929] [ 497.584864][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 497.601816][ T7947] exFAT-fs (rnullb0): invalid boot record signature [ 497.614086][ T7947] exFAT-fs (rnullb0): failed to read boot sector [ 497.624225][ T7947] exFAT-fs (rnullb0): failed to recognize exfat type [ 497.740586][ T7949] FAULT_INJECTION: forcing a failure. [ 497.740586][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 497.778582][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.8.624 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 497.778614][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.778626][ T7949] Call Trace: [ 497.778634][ T7949] [ 497.778643][ T7949] dump_stack_lvl+0x189/0x250 [ 497.778670][ T7949] ? __pfx____ratelimit+0x10/0x10 [ 497.778700][ T7949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.778723][ T7949] ? __pfx__printk+0x10/0x10 [ 497.778751][ T7949] ? __pfx___might_resched+0x10/0x10 [ 497.778773][ T7949] ? fs_reclaim_acquire+0x7d/0x100 [ 497.778805][ T7949] should_fail_ex+0x414/0x560 [ 497.778833][ T7949] should_failslab+0xa8/0x100 [ 497.778861][ T7949] kmem_cache_alloc_noprof+0x73/0x3c0 [ 497.778883][ T7949] ? skb_clone+0x212/0x3a0 [ 497.778914][ T7949] skb_clone+0x212/0x3a0 [ 497.778939][ T7949] ? nfnetlink_rcv+0x486/0x2520 [ 497.778972][ T7949] nfnetlink_rcv+0x4b4/0x2520 [ 497.779005][ T7949] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 497.779036][ T7949] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 497.779059][ T7949] ? __dev_queue_xmit+0x27e/0x3a70 [ 497.779087][ T7949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.779116][ T7949] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 497.779156][ T7949] ? ref_tracker_free+0x63a/0x7d0 [ 497.779177][ T7949] ? __copy_skb_header+0xa7/0x550 [ 497.779203][ T7949] ? __pfx_ref_tracker_free+0x10/0x10 [ 497.779226][ T7949] ? __skb_clone+0x63/0x7a0 [ 497.779261][ T7949] ? __skb_clone+0x483/0x7a0 [ 497.779290][ T7949] ? skb_clone+0x246/0x3a0 [ 497.779317][ T7949] ? __netlink_deliver_tap+0x807/0x850 [ 497.779341][ T7949] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.779369][ T7949] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.779390][ T7949] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.779416][ T7949] netlink_unicast+0x75b/0x8d0 [ 497.779444][ T7949] netlink_sendmsg+0x805/0xb30 [ 497.779476][ T7949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.779501][ T7949] ? aa_sock_msg_perm+0x94/0x160 [ 497.779523][ T7949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.779552][ T7949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.779577][ T7949] __sock_sendmsg+0x21c/0x270 [ 497.779600][ T7949] ____sys_sendmsg+0x505/0x830 [ 497.779631][ T7949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.779665][ T7949] ? import_iovec+0x74/0xa0 [ 497.779687][ T7949] ___sys_sendmsg+0x21f/0x2a0 [ 497.779714][ T7949] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.779773][ T7949] ? __fget_files+0x2a/0x420 [ 497.779800][ T7949] ? __fget_files+0x3a0/0x420 [ 497.779836][ T7949] __x64_sys_sendmsg+0x19b/0x260 [ 497.779863][ T7949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.779897][ T7949] ? __pfx_ksys_write+0x10/0x10 [ 497.779920][ T7949] ? rcu_is_watching+0x15/0xb0 [ 497.779947][ T7949] ? do_syscall_64+0xbe/0x3b0 [ 497.779970][ T7949] do_syscall_64+0xfa/0x3b0 [ 497.779987][ T7949] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.780015][ T7949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.780035][ T7949] ? clear_bhb_loop+0x60/0xb0 [ 497.780059][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.780078][ T7949] RIP: 0033:0x7f718ff8e929 [ 497.780095][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.780111][ T7949] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.780132][ T7949] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 497.780147][ T7949] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 497.780161][ T7949] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 497.780174][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.780185][ T7949] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 497.780212][ T7949] [ 498.037015][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043841c00: rx timeout, send abort [ 498.159978][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e2ac00: rx timeout, send abort [ 498.291645][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.625'. [ 498.368262][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.625'. [ 498.439893][ T7957] netlink: 65051 bytes leftover after parsing attributes in process `syz.8.627'. [ 498.464539][ T7957] FAULT_INJECTION: forcing a failure. [ 498.464539][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 498.486859][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.8.627 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 498.486889][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.486902][ T7957] Call Trace: [ 498.486910][ T7957] [ 498.486919][ T7957] dump_stack_lvl+0x189/0x250 [ 498.486946][ T7957] ? __pfx____ratelimit+0x10/0x10 [ 498.486977][ T7957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.487000][ T7957] ? __pfx__printk+0x10/0x10 [ 498.487037][ T7957] should_fail_ex+0x414/0x560 [ 498.487067][ T7957] should_failslab+0xa8/0x100 [ 498.487094][ T7957] kmem_cache_alloc_noprof+0x73/0x3c0 [ 498.487117][ T7957] ? skb_clone+0x212/0x3a0 [ 498.487148][ T7957] skb_clone+0x212/0x3a0 [ 498.487178][ T7957] __netlink_deliver_tap+0x404/0x850 [ 498.487223][ T7957] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.487248][ T7957] netlink_deliver_tap+0x19c/0x1b0 [ 498.487273][ T7957] netlink_sendskb+0x68/0x140 [ 498.487297][ T7957] netlink_rcv_skb+0x28c/0x470 [ 498.487321][ T7957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.487346][ T7957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.487379][ T7957] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.487401][ T7957] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.487427][ T7957] netlink_unicast+0x75b/0x8d0 [ 498.487457][ T7957] netlink_sendmsg+0x805/0xb30 [ 498.487492][ T7957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.487520][ T7957] ? aa_sock_msg_perm+0x94/0x160 [ 498.487543][ T7957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.487574][ T7957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.487600][ T7957] __sock_sendmsg+0x21c/0x270 [ 498.487624][ T7957] sock_write_iter+0x258/0x330 [ 498.487656][ T7957] ? __pfx_sock_write_iter+0x10/0x10 [ 498.487697][ T7957] ? bpf_lsm_file_permission+0x9/0x20 [ 498.487717][ T7957] ? security_file_permission+0x75/0x290 [ 498.487755][ T7957] vfs_write+0x548/0xa90 [ 498.487787][ T7957] ? __pfx_sock_write_iter+0x10/0x10 [ 498.487817][ T7957] ? __pfx_vfs_write+0x10/0x10 [ 498.487853][ T7957] ? __fget_files+0x2a/0x420 [ 498.487891][ T7957] ksys_write+0x145/0x250 [ 498.487920][ T7957] ? __pfx_ksys_write+0x10/0x10 [ 498.487951][ T7957] ? do_syscall_64+0xbe/0x3b0 [ 498.487975][ T7957] do_syscall_64+0xfa/0x3b0 [ 498.487993][ T7957] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.488021][ T7957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.488042][ T7957] ? clear_bhb_loop+0x60/0xb0 [ 498.488066][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.488085][ T7957] RIP: 0033:0x7f718ff8e929 [ 498.488104][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.488122][ T7957] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.488144][ T7957] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 498.488159][ T7957] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 498.488173][ T7957] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 498.488185][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.488197][ T7957] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 498.488236][ T7957] [ 498.658875][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043841c00: abort rx timeout. Force session deactivation [ 498.752816][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.821276][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e2ac00: abort rx timeout. Force session deactivation [ 498.899850][ T7959] gfs2: not a GFS2 filesystem [ 499.530058][ T7981] netlink: 128 bytes leftover after parsing attributes in process `syz.1.636'. [ 499.660423][ T7983] netlink: 128 bytes leftover after parsing attributes in process `syz.8.637'. [ 499.718062][ T7983] FAULT_INJECTION: forcing a failure. [ 499.718062][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 499.786550][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.8.637 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 499.786582][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.786595][ T7983] Call Trace: [ 499.786603][ T7983] [ 499.786613][ T7983] dump_stack_lvl+0x189/0x250 [ 499.786642][ T7983] ? __pfx____ratelimit+0x10/0x10 [ 499.786674][ T7983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.786701][ T7983] ? __pfx__printk+0x10/0x10 [ 499.786731][ T7983] ? __pfx___might_resched+0x10/0x10 [ 499.786754][ T7983] ? fs_reclaim_acquire+0x7d/0x100 [ 499.786787][ T7983] should_fail_ex+0x414/0x560 [ 499.786817][ T7983] should_failslab+0xa8/0x100 [ 499.786845][ T7983] __kmalloc_cache_noprof+0x70/0x3d0 [ 499.786869][ T7983] ? netlbl_cipsov4_add+0x590/0x24b0 [ 499.786899][ T7983] netlbl_cipsov4_add+0x590/0x24b0 [ 499.786934][ T7983] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 499.786963][ T7983] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 499.787002][ T7983] genl_family_rcv_msg_doit+0x215/0x300 [ 499.787048][ T7983] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 499.787092][ T7983] ? bpf_lsm_capable+0x9/0x20 [ 499.787115][ T7983] ? security_capable+0x7e/0x2e0 [ 499.787143][ T7983] genl_rcv_msg+0x60e/0x790 [ 499.787179][ T7983] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.787208][ T7983] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 499.787247][ T7983] netlink_rcv_skb+0x208/0x470 [ 499.787270][ T7983] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.787300][ T7983] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.787342][ T7983] ? down_read+0x1ad/0x2e0 [ 499.787367][ T7983] genl_rcv+0x28/0x40 [ 499.787395][ T7983] netlink_unicast+0x75b/0x8d0 [ 499.787429][ T7983] netlink_sendmsg+0x805/0xb30 [ 499.787465][ T7983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.787492][ T7983] ? aa_sock_msg_perm+0x94/0x160 [ 499.787516][ T7983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.787545][ T7983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.787572][ T7983] __sock_sendmsg+0x21c/0x270 [ 499.787596][ T7983] ____sys_sendmsg+0x505/0x830 [ 499.787629][ T7983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.787667][ T7983] ? import_iovec+0x74/0xa0 [ 499.787690][ T7983] ___sys_sendmsg+0x21f/0x2a0 [ 499.787720][ T7983] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.787786][ T7983] ? __fget_files+0x2a/0x420 [ 499.787814][ T7983] ? __fget_files+0x3a0/0x420 [ 499.787855][ T7983] __x64_sys_sendmsg+0x19b/0x260 [ 499.787885][ T7983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.787923][ T7983] ? __pfx_ksys_write+0x10/0x10 [ 499.787956][ T7983] ? do_syscall_64+0xbe/0x3b0 [ 499.787980][ T7983] do_syscall_64+0xfa/0x3b0 [ 499.787999][ T7983] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.788034][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.788055][ T7983] ? clear_bhb_loop+0x60/0xb0 [ 499.788079][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.788100][ T7983] RIP: 0033:0x7f718ff8e929 [ 499.788118][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.788137][ T7983] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.788160][ T7983] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 499.788175][ T7983] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 499.788189][ T7983] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 499.788203][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.788216][ T7983] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 499.788248][ T7983] [ 500.393642][ T7991] binder: 7990:7991 ioctl c018620c 200000000380 returned -22 [ 500.577624][ T7993] netlink: 104 bytes leftover after parsing attributes in process `syz.1.640'. [ 500.894897][ T8000] netlink: 104 bytes leftover after parsing attributes in process `syz.8.644'. [ 501.161615][ T8008] tipc: Enabling of bearer rejected, failed to enable media [ 501.238153][ T8010] FAULT_INJECTION: forcing a failure. [ 501.238153][ T8010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.326651][ T8010] CPU: 0 UID: 0 PID: 8010 Comm: syz.1.645 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 501.326682][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.326695][ T8010] Call Trace: [ 501.326703][ T8010] [ 501.326712][ T8010] dump_stack_lvl+0x189/0x250 [ 501.326740][ T8010] ? __pfx____ratelimit+0x10/0x10 [ 501.326771][ T8010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.326794][ T8010] ? __pfx__printk+0x10/0x10 [ 501.326816][ T8010] ? __might_fault+0xb0/0x130 [ 501.326850][ T8010] should_fail_ex+0x414/0x560 [ 501.326880][ T8010] _copy_from_user+0x2d/0xb0 [ 501.326909][ T8010] ___sys_recvmsg+0x12e/0x510 [ 501.326942][ T8010] ? __pfx____sys_recvmsg+0x10/0x10 [ 501.326999][ T8010] ? __might_fault+0xb0/0x130 [ 501.327025][ T8010] do_recvmmsg+0x307/0x770 [ 501.327060][ T8010] ? __pfx_do_recvmmsg+0x10/0x10 [ 501.327098][ T8010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.327134][ T8010] __x64_sys_recvmmsg+0x190/0x240 [ 501.327163][ T8010] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 501.327193][ T8010] ? do_syscall_64+0xbe/0x3b0 [ 501.327214][ T8010] do_syscall_64+0xfa/0x3b0 [ 501.327231][ T8010] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.327259][ T8010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.327278][ T8010] ? clear_bhb_loop+0x60/0xb0 [ 501.327302][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.327322][ T8010] RIP: 0033:0x7f0a4178e929 [ 501.327339][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.327357][ T8010] RSP: 002b:00007f0a42676038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 501.327379][ T8010] RAX: ffffffffffffffda RBX: 00007f0a419b6160 RCX: 00007f0a4178e929 [ 501.327395][ T8010] RDX: 04000000000002b6 RSI: 0000200000000cc0 RDI: 0000000000000004 [ 501.327409][ T8010] RBP: 00007f0a42676090 R08: 0000000000000000 R09: 0000000000000000 [ 501.327422][ T8010] R10: 0000000040002132 R11: 0000000000000246 R12: 0000000000000001 [ 501.327435][ T8010] R13: 0000000000000001 R14: 00007f0a419b6160 R15: 00007ffd3f37ab88 [ 501.327466][ T8010] [ 501.563188][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.569618][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.786571][ T7808] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 501.967025][ T8014] XFS (rnullb0): Invalid superblock magic number [ 502.146435][ T7808] usb 9-1: Using ep0 maxpacket: 32 [ 502.198465][ T7808] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 502.207903][ T7808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.216013][ T7808] usb 9-1: Product: syz [ 502.236438][ T7808] usb 9-1: Manufacturer: syz [ 502.241099][ T7808] usb 9-1: SerialNumber: syz [ 502.248061][ T8022] netlink: 104 bytes leftover after parsing attributes in process `syz.1.650'. [ 502.268844][ T7808] usb 9-1: config 0 descriptor?? [ 502.558010][ T5878] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci11/hci11:201' [ 502.569290][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/u9:2 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 502.569319][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.569338][ T5878] Workqueue: hci11 hci_rx_work [ 502.569361][ T5878] Call Trace: [ 502.569370][ T5878] [ 502.569379][ T5878] dump_stack_lvl+0x189/0x250 [ 502.569403][ T5878] ? kernfs_path_from_node+0x2c/0x260 [ 502.569423][ T5878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.569446][ T5878] ? __pfx__printk+0x10/0x10 [ 502.569471][ T5878] ? kernfs_path_from_node+0x2c/0x260 [ 502.569487][ T5878] ? kernfs_path_from_node+0x2c/0x260 [ 502.569508][ T5878] ? kernfs_path_from_node+0x22c/0x260 [ 502.569523][ T5878] ? kernfs_path_from_node+0x2c/0x260 [ 502.569544][ T5878] sysfs_create_dir_ns+0x259/0x280 [ 502.569577][ T5878] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 502.569605][ T5878] ? do_raw_spin_unlock+0x122/0x240 [ 502.569636][ T5878] kobject_add_internal+0x59f/0xb40 [ 502.569667][ T5878] kobject_add+0x155/0x220 [ 502.569694][ T5878] ? __pfx_kobject_add+0x10/0x10 [ 502.569716][ T5878] ? _raw_spin_unlock+0x28/0x50 [ 502.569747][ T5878] ? get_device_parent+0x366/0x3a0 [ 502.569783][ T5878] device_add+0x408/0xb50 [ 502.569810][ T5878] hci_conn_add_sysfs+0xd5/0x1e0 [ 502.569843][ T5878] le_conn_complete_evt+0xc3a/0x1220 [ 502.569882][ T5878] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 502.569907][ T5878] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 502.569926][ T5878] ? __asan_memcpy+0x40/0x70 [ 502.569949][ T5878] ? __pfx___mutex_lock+0x10/0x10 [ 502.569970][ T5878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.569989][ T5878] ? skb_pull_data+0xfb/0x200 [ 502.570023][ T5878] hci_le_conn_complete_evt+0x187/0x450 [ 502.570054][ T5878] hci_event_packet+0x78f/0x1200 [ 502.570090][ T5878] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 502.570113][ T5878] ? __pfx_hci_event_packet+0x10/0x10 [ 502.570145][ T5878] ? kcov_remote_start+0x4d3/0x7f0 [ 502.570176][ T5878] ? warn_bogus_irq_restore+0x30/0x40 [ 502.570207][ T5878] ? hci_send_to_monitor+0xe2/0x570 [ 502.570234][ T5878] hci_rx_work+0x46a/0xe80 [ 502.570262][ T5878] ? process_scheduled_works+0x9ef/0x17b0 [ 502.570288][ T5878] process_scheduled_works+0xae1/0x17b0 [ 502.570341][ T5878] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.570382][ T5878] worker_thread+0x8a0/0xda0 [ 502.570430][ T5878] kthread+0x70e/0x8a0 [ 502.570461][ T5878] ? __pfx_worker_thread+0x10/0x10 [ 502.570484][ T5878] ? __pfx_kthread+0x10/0x10 [ 502.570512][ T5878] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.570539][ T5878] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.570567][ T5878] ? __pfx_kthread+0x10/0x10 [ 502.570595][ T5878] ret_from_fork+0x3f9/0x770 [ 502.570620][ T5878] ? __pfx_ret_from_fork+0x10/0x10 [ 502.570648][ T5878] ? __switch_to_asm+0x39/0x70 [ 502.570673][ T5878] ? __switch_to_asm+0x33/0x70 [ 502.570697][ T5878] ? __pfx_kthread+0x10/0x10 [ 502.570726][ T5878] ret_from_fork_asm+0x1a/0x30 [ 502.570778][ T5878] [ 502.570836][ T5878] kobject: kobject_add_internal failed for hci11:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.888899][ T5878] Bluetooth: hci11: failed to register connection device [ 502.898797][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.907916][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.917026][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.926060][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.935167][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.944438][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.954104][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.964344][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.973413][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.984595][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 502.993701][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.002978][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.012148][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.021224][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.030306][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.039418][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.048526][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.058273][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.067348][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.077605][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.088805][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.097985][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.107136][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.117810][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.126984][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.136062][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.145160][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.154798][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.163923][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.172938][ T7808] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 503.181449][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.193624][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.202649][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.211682][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.220841][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.229855][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.238888][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.247951][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.258031][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.267457][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.276530][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.285580][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.296843][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.305838][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.314886][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.323926][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.333085][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.345186][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.354236][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.363839][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.372867][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.386873][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.397968][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.407090][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.416237][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.425703][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.434788][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.444541][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.453884][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.463476][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.473468][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.473610][ T8036] random: crng reseeded on system resumption [ 503.482443][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.500316][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.510125][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.519883][ T5878] Bluetooth: hci11: Ignoring HCI_Connection_Complete for existing connection [ 503.617479][ T7808] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 503.636751][ T7808] usb 9-1: USB disconnect, device number 9 [ 504.286568][ T5965] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 504.299871][ T8058] FAULT_INJECTION: forcing a failure. [ 504.299871][ T8058] name failslab, interval 1, probability 0, space 0, times 0 [ 504.386854][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.8.659 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 504.386882][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.386894][ T8058] Call Trace: [ 504.386903][ T8058] [ 504.386911][ T8058] dump_stack_lvl+0x189/0x250 [ 504.386937][ T8058] ? __pfx____ratelimit+0x10/0x10 [ 504.386966][ T8058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.386989][ T8058] ? __pfx__printk+0x10/0x10 [ 504.387013][ T8058] ? __pfx___might_resched+0x10/0x10 [ 504.387033][ T8058] ? fs_reclaim_acquire+0x7d/0x100 [ 504.387064][ T8058] should_fail_ex+0x414/0x560 [ 504.387091][ T8058] should_failslab+0xa8/0x100 [ 504.387120][ T8058] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 504.387145][ T8058] ? __alloc_skb+0x112/0x2d0 [ 504.387173][ T8058] __alloc_skb+0x112/0x2d0 [ 504.387199][ T8058] alloc_skb_with_frags+0xca/0x890 [ 504.387227][ T8058] ? kernel_text_address+0xa5/0xe0 [ 504.387258][ T8058] ? __pfx___dev_queue_xmit+0x10/0x10 [ 504.387290][ T8058] sock_alloc_send_pskb+0x857/0x990 [ 504.387337][ T8058] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 504.387367][ T8058] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.387390][ T8058] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.387419][ T8058] llc_ui_sendmsg+0x477/0xdd0 [ 504.387460][ T8058] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 504.387482][ T8058] ? aa_sock_msg_perm+0x94/0x160 [ 504.387502][ T8058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.387529][ T8058] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 504.387553][ T8058] __sock_sendmsg+0x21c/0x270 [ 504.387575][ T8058] sock_sendmsg+0x158/0x230 [ 504.387596][ T8058] ? __pfx_sock_sendmsg+0x10/0x10 [ 504.387626][ T8058] ? __asan_memset+0x22/0x50 [ 504.387645][ T8058] ? iov_iter_bvec+0xb8/0x180 [ 504.387677][ T8058] splice_to_socket+0x8ff/0xf10 [ 504.387734][ T8058] ? __pfx_splice_to_socket+0x10/0x10 [ 504.387786][ T8058] ? touch_atime+0x384/0x6d0 [ 504.387805][ T8058] ? shmem_file_splice_read+0xa63/0xbd0 [ 504.387845][ T8058] ? __pfx_splice_to_socket+0x10/0x10 [ 504.387870][ T8058] direct_splice_actor+0x101/0x160 [ 504.387898][ T8058] splice_direct_to_actor+0x5a5/0xcc0 [ 504.387938][ T8058] ? __pfx_direct_splice_actor+0x10/0x10 [ 504.387963][ T8058] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 504.387988][ T8058] ? __pfx_aa_file_perm+0x10/0x10 [ 504.388013][ T8058] do_splice_direct+0x181/0x270 [ 504.388041][ T8058] ? __pfx_do_splice_direct+0x10/0x10 [ 504.388071][ T8058] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 504.388101][ T8058] ? bpf_lsm_file_permission+0x9/0x20 [ 504.388120][ T8058] ? security_file_permission+0x75/0x290 [ 504.388148][ T8058] ? rw_verify_area+0x258/0x650 [ 504.388177][ T8058] do_sendfile+0x4da/0x7e0 [ 504.388197][ T8058] ? __pfx_vfs_write+0x10/0x10 [ 504.388229][ T8058] ? __pfx_do_sendfile+0x10/0x10 [ 504.388248][ T8058] ? __fget_files+0x3a0/0x420 [ 504.388287][ T8058] __se_sys_sendfile64+0x13e/0x190 [ 504.388320][ T8058] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 504.388354][ T8058] ? do_syscall_64+0xbe/0x3b0 [ 504.388377][ T8058] do_syscall_64+0xfa/0x3b0 [ 504.388395][ T8058] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.388425][ T8058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.388445][ T8058] ? clear_bhb_loop+0x60/0xb0 [ 504.388469][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.388486][ T8058] RIP: 0033:0x7f718ff8e929 [ 504.388504][ T8058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.388520][ T8058] RSP: 002b:00007f718ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 504.388541][ T8058] RAX: ffffffffffffffda RBX: 00007f71901b6080 RCX: 00007f718ff8e929 [ 504.388555][ T8058] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 504.388566][ T8058] RBP: 00007f718ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.388579][ T8058] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 504.388590][ T8058] R13: 0000000000000001 R14: 00007f71901b6080 R15: 00007fff2941ac08 [ 504.388619][ T8058] [ 504.904176][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 505.054922][ T5965] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 505.076593][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.092893][ T5965] usb 2-1: Product: syz [ 505.116445][ T5965] usb 2-1: Manufacturer: syz [ 505.138912][ T5965] usb 2-1: SerialNumber: syz [ 505.264943][ T5965] usb 2-1: config 0 descriptor?? [ 505.504988][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.8.662'. [ 505.547973][ T5965] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 505.576480][ T5878] Bluetooth: hci11: command tx timeout [ 505.685959][ T8070] x_tables: duplicate underflow at hook 1 [ 505.709883][ T8070] 9pnet_fd: Insufficient options for proto=fd [ 505.954739][ T24] usb 2-1: USB disconnect, device number 7 [ 506.026514][ T5965] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 506.190560][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 506.213919][ T5965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.246515][ T5965] usb 1-1: config 0 has no interfaces? [ 506.252901][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.667'. [ 506.264782][ T5965] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 506.284203][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.303517][ T5965] usb 1-1: Product: syz [ 506.313595][ T5965] usb 1-1: Manufacturer: syz [ 506.323859][ T5965] usb 1-1: SerialNumber: syz [ 506.327114][ T8079] FAULT_INJECTION: forcing a failure. [ 506.327114][ T8079] name failslab, interval 1, probability 0, space 0, times 0 [ 506.348118][ T5965] usb 1-1: config 0 descriptor?? [ 506.396583][ T8079] CPU: 0 UID: 0 PID: 8079 Comm: syz.8.667 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 506.396614][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.396626][ T8079] Call Trace: [ 506.396635][ T8079] [ 506.396643][ T8079] dump_stack_lvl+0x189/0x250 [ 506.396670][ T8079] ? __pfx____ratelimit+0x10/0x10 [ 506.396711][ T8079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.396734][ T8079] ? __pfx__printk+0x10/0x10 [ 506.396764][ T8079] ? __lock_acquire+0xab9/0xd20 [ 506.396788][ T8079] should_fail_ex+0x414/0x560 [ 506.396818][ T8079] should_failslab+0xa8/0x100 [ 506.396846][ T8079] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 506.396872][ T8079] ? __alloc_skb+0x112/0x2d0 [ 506.396900][ T8079] __alloc_skb+0x112/0x2d0 [ 506.396928][ T8079] __netdev_alloc_skb+0x108/0x970 [ 506.396951][ T8079] ? __pfx___mutex_trylock_common+0x10/0x10 [ 506.396978][ T8079] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 506.397014][ T8079] ieee80211_tx_control_port+0x19f/0xcc0 [ 506.397046][ T8079] ? __rtnl_unlock+0xc8/0xf0 [ 506.397070][ T8079] ? netdev_run_todo+0xe1d/0xea0 [ 506.397099][ T8079] nl80211_tx_control_port+0x610/0x980 [ 506.397139][ T8079] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 506.397170][ T8079] ? nl80211_pre_doit+0x4f1/0x930 [ 506.397204][ T8079] genl_family_rcv_msg_doit+0x215/0x300 [ 506.397243][ T8079] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 506.397287][ T8079] ? bpf_lsm_capable+0x9/0x20 [ 506.397309][ T8079] ? security_capable+0x7e/0x2e0 [ 506.397336][ T8079] genl_rcv_msg+0x60e/0x790 [ 506.397373][ T8079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.397421][ T8079] ? ref_tracker_free+0x63a/0x7d0 [ 506.397445][ T8079] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 506.397471][ T8079] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 506.397496][ T8079] ? __pfx_nl80211_post_doit+0x10/0x10 [ 506.397525][ T8079] ? __pfx_ref_tracker_free+0x10/0x10 [ 506.397562][ T8079] netlink_rcv_skb+0x208/0x470 [ 506.397588][ T8079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.397619][ T8079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.397661][ T8079] ? down_read+0x1ad/0x2e0 [ 506.397690][ T8079] genl_rcv+0x28/0x40 [ 506.397715][ T8079] netlink_unicast+0x75b/0x8d0 [ 506.397745][ T8079] netlink_sendmsg+0x805/0xb30 [ 506.397777][ T8079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.397806][ T8079] ? aa_sock_msg_perm+0x94/0x160 [ 506.397828][ T8079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.397857][ T8079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.397882][ T8079] __sock_sendmsg+0x21c/0x270 [ 506.397906][ T8079] ____sys_sendmsg+0x505/0x830 [ 506.397939][ T8079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.397976][ T8079] ? import_iovec+0x74/0xa0 [ 506.398000][ T8079] ___sys_sendmsg+0x21f/0x2a0 [ 506.398029][ T8079] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.398094][ T8079] ? __fget_files+0x2a/0x420 [ 506.398121][ T8079] ? __fget_files+0x3a0/0x420 [ 506.398159][ T8079] __x64_sys_sendmsg+0x19b/0x260 [ 506.398187][ T8079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.398222][ T8079] ? __pfx_ksys_write+0x10/0x10 [ 506.398244][ T8079] ? rcu_is_watching+0x15/0xb0 [ 506.398272][ T8079] ? do_syscall_64+0xbe/0x3b0 [ 506.398294][ T8079] do_syscall_64+0xfa/0x3b0 [ 506.398313][ T8079] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.398342][ T8079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.398362][ T8079] ? clear_bhb_loop+0x60/0xb0 [ 506.398387][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.398406][ T8079] RIP: 0033:0x7f718ff8e929 [ 506.398423][ T8079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.398440][ T8079] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.398460][ T8079] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 506.398475][ T8079] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 506.398486][ T8079] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 506.398497][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.398509][ T8079] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 506.398539][ T8079] [ 508.523836][ T24] usb 1-1: USB disconnect, device number 5 [ 508.584546][ T8109] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 508.646951][ T8109] VFS: Can't find a romfs filesystem on dev rnullb0. [ 508.646951][ T8109] [ 508.858615][ T5888] Bluetooth: hci4: command 0x0406 tx timeout [ 509.017909][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.684'. [ 509.029211][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.684'. [ 509.336670][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 509.497004][ T9] usb 1-1: device descriptor read/64, error -71 [ 509.746519][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 509.900568][ T9] usb 1-1: device descriptor read/64, error -71 [ 510.027416][ T9] usb usb1-port1: attempt power cycle [ 510.396535][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 510.440629][ T9] usb 1-1: device descriptor read/8, error -71 [ 510.686496][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 510.705744][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 510.747691][ T9] usb 1-1: device descriptor read/8, error -71 [ 510.826608][ T43] usb 2-1: device descriptor read/64, error -71 [ 510.868527][ T9] usb usb1-port1: unable to enumerate USB device [ 511.076475][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 511.185546][ T8166] FAULT_INJECTION: forcing a failure. [ 511.185546][ T8166] name failslab, interval 1, probability 0, space 0, times 0 [ 511.198838][ T8166] CPU: 1 UID: 0 PID: 8166 Comm: syz.8.698 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 511.198866][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.198880][ T8166] Call Trace: [ 511.198889][ T8166] [ 511.198897][ T8166] dump_stack_lvl+0x189/0x250 [ 511.198925][ T8166] ? __pfx____ratelimit+0x10/0x10 [ 511.198957][ T8166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.198981][ T8166] ? __pfx__printk+0x10/0x10 [ 511.199009][ T8166] ? __pfx___might_resched+0x10/0x10 [ 511.199029][ T8166] ? fs_reclaim_acquire+0x7d/0x100 [ 511.199062][ T8166] should_fail_ex+0x414/0x560 [ 511.199092][ T8166] should_failslab+0xa8/0x100 [ 511.199119][ T8166] __kmalloc_cache_noprof+0x70/0x3d0 [ 511.199144][ T8166] ? genl_start+0x1c9/0x6c0 [ 511.199179][ T8166] genl_start+0x1c9/0x6c0 [ 511.199206][ T8166] ? netlink_lookup+0x30/0x200 [ 511.199235][ T8166] __netlink_dump_start+0x466/0x7e0 [ 511.199275][ T8166] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 511.199309][ T8166] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 511.199337][ T8166] ? genl_get_cmd+0x67f/0x910 [ 511.199372][ T8166] ? __pfx_genl_start+0x10/0x10 [ 511.199398][ T8166] ? __pfx_genl_dumpit+0x10/0x10 [ 511.199425][ T8166] ? __pfx_genl_done+0x10/0x10 [ 511.199470][ T8166] genl_rcv_msg+0x5da/0x790 [ 511.199507][ T8166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.199533][ T8166] ? ref_tracker_free+0x63a/0x7d0 [ 511.199557][ T8166] ? __pfx_ethnl_rss_dump_start+0x10/0x10 [ 511.199585][ T8166] ? __pfx_ethnl_rss_dumpit+0x10/0x10 [ 511.199615][ T8166] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.199653][ T8166] netlink_rcv_skb+0x208/0x470 [ 511.199678][ T8166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.199710][ T8166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.199753][ T8166] ? down_read+0x1ad/0x2e0 [ 511.199777][ T8166] genl_rcv+0x28/0x40 [ 511.199804][ T8166] netlink_unicast+0x75b/0x8d0 [ 511.199838][ T8166] netlink_sendmsg+0x805/0xb30 [ 511.199873][ T8166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.199902][ T8166] ? aa_sock_msg_perm+0x94/0x160 [ 511.199925][ T8166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.199954][ T8166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.199980][ T8166] __sock_sendmsg+0x21c/0x270 [ 511.200003][ T8166] ____sys_sendmsg+0x505/0x830 [ 511.200034][ T8166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.200070][ T8166] ? import_iovec+0x74/0xa0 [ 511.200094][ T8166] ___sys_sendmsg+0x21f/0x2a0 [ 511.200122][ T8166] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.200187][ T8166] ? __fget_files+0x2a/0x420 [ 511.200215][ T8166] ? __fget_files+0x3a0/0x420 [ 511.200260][ T8166] __x64_sys_sendmsg+0x19b/0x260 [ 511.200290][ T8166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.200327][ T8166] ? __pfx_ksys_write+0x10/0x10 [ 511.200351][ T8166] ? rcu_is_watching+0x15/0xb0 [ 511.200381][ T8166] ? do_syscall_64+0xbe/0x3b0 [ 511.200405][ T8166] do_syscall_64+0xfa/0x3b0 [ 511.200423][ T8166] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.200453][ T8166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.200472][ T8166] ? clear_bhb_loop+0x60/0xb0 [ 511.200498][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.200518][ T8166] RIP: 0033:0x7f718ff8e929 [ 511.200535][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.200554][ T8166] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.200576][ T8166] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 511.200592][ T8166] RDX: 0000000000008840 RSI: 0000200000000240 RDI: 0000000000000003 [ 511.200606][ T8166] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 511.200619][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.200631][ T8166] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 511.200663][ T8166] [ 511.590571][ T43] usb 2-1: device descriptor read/64, error -71 [ 511.657256][ T5878] Bluetooth: hci11: command tx timeout [ 511.681412][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.706840][ T43] usb usb2-port1: attempt power cycle [ 511.877966][ T8170] FAULT_INJECTION: forcing a failure. [ 511.877966][ T8170] name failslab, interval 1, probability 0, space 0, times 0 [ 511.936650][ T8170] CPU: 0 UID: 0 PID: 8170 Comm: syz.8.700 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 511.936682][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.936695][ T8170] Call Trace: [ 511.936703][ T8170] [ 511.936712][ T8170] dump_stack_lvl+0x189/0x250 [ 511.936741][ T8170] ? __pfx____ratelimit+0x10/0x10 [ 511.936772][ T8170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.936796][ T8170] ? __pfx__printk+0x10/0x10 [ 511.936829][ T8170] ? __pfx___might_resched+0x10/0x10 [ 511.936851][ T8170] ? fs_reclaim_acquire+0x7d/0x100 [ 511.936907][ T8170] should_fail_ex+0x414/0x560 [ 511.936938][ T8170] should_failslab+0xa8/0x100 [ 511.936965][ T8170] __kmalloc_noprof+0xcb/0x4f0 [ 511.936989][ T8170] ? taskstats_user_cmd+0x52e/0x1160 [ 511.937025][ T8170] taskstats_user_cmd+0x52e/0x1160 [ 511.937072][ T8170] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 511.937110][ T8170] ? __nla_parse+0x40/0x60 [ 511.937142][ T8170] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 511.937183][ T8170] genl_family_rcv_msg_doit+0x215/0x300 [ 511.937227][ T8170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.937271][ T8170] ? bpf_lsm_capable+0x9/0x20 [ 511.937294][ T8170] ? security_capable+0x7e/0x2e0 [ 511.937322][ T8170] genl_rcv_msg+0x60e/0x790 [ 511.937358][ T8170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.937385][ T8170] ? ref_tracker_free+0x63a/0x7d0 [ 511.937411][ T8170] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 511.937441][ T8170] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.937479][ T8170] netlink_rcv_skb+0x208/0x470 [ 511.937504][ T8170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.937536][ T8170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.937579][ T8170] ? down_read+0x1ad/0x2e0 [ 511.937603][ T8170] genl_rcv+0x28/0x40 [ 511.937630][ T8170] netlink_unicast+0x75b/0x8d0 [ 511.937665][ T8170] netlink_sendmsg+0x805/0xb30 [ 511.937700][ T8170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.937729][ T8170] ? aa_sock_msg_perm+0x94/0x160 [ 511.937752][ T8170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.937781][ T8170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.937807][ T8170] __sock_sendmsg+0x21c/0x270 [ 511.937831][ T8170] ____sys_sendmsg+0x505/0x830 [ 511.937862][ T8170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.937898][ T8170] ? import_iovec+0x74/0xa0 [ 511.937922][ T8170] ___sys_sendmsg+0x21f/0x2a0 [ 511.937951][ T8170] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.938017][ T8170] ? __fget_files+0x2a/0x420 [ 511.938045][ T8170] ? __fget_files+0x3a0/0x420 [ 511.938083][ T8170] __x64_sys_sendmsg+0x19b/0x260 [ 511.938112][ T8170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.938149][ T8170] ? __pfx_ksys_write+0x10/0x10 [ 511.938173][ T8170] ? rcu_is_watching+0x15/0xb0 [ 511.938215][ T8170] ? do_syscall_64+0xbe/0x3b0 [ 511.938240][ T8170] do_syscall_64+0xfa/0x3b0 [ 511.938258][ T8170] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.938287][ T8170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.938308][ T8170] ? clear_bhb_loop+0x60/0xb0 [ 511.938333][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.938353][ T8170] RIP: 0033:0x7f718ff8e929 [ 511.938371][ T8170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.938390][ T8170] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.938411][ T8170] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 511.938427][ T8170] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 511.938441][ T8170] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 511.938454][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.938466][ T8170] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 511.938498][ T8170] [ 512.046449][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 512.442818][ T43] usb 2-1: device descriptor read/8, error -71 [ 512.687385][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 512.743899][ T43] usb 2-1: device descriptor read/8, error -71 [ 512.868973][ T43] usb usb2-port1: unable to enumerate USB device [ 512.965539][ T5820] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 513.146457][ T5820] usb 9-1: Using ep0 maxpacket: 32 [ 513.153372][ T5820] usb 9-1: config 103 has too many interfaces: 194, using maximum allowed: 32 [ 513.163034][ T5820] usb 9-1: config 103 has an invalid descriptor of length 14, skipping remainder of the config [ 513.173923][ T5820] usb 9-1: config 103 has 0 interfaces, different from the descriptor's value: 194 [ 513.200136][ T5820] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=e9.e9 [ 513.209696][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.218422][ T5820] usb 9-1: Product: syz [ 513.224208][ T5820] usb 9-1: Manufacturer: syz [ 513.231327][ T5820] usb 9-1: SerialNumber: syz [ 513.459505][ T8177] netlink: 'syz.8.703': attribute type 9 has an invalid length. [ 513.545528][ T5820] usb 9-1: USB disconnect, device number 10 [ 513.821873][ T5878] Bluetooth: hci5: command 0x0406 tx timeout [ 513.986498][ T5820] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 514.133887][ T8189] FAULT_INJECTION: forcing a failure. [ 514.133887][ T8189] name failslab, interval 1, probability 0, space 0, times 0 [ 514.148375][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.148404][ T5820] usb 2-1: config 0 has no interfaces? [ 514.148436][ T5820] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 514.148459][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.152197][ T5820] usb 2-1: config 0 descriptor?? [ 514.172275][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.8.708 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 514.172303][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.172315][ T8189] Call Trace: [ 514.172324][ T8189] [ 514.172332][ T8189] dump_stack_lvl+0x189/0x250 [ 514.172360][ T8189] ? __pfx____ratelimit+0x10/0x10 [ 514.172390][ T8189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.172412][ T8189] ? __pfx__printk+0x10/0x10 [ 514.172439][ T8189] ? __pfx___might_resched+0x10/0x10 [ 514.172461][ T8189] ? fs_reclaim_acquire+0x7d/0x100 [ 514.172492][ T8189] should_fail_ex+0x414/0x560 [ 514.172521][ T8189] should_failslab+0xa8/0x100 [ 514.172549][ T8189] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 514.172574][ T8189] ? __alloc_skb+0x112/0x2d0 [ 514.172601][ T8189] __alloc_skb+0x112/0x2d0 [ 514.172627][ T8189] netlink_ack+0x146/0xa50 [ 514.172661][ T8189] ? hsr_get_node_list+0xe9/0xa80 [ 514.172693][ T8189] hsr_get_node_list+0x817/0xa80 [ 514.172723][ T8189] ? hsr_get_node_list+0xe9/0xa80 [ 514.172755][ T8189] ? __pfx_hsr_get_node_list+0x10/0x10 [ 514.172786][ T8189] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 514.172825][ T8189] genl_family_rcv_msg_doit+0x215/0x300 [ 514.172861][ T8189] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 514.172914][ T8189] genl_rcv_msg+0x60e/0x790 [ 514.172949][ T8189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.172986][ T8189] ? ref_tracker_free+0x63a/0x7d0 [ 514.173009][ T8189] ? __pfx_hsr_get_node_list+0x10/0x10 [ 514.173038][ T8189] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.173074][ T8189] netlink_rcv_skb+0x208/0x470 [ 514.173099][ T8189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.173128][ T8189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.173169][ T8189] ? down_read+0x1ad/0x2e0 [ 514.173192][ T8189] genl_rcv+0x28/0x40 [ 514.173218][ T8189] netlink_unicast+0x75b/0x8d0 [ 514.173251][ T8189] netlink_sendmsg+0x805/0xb30 [ 514.173284][ T8189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.173311][ T8189] ? aa_sock_msg_perm+0x94/0x160 [ 514.173334][ T8189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.173363][ T8189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.173388][ T8189] __sock_sendmsg+0x21c/0x270 [ 514.173410][ T8189] ____sys_sendmsg+0x505/0x830 [ 514.173441][ T8189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.173477][ T8189] ? import_iovec+0x74/0xa0 [ 514.173500][ T8189] ___sys_sendmsg+0x21f/0x2a0 [ 514.173527][ T8189] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.173589][ T8189] ? __fget_files+0x2a/0x420 [ 514.173616][ T8189] ? __fget_files+0x3a0/0x420 [ 514.173655][ T8189] __x64_sys_sendmsg+0x19b/0x260 [ 514.173683][ T8189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.173720][ T8189] ? __pfx_ksys_write+0x10/0x10 [ 514.173740][ T8189] ? rcu_is_watching+0x15/0xb0 [ 514.173763][ T8189] ? do_syscall_64+0xbe/0x3b0 [ 514.173784][ T8189] do_syscall_64+0xfa/0x3b0 [ 514.173800][ T8189] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.173827][ T8189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.173846][ T8189] ? clear_bhb_loop+0x60/0xb0 [ 514.173869][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.173888][ T8189] RIP: 0033:0x7f718ff8e929 [ 514.173905][ T8189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.173922][ T8189] RSP: 002b:00007f7190d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.173943][ T8189] RAX: ffffffffffffffda RBX: 00007f71901b5fa0 RCX: 00007f718ff8e929 [ 514.173956][ T8189] RDX: 0000000000040094 RSI: 0000200000000100 RDI: 0000000000000003 [ 514.173968][ T8189] RBP: 00007f7190d11090 R08: 0000000000000000 R09: 0000000000000000 [ 514.173986][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.173997][ T8189] R13: 0000000000000000 R14: 00007f71901b5fa0 R15: 00007fff2941ac08 [ 514.174028][ T8189] [ 514.806145][ T5820] usb 2-1: USB disconnect, device number 12 [ 515.256806][ T5820] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 515.433218][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.446153][ T5820] usb 2-1: config 0 has no interfaces? [ 515.466125][ T5820] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 515.492130][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.526892][ T5820] usb 2-1: config 0 descriptor?? [ 517.163139][ T43] usb 2-1: USB disconnect, device number 13 [ 517.368219][ T8203] FAULT_INJECTION: forcing a failure. [ 517.368219][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 517.396267][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: syz.1.714 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 517.396299][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.396312][ T8203] Call Trace: [ 517.396321][ T8203] [ 517.396330][ T8203] dump_stack_lvl+0x189/0x250 [ 517.396378][ T8203] ? __pfx____ratelimit+0x10/0x10 [ 517.396406][ T8203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.396434][ T8203] ? __pfx__printk+0x10/0x10 [ 517.396462][ T8203] ? __pfx___might_resched+0x10/0x10 [ 517.396484][ T8203] ? fs_reclaim_acquire+0x7d/0x100 [ 517.396517][ T8203] should_fail_ex+0x414/0x560 [ 517.396548][ T8203] should_failslab+0xa8/0x100 [ 517.396576][ T8203] __kmalloc_noprof+0xcb/0x4f0 [ 517.396599][ T8203] ? taskstats_user_cmd+0x52e/0x1160 [ 517.396634][ T8203] taskstats_user_cmd+0x52e/0x1160 [ 517.396678][ T8203] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 517.396715][ T8203] ? __nla_parse+0x40/0x60 [ 517.396747][ T8203] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 517.396787][ T8203] genl_family_rcv_msg_doit+0x215/0x300 [ 517.396825][ T8203] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 517.396869][ T8203] ? bpf_lsm_capable+0x9/0x20 [ 517.396891][ T8203] ? security_capable+0x7e/0x2e0 [ 517.396919][ T8203] genl_rcv_msg+0x60e/0x790 [ 517.396956][ T8203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.396982][ T8203] ? ref_tracker_free+0x63a/0x7d0 [ 517.397007][ T8203] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 517.397037][ T8203] ? __pfx_ref_tracker_free+0x10/0x10 [ 517.397074][ T8203] netlink_rcv_skb+0x208/0x470 [ 517.397098][ T8203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.397129][ T8203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.397171][ T8203] ? down_read+0x1ad/0x2e0 [ 517.397196][ T8203] genl_rcv+0x28/0x40 [ 517.397223][ T8203] netlink_unicast+0x75b/0x8d0 [ 517.397257][ T8203] netlink_sendmsg+0x805/0xb30 [ 517.397292][ T8203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.397322][ T8203] ? aa_sock_msg_perm+0x94/0x160 [ 517.397345][ T8203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.397375][ T8203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.397401][ T8203] __sock_sendmsg+0x21c/0x270 [ 517.397432][ T8203] ____sys_sendmsg+0x505/0x830 [ 517.397465][ T8203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.397501][ T8203] ? import_iovec+0x74/0xa0 [ 517.397525][ T8203] ___sys_sendmsg+0x21f/0x2a0 [ 517.397554][ T8203] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.397619][ T8203] ? __fget_files+0x2a/0x420 [ 517.397647][ T8203] ? __fget_files+0x3a0/0x420 [ 517.397687][ T8203] __x64_sys_sendmsg+0x19b/0x260 [ 517.397716][ T8203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 517.397752][ T8203] ? __pfx_ksys_write+0x10/0x10 [ 517.397776][ T8203] ? rcu_is_watching+0x15/0xb0 [ 517.397804][ T8203] ? do_syscall_64+0xbe/0x3b0 [ 517.397829][ T8203] do_syscall_64+0xfa/0x3b0 [ 517.397847][ T8203] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.397876][ T8203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.397896][ T8203] ? clear_bhb_loop+0x60/0xb0 [ 517.397921][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.397940][ T8203] RIP: 0033:0x7f0a4178e929 [ 517.397958][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.397976][ T8203] RSP: 002b:00007f0a426b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.397998][ T8203] RAX: ffffffffffffffda RBX: 00007f0a419b5fa0 RCX: 00007f0a4178e929 [ 517.398014][ T8203] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 517.398027][ T8203] RBP: 00007f0a426b8090 R08: 0000000000000000 R09: 0000000000000000 [ 517.398040][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.398052][ T8203] R13: 0000000000000000 R14: 00007f0a419b5fa0 R15: 00007ffd3f37ab88 [ 517.398085][ T8203] [ 518.779256][ T31] INFO: task syz.1.175:6453 blocked for more than 143 seconds. [ 518.787254][ T31] Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 [ 518.794911][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.820263][ T31] task:syz.1.175 state:D stack:26824 pid:6453 tgid:6453 ppid:5874 task_flags:0x440040 flags:0x00004004 [ 518.840606][ T31] Call Trace: [ 518.843943][ T31] [ 518.849971][ T31] __schedule+0x16f5/0x4d00 [ 518.866517][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.871441][ T31] ? schedule+0x165/0x360 [ 518.875816][ T31] ? __pfx___schedule+0x10/0x10 [ 518.897298][ T31] ? schedule+0x91/0x360 [ 518.901629][ T31] schedule+0x165/0x360 [ 518.905828][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 518.919306][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.926282][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 518.936262][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 518.942719][ T5888] Bluetooth: hci6: command 0x0406 tx timeout [ 518.963357][ T31] ? page_cache_ra_order+0x445/0xc70 [ 518.971905][ T31] down_read+0x98/0x2e0 [ 518.976124][ T31] page_cache_ra_order+0x445/0xc70 [ 518.986785][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 518.992567][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 519.014278][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 519.024660][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 519.038801][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 519.044161][ T31] filemap_fault+0x62a/0x1200 [ 519.054161][ T31] ? __pagetable_ctor+0x253/0x340 [ 519.072379][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 519.079805][ T31] ? rcu_is_watching+0x15/0xb0 [ 519.084632][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 519.095802][ T31] __do_fault+0x135/0x390 [ 519.100318][ T31] __handle_mm_fault+0x198b/0x5620 [ 519.105595][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.119557][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 519.125091][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 519.131226][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 519.136600][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 519.142189][ T31] ? handle_softirqs+0x717/0x870 [ 519.147240][ T31] handle_mm_fault+0x40a/0x8e0 [ 519.152310][ T31] do_user_addr_fault+0xa81/0x1390 [ 519.157532][ T31] ? rcu_is_watching+0x15/0xb0 [ 519.170050][ T31] ? trace_page_fault_user+0x84/0x1e0 [ 519.175518][ T31] exc_page_fault+0x76/0xf0 [ 519.185941][ T31] asm_exc_page_fault+0x26/0x30 [ 519.195243][ T31] RIP: 0033:0x7ffb80956698 [ 519.203535][ T31] RSP: 002b:00007fff0e6b5dc8 EFLAGS: 00010202 [ 519.214045][ T31] RAX: 0000200000000140 RBX: 0000000000000004 RCX: 006d766b2f766564 [ 519.226658][ T31] RDX: 0000000000000009 RSI: 6d766b2f7665642f RDI: 0000200000000140 [ 519.235276][ T31] RBP: 00007ffb80bb7ba0 R08: 00007ffb80800000 R09: 0000000000000001 [ 519.254453][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 00007ffb80bb5fac [ 519.264818][ T31] R13: 00007ffb80bb5fa0 R14: fffffffffffffffe R15: 00007fff0e6b5ee0 [ 519.273284][ T31] [ 519.276547][ T31] [ 519.276547][ T31] Showing all locks held in the system: [ 519.284478][ T31] 1 lock held by khungtaskd/31: [ 519.295643][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 519.326907][ T31] 2 locks held by getty/5594: [ 519.332156][ T31] #0: ffff88803104a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 519.346395][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 519.368130][ T31] 3 locks held by syz.0.147/6382: [ 519.373291][ T31] 1 lock held by syz.1.175/6453: [ 519.378646][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.389717][ T31] 1 lock held by syz.3.182/6471: [ 519.394759][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.405922][ T31] 1 lock held by syz.2.199/6519: [ 519.411173][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.423118][ T31] 1 lock held by syz.2.199/6521: [ 519.428530][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.442612][ T31] 1 lock held by syz.5.382/7185: [ 519.447893][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.459090][ T31] 1 lock held by syz.5.382/7186: [ 519.464142][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.477544][ T31] 1 lock held by syz.4.403/7245: [ 519.482705][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.493808][ T31] 1 lock held by syz.6.476/7466: [ 519.499094][ T31] #0: ffff888148d8cca0 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50b/0x710 [ 519.510295][ T31] 1 lock held by syz.7.480/7504: [ 519.515323][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.526755][ T31] 1 lock held by syz.9.697/8162: [ 519.531800][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.544470][ T31] 2 locks held by syz.0.705/8181: [ 519.550721][ T31] #0: ffff888023009320 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 519.576673][ T31] #1: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.598750][ T31] 1 lock held by syz.8.712/8196: [ 519.603842][ T31] #0: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.623308][ T31] 2 locks held by syz.8.712/8197: [ 519.629377][ T31] #0: ffff888023009320 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 519.643212][ T31] #1: ffff888148d8ce40 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 519.654380][ T31] [ 519.733461][ T31] ============================================= [ 519.733461][ T31] [ 519.746896][ T31] NMI backtrace for cpu 1 [ 519.746914][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 519.746939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.746952][ T31] Call Trace: [ 519.746959][ T31] [ 519.746968][ T31] dump_stack_lvl+0x189/0x250 [ 519.746994][ T31] ? __wake_up_klogd+0xd9/0x110 [ 519.747024][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.747046][ T31] ? __pfx__printk+0x10/0x10 [ 519.747081][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 519.747110][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 519.747133][ T31] ? _printk+0xcf/0x120 [ 519.747158][ T31] ? __pfx__printk+0x10/0x10 [ 519.747183][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.747215][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 519.747244][ T31] watchdog+0xfee/0x1030 [ 519.747265][ T31] ? watchdog+0x1de/0x1030 [ 519.747292][ T31] kthread+0x70e/0x8a0 [ 519.747323][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.747340][ T31] ? __pfx_kthread+0x10/0x10 [ 519.747369][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.747396][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.747423][ T31] ? __pfx_kthread+0x10/0x10 [ 519.747459][ T31] ret_from_fork+0x3f9/0x770 [ 519.747482][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.747507][ T31] ? __switch_to_asm+0x39/0x70 [ 519.747530][ T31] ? __switch_to_asm+0x33/0x70 [ 519.747552][ T31] ? __pfx_kthread+0x10/0x10 [ 519.747579][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.747619][ T31] [ 519.747627][ T31] Sending NMI from CPU 1 to CPUs 0: [ 519.910504][ C0] NMI backtrace for cpu 0 [ 519.910523][ C0] CPU: 0 UID: 0 PID: 5947 Comm: kworker/u8:4 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 519.910545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.910558][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 519.910592][ C0] RIP: 0010:rcu_is_watching+0x55/0xb0 [ 519.910613][ C0] Code: 3c c7 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c b7 7c 00 48 c7 c3 58 6f c1 92 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 89 dc 18 11 74 11 83 e0 [ 519.910629][ C0] RSP: 0018:ffffc9000473f880 EFLAGS: 00000a06 [ 519.910644][ C0] RAX: 1ffff110170c65eb RBX: ffff8880b8632f58 RCX: f151c2acc1a4c900 [ 519.910658][ C0] RDX: ffff88802fe60000 RSI: ffffffff8be417a0 RDI: ffffffff8be41760 [ 519.910672][ C0] RBP: ffffc9000473f9d0 R08: 0000000000000000 R09: ffffffff8b35d098 [ 519.910685][ C0] R10: dffffc0000000000 R11: ffffed100492ba17 R12: dffffc0000000000 [ 519.910699][ C0] R13: dffffc0000000000 R14: ffffffff8dc73c60 R15: dffffc0000000000 [ 519.910713][ C0] FS: 0000000000000000(0000) GS:ffff888125a1c000(0000) knlGS:0000000000000000 [ 519.910727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.910740][ C0] CR2: 0000200000000040 CR3: 00000000769ec000 CR4: 00000000003526f0 [ 519.910755][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.910766][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 519.910778][ C0] Call Trace: [ 519.910784][ C0] [ 519.910792][ C0] batadv_iv_ogm_schedule+0x43b/0xea0 [ 519.910824][ C0] ? batadv_iv_ogm_schedule+0x3f8/0xea0 [ 519.910848][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 519.910872][ C0] ? batadv_send_skb_packet+0x45d/0x6d0 [ 519.910894][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 519.910924][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 519.910944][ C0] process_scheduled_works+0xae1/0x17b0 [ 519.910976][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.911002][ C0] worker_thread+0x8a0/0xda0 [ 519.911022][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 519.911051][ C0] ? __kthread_parkme+0x7b/0x200 [ 519.911075][ C0] kthread+0x70e/0x8a0 [ 519.911098][ C0] ? __pfx_worker_thread+0x10/0x10 [ 519.911117][ C0] ? __pfx_kthread+0x10/0x10 [ 519.911139][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.911162][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.911187][ C0] ? __pfx_kthread+0x10/0x10 [ 519.911209][ C0] ret_from_fork+0x3f9/0x770 [ 519.911228][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 519.911248][ C0] ? __switch_to_asm+0x39/0x70 [ 519.911268][ C0] ? __switch_to_asm+0x33/0x70 [ 519.911289][ C0] ? __pfx_kthread+0x10/0x10 [ 519.911311][ C0] ret_from_fork_asm+0x1a/0x30 [ 519.911339][ C0] [ 520.195792][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 520.202695][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 520.214588][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.224646][ T31] Call Trace: [ 520.227923][ T31] [ 520.230848][ T31] dump_stack_lvl+0x99/0x250 [ 520.235441][ T31] ? __asan_memcpy+0x40/0x70 [ 520.240030][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.245232][ T31] ? __pfx__printk+0x10/0x10 [ 520.249836][ T31] panic+0x2db/0x790 [ 520.253740][ T31] ? __pfx_panic+0x10/0x10 [ 520.258164][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 520.263972][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 520.269352][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 520.275601][ T31] watchdog+0x102d/0x1030 [ 520.279927][ T31] ? watchdog+0x1de/0x1030 [ 520.284347][ T31] kthread+0x70e/0x8a0 [ 520.288428][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.293101][ T31] ? __pfx_kthread+0x10/0x10 [ 520.297697][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.302910][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.308110][ T31] ? __pfx_kthread+0x10/0x10 [ 520.312704][ T31] ret_from_fork+0x3f9/0x770 [ 520.317296][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 520.322414][ T31] ? __switch_to_asm+0x39/0x70 [ 520.327185][ T31] ? __switch_to_asm+0x33/0x70 [ 520.331949][ T31] ? __pfx_kthread+0x10/0x10 [ 520.336549][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.341323][ T31] [ 520.344613][ T31] Kernel Offset: disabled [ 520.348937][ T31] Rebooting in 86400 seconds..