last executing test programs: 13.114268877s ago: executing program 4 (id=511): r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000050000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000500190084000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 11.981336079s ago: executing program 1 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000003700)=ANY=[@ANYRES64], 0x0, 0x38, 0x0, 0x9, 0x3}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) setuid(0xee01) keyctl$get_persistent(0x16, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x4}, 0x8) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x24, 0x1, @thr={&(0x7f0000000280)="ba285db2319728b09547744137cad0053a3cb00cc5760becf442703947bef3847a5156b98d6500e9575f52eb115e4e6e9fd8151495f05e9e673974f7978cb366813a23a17e81a932379f171d133e70b69984a2ad4e78aed25890cd58054e47318ae972053795f97aed5b7319b1f96285ee109e69c43a9b3cde7fdc81c29367f64d83793835964732cb487c32504b5463e7a7df5969edd3456f91e2c67f61ba8ad38ff3e4ded63a5214d5edfc99e431abc13880e9a57e972a8e92f1e0163db46976e263f09f9edf8538dd1382e338964ccede45208736", &(0x7f0000000040)="cfe6d61adbee5a0789932f01dff2df0a0ef81d3f52dccaa00d418fc7dd2237a9abcc087db9cf692514842b31f80c"}}, &(0x7f0000000180)) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 10.655698688s ago: executing program 1 (id=517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000205c879217c0783472b6536b715b21e340343a59de7e7b1098c4e25c140784116bd69ebef86e1346cd708c3262"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x4480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x40030000000000}, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) pause() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'gre0\x00', 0x100}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000100)={0x9a11, 0xe, 0x0, 'queue1\x00', 0x4}) 10.251891357s ago: executing program 3 (id=518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r3, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) fchdir(r1) 10.197070993s ago: executing program 4 (id=520): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x8000, 0x1, 0x21b}) r3 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r3, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)="3b52e010cfa8277d5e51027ea522343d090a9a3f0fc54bd6556e1e41a44890d0c945a313b328707c939f4eb2912ad1c9bb976cf26da04c27e4bd3ec7d559f4437d9b0e4f1b87070ddbba58d7ce9535dd1f430714c66b72e80376cbd91c0b27800176b96289429ea7c56e280e83abbda4921f076fdf59223bfc", 0x79}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x3ac}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="22d42f7add5228b885cd12f1f588edd92d51a4f52fe0dc037d0938b53c1586de5f20ab9f6bb6ae04be9919b48a9600feac28010f721d23b0ca6fc098643867b52a17481da2febba16d0e31fae15373a6dc66ae91fea9277f5a78b2a9030e38ac200dd7", 0x63, 0x40005, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, '\x00', {}, 0x7ff}) 9.897249729s ago: executing program 3 (id=521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x6, 0x1, "d6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x1a, 0x1, '\n'}, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x98f903, 0x80000000, @name="f9af616925b1394dfabb44de2fd6fcbbcad561fdafeb0724ff5cbc0fd5e5b7c8"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) chown(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7) 8.488831683s ago: executing program 1 (id=524): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2}}}}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000f"], 0x0, 0x34}, 0x28) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYBLOB="1ce9a2a950185da89a7441012d42a7b99b1026defa0e1c5076c03893b52d4ed277198482f54a2735583fcad37700763e42c5eb2d1e1c996f999e5a7026a9dfe3e6d22efaef2a8718ecd07e91292c571f071266791be422f4057f0a9a9326a1b4f4b92dc215adcf40347163dec751647de93192464e49d977a6dd2a2891f929617290e5312c03b40886f619efc95fccad4793e4b7f7d64e002c1aafc3", @ANYRESHEX], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x7c}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d40)=ANY=[@ANYBLOB="140000001000010000000200000000000500000a14000000140a030000000000000000000300000920000000080a01040000000000000000020000030900010073797a3000000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="100005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 8.121144216s ago: executing program 3 (id=525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_delete(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x18, 0x29, 0x3, "d6ab"}], 0x18}}], 0x1, 0x4000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0x2, @mcast2, 0x3}, {0xa, 0x4e21, 0x8001, @private1, 0x7fff}, 0x0, {[0xc, 0x9, 0x0, 0x6, 0x400, 0x10000, 0x2, 0x1]}}, 0x5c) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009104"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x4000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) shutdown(r2, 0x1) 7.977886861s ago: executing program 4 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r3, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xc, 0x850}}], 0x2, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 7.976488139s ago: executing program 2 (id=527): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8], 0x11cc}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x208, 0x2100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x20000000000001c5, &(0x7f0000000180)=[{0x3, 0x0, 0x0, 0xff}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) close_range(r4, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f000000e000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) ioctl$KVM_CAP_HYPERV_SEND_IPI(r8, 0x4068aea3, &(0x7f0000000100)) 7.501430698s ago: executing program 0 (id=529): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137183710ff"}) 7.500884018s ago: executing program 2 (id=530): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/189, 0x3c, 0xbd, 0x1}, 0x28) r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) write$smackfs_load(r0, &(0x7f0000000100)=ANY=[], 0x36) socket$inet6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r3}, &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}}) 7.482636735s ago: executing program 3 (id=531): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x8000, 0x1, 0x21b}) r3 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r3, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mount(&(0x7f00000003c0)=@md0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000340)='nfsd\x00', 0x1a0c099, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)="3b52e010cfa8277d5e51027ea522343d090a9a3f0fc54bd6556e1e41a44890d0c945a313b328707c939f4eb2912ad1c9bb976cf26da04c27e4bd3ec7d559f4437d9b0e4f1b87070ddbba58d7ce9535dd1f430714c66b72e80376cbd91c0b27800176b96289429ea7c56e280e83abbda4921f076fdf59223bfc", 0x79}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x3ac}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="22d42f7add5228b885cd12f1f588edd92d51a4f52fe0dc037d0938b53c1586de5f20ab9f6bb6ae04be9919b48a9600feac28010f721d23b0ca6fc098643867b52a17481da2febba16d0e31fae15373a6dc66ae91fea9277f5a78b2a9030e38ac200dd7", 0x63, 0x40005, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, '\x00', {}, 0x7ff}) 7.039761153s ago: executing program 2 (id=532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000140)=0x100000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) 6.961481366s ago: executing program 0 (id=533): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 6.520843518s ago: executing program 4 (id=534): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x10a}) close_range(r3, r3, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x300}, 0x4000) 6.206192768s ago: executing program 2 (id=535): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x0, 0x3938700}, 0x1, 0x1, 0x1, {0x0, r1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@getchain={0x5c, 0x66, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x8}, {0xfff3, 0x6}, {0x1, 0xfff3}}, [{0x8, 0xb, 0xfdf3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7810b6cd}, {0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x20040044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000"], 0x30}], 0x1, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x6, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x401, 0x200006, 0xf5, 0x9, 0x139, 0x3, 0x8, 0xffffdb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x7, 0x0, 0x1ff, 0x8002, 0x3ff, 0x3, 0x11, 0x4, 0xba55, 0x8da8, 0x2, 0x1fb, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x4, 0x200, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x7, 0x7, 0x1], [0x6, 0x1e, 0x2, 0x8000, 0xaf5, 0x400003, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x4, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x80000001, 0x8001, 0x3, 0x1, 0x8, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x1, 0x0, 0x5, 0x4, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xe47, 0xfffffffa, 0x2, 0x1, 0x1, 0x8, 0x6, 0x89, 0xfffffffb], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x200009, 0xe8b, 0x5, 0x7fffffff, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000401, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0xb, 0x28e3, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x1008001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x6, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x40005], [0x108e, 0x100, 0x3, 0x7, 0x1, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xe, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x21, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x2, 0x7fff, 0x2, 0x5, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0x7f, 0x7, 0xe, 0x4, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, 0x0, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) socket(0x1d, 0x2, 0x6) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xbfffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) 6.170919137s ago: executing program 1 (id=536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/xfrm_stat\x00') r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) write$tcp_mem(r1, &(0x7f00000001c0)={0x1, 0x20, 0xffffffff, 0x20, 0x9}, 0x48) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0xf7ff3000, 0xf000, 0xffff1000, 0xf000], 0x5, 0x50, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xf, &(0x7f0000000180)={0x6, 0xa53c}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d0400000000000000000200000024000180140001"], 0x38}}, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000100)=""/103, 0x67}], 0x2, 0xe, 0x0) 6.103044931s ago: executing program 3 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x4d8, 0x360, 0x220, 0xffffffff, 0xf0, 0x0, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x0, 0xe}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [0x0, 0xff000000], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e23, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x18c}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00', {}, {}, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x9, 0x8, 0x2, 0xdffff43e, 0x97}, &(0x7f0000004480)=0x98) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) r5 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x35f}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200980, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b000000000000000000006e324f72be2d9e22a957e21e24d2f634a9540c8cf29603049103314945a11be453b5dac0ba7415519fecb633c7cddb062b52036413062e37500dc700114214835391f31b9fc1e0abc5f97cb254edf0f7dc3e4fca4cd669f126e756000000000000000000000000000000af318cdd40bb39e45778476e13c32bed42cd36bd10093470aba7a69145141f1862871a9ea56b76b562f9a4018de02777580bc85362bc9aa0f076c77326035d35287789e138017e4fe4ea07e5b2cd94348ea4e2bcac2b25d8f9753a8b55b759f87b57ef59ae92", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500"/28], 0x50) 5.848781204s ago: executing program 0 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r2, 0x1000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x2000, 0x2, 0xffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r3 = syz_io_uring_setup(0x13f7, &(0x7f0000000440)={0x0, 0x0, 0x20000, 0x4, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x7}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x24, 0x0, 0x0, 0x0) 5.647293244s ago: executing program 1 (id=539): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x6000, 0x800, 0x0, 0x1}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x10, r2, 0x0, r0}, 0x10) 3.352691017s ago: executing program 2 (id=540): bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, 0x0, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000180)={r7}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 3.289168533s ago: executing program 4 (id=541): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x110, 0xe}, {0x10, 0x6, 0xec4}], 0x20}, 0x20000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x2, 0x80}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa, 0x0, 0x2}, @printk={@lu, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe4, &(0x7f0000000180)=""/228, 0x0, 0x19, '\x00', r1}, 0x94) 3.240064912s ago: executing program 1 (id=542): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf05"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0xf2c9900, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x8840) 3.229161814s ago: executing program 0 (id=543): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x7d8}, 0x40000) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.943994667s ago: executing program 0 (id=544): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() r3 = io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x8000, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1) syz_pidfd_open(r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)="3b52e010cfa8277d5e51027ea522343d090a9a3f0fc54bd6556e1e41a44890d0c945a313b328707c939f4eb2912ad1c9bb976cf26da04c27e4bd3ec7d559f4437d9b0e4f1b87070ddbba58d7ce9535dd1f430714c66b72e80376cbd91c0b27800176b96289429ea7c56e280e83abbda4921f076fdf59223bfc", 0x79}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x3ac}], 0x1}}], 0x2, 0x4) sendto$inet(r0, &(0x7f00000002c0)="22d42f7add5228b885cd12f1f588edd92d51a4f52fe0dc037d0938b53c1586de5f20ab9f6bb6ae04be9919b48a9600feac28010f721d23b0ca6fc098643867b52a17481da2febba16d0e31fae15373a6dc66ae91fea9277f5a78b2a9030e38ac200dd7", 0x63, 0x40005, 0x0, 0x0) 2.935984586s ago: executing program 3 (id=545): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() r3 = io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x8000, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1) r4 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r4, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x9) mount(&(0x7f00000003c0)=@md0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000340)='nfsd\x00', 0x1a0c099, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)="3b52e010cfa8277d5e51027ea522343d090a9a3f0fc54bd6556e1e41a44890d0c945a313b328707c939f4eb2912ad1c9bb976cf26da04c27e4bd3ec7d559f4437d9b0e4f1b87070ddbba58d7ce9535dd1f430714c66b72e80376cbd91c0b27800176b96289429ea7c56e280e83abbda4921f076fdf59223bfc", 0x79}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89bc4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db974e469c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c64a98b5a8a61020d81f5213d4d5722088be5b5ea6b1ee19b148d1f8b7172cd507533360d2d668e85252463b1d61302a75a7e3dc5e8c607a1026c66c2e8a6cbd34e3e5e99890da6cf07ed1247a07f004a6b1d643e00be7c156127bd7b39326e84ea6963d0530a4538eea35cf8048440a65148f1fe6314020bbe9c9358242589360fa5b1425d24b9f59141d81c0dbdd2e802eb82849e6342a4ffd0dcf307e2c73c707f54d54a2d04f2e504", 0x3ac}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="22d42f7add5228b885cd12f1f588edd92d51a4f52fe0dc037d0938b53c1586de5f20ab9f6bb6ae04be9919b48a9600feac28010f721d23b0ca6fc098643867b52a17481da2febba16d0e31fae15373a6dc66ae91fea9277f5a78b2a9030e38ac200dd7", 0x63, 0x40005, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, '\x00', {}, 0x7ff}) 1.956367186s ago: executing program 4 (id=546): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000300)=0xa22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)}, 0x1}], 0x1, 0x2, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa, 0x9}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, r6, 0x0) remap_file_pages(&(0x7f0000d07000/0x3000)=nil, 0x3000, 0x300000c, 0x7f, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x24020400) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pread64(r8, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) unshare(0x20000400) syz_open_dev$tty1(0xc, 0x4, 0x3) 305.463412ms ago: executing program 2 (id=547): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) userfaultfd(0x801) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xec, r2, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "e34de7da74475bd7eeb905ddc1744281638427c835ada55b61eee2f3a9727811c0e32b08b5c577ba6a5c92f9e358b84d994fb935d99b846bde042337e7572e34114a5674f117be16bb37537d7f1166f2ead45ccac8010640c5e7a7bf93cac3419fd6fb5dcf030bfbc9c2c1f7e35408d935"}, @NL80211_ATTR_VENDOR_DATA={0x23, 0xc5, "c5a74de1f3674b8a57fb0b28c67e43769b67dee5ea993075ec8afcd0baa616"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xda}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x20000, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) shutdown(r0, 0x0) 0s ago: executing program 0 (id=548): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1b, r4, 0x9c3fa077fa966179, 0x100000, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x28}}}}}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x60, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x1000000, 0x0, 0x4004810}, 0x24040840) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x94, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0xfffffeb2, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000c1c616a3001c00fcffffff181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r12, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r13, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) recvmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. [ 82.667364][ T5820] cgroup: Unknown subsys name 'net' [ 82.824005][ T5820] cgroup: Unknown subsys name 'cpuset' [ 82.833670][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.538214][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.394469][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.428504][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.451644][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.460121][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.468114][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.480183][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.489914][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.499919][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.543787][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.549523][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.557058][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.565247][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.565432][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.573327][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.581055][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.588426][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.594703][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.601506][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.608880][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.618031][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.621507][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.634960][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.637052][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.661073][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.661207][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.271052][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.334818][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.616732][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.649335][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.657299][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.664989][ T5833] bridge_slave_0: entered allmulticast mode [ 88.673046][ T5833] bridge_slave_0: entered promiscuous mode [ 88.748137][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.755887][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.763401][ T5833] bridge_slave_1: entered allmulticast mode [ 88.771451][ T5833] bridge_slave_1: entered promiscuous mode [ 88.778704][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.786458][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.794452][ T5842] bridge_slave_0: entered allmulticast mode [ 88.802050][ T5842] bridge_slave_0: entered promiscuous mode [ 88.811191][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.818381][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.825727][ T5842] bridge_slave_1: entered allmulticast mode [ 88.833385][ T5842] bridge_slave_1: entered promiscuous mode [ 88.840628][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.958603][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.975714][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.003411][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.012806][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.027749][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.131924][ T5833] team0: Port device team_slave_0 added [ 89.185839][ T5833] team0: Port device team_slave_1 added [ 89.224283][ T5842] team0: Port device team_slave_0 added [ 89.233365][ T5842] team0: Port device team_slave_1 added [ 89.247382][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.255479][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.263220][ T5843] bridge_slave_0: entered allmulticast mode [ 89.271235][ T5843] bridge_slave_0: entered promiscuous mode [ 89.325865][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.334584][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.342330][ T5843] bridge_slave_1: entered allmulticast mode [ 89.350462][ T5843] bridge_slave_1: entered promiscuous mode [ 89.373523][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.380581][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.406765][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.425474][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.432535][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.459064][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.527652][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.534937][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.562166][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.574643][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.583446][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.592055][ T5839] bridge_slave_0: entered allmulticast mode [ 89.599756][ T5839] bridge_slave_0: entered promiscuous mode [ 89.610910][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.649679][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.656843][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.665006][ T51] Bluetooth: hci0: command tx timeout [ 89.665013][ T5841] Bluetooth: hci3: command tx timeout [ 89.665933][ T5837] bridge_slave_0: entered allmulticast mode [ 89.684542][ T5837] bridge_slave_0: entered promiscuous mode [ 89.692905][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.700116][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.726132][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.737988][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.739631][ T51] Bluetooth: hci1: command tx timeout [ 89.745979][ T5841] Bluetooth: hci4: command tx timeout [ 89.751041][ T51] Bluetooth: hci2: command tx timeout [ 89.761790][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.769193][ T5839] bridge_slave_1: entered allmulticast mode [ 89.777815][ T5839] bridge_slave_1: entered promiscuous mode [ 89.787127][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.840000][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.847164][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.855043][ T5837] bridge_slave_1: entered allmulticast mode [ 89.863079][ T5837] bridge_slave_1: entered promiscuous mode [ 89.938967][ T5833] hsr_slave_0: entered promiscuous mode [ 89.946967][ T5833] hsr_slave_1: entered promiscuous mode [ 89.987712][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.003100][ T5843] team0: Port device team_slave_0 added [ 90.013102][ T5843] team0: Port device team_slave_1 added [ 90.022610][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.047500][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.102583][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.112580][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.122529][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.149084][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.165815][ T5842] hsr_slave_0: entered promiscuous mode [ 90.173552][ T5842] hsr_slave_1: entered promiscuous mode [ 90.180371][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.188147][ T5842] Cannot create hsr debugfs directory [ 90.236661][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.244361][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.271282][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.311159][ T5839] team0: Port device team_slave_0 added [ 90.400221][ T5839] team0: Port device team_slave_1 added [ 90.425924][ T5837] team0: Port device team_slave_0 added [ 90.435129][ T5837] team0: Port device team_slave_1 added [ 90.446379][ T5843] hsr_slave_0: entered promiscuous mode [ 90.454796][ T5843] hsr_slave_1: entered promiscuous mode [ 90.461860][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.469552][ T5843] Cannot create hsr debugfs directory [ 90.579071][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.586410][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.612828][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.639103][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.646195][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.672317][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.685925][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.693217][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.719702][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.751575][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.758707][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.785525][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.063284][ T5839] hsr_slave_0: entered promiscuous mode [ 91.069996][ T5839] hsr_slave_1: entered promiscuous mode [ 91.076138][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.084856][ T5839] Cannot create hsr debugfs directory [ 91.103671][ T5837] hsr_slave_0: entered promiscuous mode [ 91.110361][ T5837] hsr_slave_1: entered promiscuous mode [ 91.116653][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.124637][ T5837] Cannot create hsr debugfs directory [ 91.339296][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.361921][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.415542][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.460809][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.593561][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.608685][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.630771][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.647518][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.740061][ T51] Bluetooth: hci0: command tx timeout [ 91.740409][ T5841] Bluetooth: hci3: command tx timeout [ 91.775930][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.788123][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.810180][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.820667][ T5841] Bluetooth: hci4: command tx timeout [ 91.825105][ T51] Bluetooth: hci1: command tx timeout [ 91.831872][ T51] Bluetooth: hci2: command tx timeout [ 91.849693][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.964600][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.988639][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.007434][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.023336][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.058963][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.100854][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.135627][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.143022][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.183003][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.190213][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.215907][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.257702][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.294131][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.326385][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.356081][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.365797][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.415838][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.423081][ T4922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.456369][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.463622][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.477555][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.573410][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.613820][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.621083][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.676744][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.684084][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.805817][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.918229][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.956798][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.022329][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.029615][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.094864][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.102144][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.135452][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.234298][ T5842] veth0_vlan: entered promiscuous mode [ 93.267557][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.306145][ T5842] veth1_vlan: entered promiscuous mode [ 93.344765][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.352207][ T5020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.377526][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.402796][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.435968][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.443229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.493805][ T5842] veth0_macvtap: entered promiscuous mode [ 93.555620][ T5842] veth1_macvtap: entered promiscuous mode [ 93.646523][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.684646][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.721750][ T5833] veth0_vlan: entered promiscuous mode [ 93.754088][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.780888][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.792735][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.801879][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.822912][ T51] Bluetooth: hci3: command tx timeout [ 93.823086][ T5841] Bluetooth: hci0: command tx timeout [ 93.857684][ T5843] veth0_vlan: entered promiscuous mode [ 93.900351][ T5841] Bluetooth: hci1: command tx timeout [ 93.902921][ T51] Bluetooth: hci4: command tx timeout [ 93.915289][ T51] Bluetooth: hci2: command tx timeout [ 93.923815][ T5833] veth1_vlan: entered promiscuous mode [ 93.983317][ T5843] veth1_vlan: entered promiscuous mode [ 94.017067][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.097601][ T5833] veth0_macvtap: entered promiscuous mode [ 94.126050][ T5833] veth1_macvtap: entered promiscuous mode [ 94.169605][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.177641][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.221754][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.258926][ T4922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.259881][ T5843] veth0_macvtap: entered promiscuous mode [ 94.281685][ T4922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.286191][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.320800][ T5843] veth1_macvtap: entered promiscuous mode [ 94.336980][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.408611][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.418919][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.436189][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.445360][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.481011][ T5837] veth0_vlan: entered promiscuous mode [ 94.507249][ T5837] veth1_vlan: entered promiscuous mode [ 94.531090][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.536034][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.635634][ T5837] veth0_macvtap: entered promiscuous mode [ 94.646838][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.733168][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.757441][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.768582][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.779220][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.812560][ T5837] veth1_macvtap: entered promiscuous mode [ 95.426239][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.438374][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.466526][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.582169][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.603438][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.618968][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.672854][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.682932][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.698562][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.707593][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.740648][ T5020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.748602][ T5020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.900316][ T51] Bluetooth: hci0: command tx timeout [ 95.900571][ T5841] Bluetooth: hci3: command tx timeout [ 95.975686][ T5839] veth0_vlan: entered promiscuous mode [ 95.980286][ T5841] Bluetooth: hci4: command tx timeout [ 95.982875][ T51] Bluetooth: hci1: command tx timeout [ 95.986666][ T5835] Bluetooth: hci2: command tx timeout [ 96.016840][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.043677][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.126928][ T4922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.142994][ T5839] veth1_vlan: entered promiscuous mode [ 96.153078][ T4922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.266070][ T5020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.311106][ T5020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.358823][ T5839] veth0_macvtap: entered promiscuous mode [ 96.445019][ T5839] veth1_macvtap: entered promiscuous mode [ 97.129322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.199621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.229917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.310106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.318916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.327991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.342572][ T9] cfg80211: failed to load regulatory.db [ 97.477075][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.534612][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.607159][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.637469][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.682509][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.706670][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.819890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.828209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.844988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.899865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.179139][ T2153] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.045084][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.191889][ T2153] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 99.201565][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.240061][ T2153] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 99.255000][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 99.285980][ T2153] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 99.312827][ T2153] usb 3-1: Manufacturer: syz [ 99.352303][ T2153] usb 3-1: config 0 descriptor?? [ 99.367047][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.374383][ T2153] igorplugusb 3-1:0.0: endpoint incorrect [ 99.392638][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.541017][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.583408][ T2153] usb 3-1: USB disconnect, device number 2 [ 99.598216][ T5020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.626587][ T5020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.704772][ T5906] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.717525][ T5906] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.728744][ T5906] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.767551][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.815252][ T5989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 99.884559][ T5906] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.223804][ T5898] usb 4-1: USB disconnect, device number 2 [ 101.688580][ T6010] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 101.971556][ T6009] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 102.211344][ T6014] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.189376][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 103.489211][ T6030] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 103.641029][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.338040][ T6044] Bluetooth: MGMT ver 1.23 [ 104.605139][ T6047] bridge1: entered promiscuous mode [ 104.605199][ T6047] bridge1: entered allmulticast mode [ 107.829850][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 107.833593][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 110.454042][ T6071] gre0: entered promiscuous mode [ 110.539921][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 112.902241][ T6090] netlink: 76 bytes leftover after parsing attributes in process `syz.0.33'. [ 118.098589][ T6111] netlink: 76 bytes leftover after parsing attributes in process `syz.3.38'. [ 118.315860][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 121.980849][ T6128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.087142][ T6128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.174290][ T6136] Zero length message leads to an empty skb [ 122.511695][ T6140] bridge1: entered promiscuous mode [ 122.516979][ T6140] bridge1: entered allmulticast mode [ 122.937056][ T6134] sctp: failed to load transform for md5: -2 [ 123.396662][ T6151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.48'. [ 124.800143][ T6158] fuse: Bad value for 'fd' [ 125.021268][ T6163] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 127.070501][ T6175] trusted_key: encrypted_key: keyword 'load [ 148.029327][ T6340] dump_stack_lvl+0x189/0x250 [ 148.029369][ T6340] ? __pfx____ratelimit+0x10/0x10 [ 148.029392][ T6340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.029415][ T6340] ? __pfx__printk+0x10/0x10 [ 148.029441][ T6340] ? __might_fault+0xb0/0x130 [ 148.029474][ T6340] should_fail_ex+0x414/0x560 [ 148.029502][ T6340] strncpy_from_user+0x36/0x290 [ 148.029541][ T6340] getname_flags+0xf3/0x540 [ 148.029573][ T6340] __x64_sys_rename+0x5d/0x90 [ 148.029597][ T6340] do_syscall_64+0xfa/0x3b0 [ 148.029619][ T6340] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.029642][ T6340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.029664][ T6340] ? clear_bhb_loop+0x60/0xb0 [ 148.029690][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.029711][ T6340] RIP: 0033:0x7fd81878eb69 [ 148.029736][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.029759][ T6340] RSP: 002b:00007fd81961a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 148.029782][ T6340] RAX: ffffffffffffffda RBX: 00007fd8189b6080 RCX: 00007fd81878eb69 [ 148.029798][ T6340] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 148.029812][ T6340] RBP: 00007fd81961a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.029825][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.029838][ T6340] R13: 0000000000000001 R14: 00007fd8189b6080 R15: 00007ffd3739e468 [ 148.029870][ T6340] [ 152.207819][ T6365] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.878642][ T6374] netlink: 76 bytes leftover after parsing attributes in process `syz.3.105'. [ 153.865357][ T6378] netlink: 348 bytes leftover after parsing attributes in process `syz.2.104'. [ 156.009663][ T976] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.661837][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 156.677489][ T976] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 156.725967][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.758393][ T976] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 156.800499][ T976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.830877][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.838992][ T976] usb 3-1: Product: 态 [ 156.859631][ T976] usb 3-1: Manufacturer: ą Œ [ 156.873677][ T976] usb 3-1: SerialNumber: ы [ 157.503937][ T976] usb 3-1: 0:2 : does not exist [ 157.588734][ T976] usb 3-1: USB disconnect, device number 3 [ 157.724566][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.255736][ T6420] trusted_key: encrypted_key: insufficient parameters specified [ 161.514857][ T6455] netlink: zone id is out of range [ 161.514914][ T6455] netlink: zone id is out of range [ 161.514924][ T6455] netlink: zone id is out of range [ 161.514934][ T6455] netlink: zone id is out of range [ 161.514943][ T6455] netlink: zone id is out of range [ 161.514952][ T6455] netlink: zone id is out of range [ 161.514961][ T6455] netlink: zone id is out of range [ 161.514971][ T6455] netlink: zone id is out of range [ 161.514980][ T6455] netlink: zone id is out of range [ 161.514990][ T6455] netlink: zone id is out of range [ 163.232212][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 163.247662][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 163.257130][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 163.340798][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 163.849793][ T5841] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 163.860413][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 163.860442][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.860455][ T5841] Workqueue: hci2 hci_rx_work [ 163.860481][ T5841] Call Trace: [ 163.860489][ T5841] [ 163.860497][ T5841] dump_stack_lvl+0x189/0x250 [ 163.860522][ T5841] ? kernfs_path_from_node+0x2c/0x260 [ 163.860548][ T5841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.860569][ T5841] ? __pfx__printk+0x10/0x10 [ 163.860598][ T5841] ? kernfs_path_from_node+0x2c/0x260 [ 163.860614][ T6472] netlink: 'syz.2.129': attribute type 6 has an invalid length. [ 163.860622][ T5841] ? kernfs_path_from_node+0x2c/0x260 [ 163.860651][ T5841] ? kernfs_path_from_node+0x22c/0x260 [ 163.860671][ T5841] ? kernfs_path_from_node+0x2c/0x260 [ 163.860706][ T5841] sysfs_create_dir_ns+0x259/0x280 [ 163.860741][ T5841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 163.860774][ T5841] ? do_raw_spin_unlock+0x122/0x240 [ 163.860813][ T5841] kobject_add_internal+0x59f/0xb40 [ 163.860859][ T5841] kobject_add+0x155/0x220 [ 163.860893][ T5841] ? __pfx_kobject_add+0x10/0x10 [ 163.860937][ T5841] ? _raw_spin_unlock+0x28/0x50 [ 163.860980][ T5841] ? get_device_parent+0x366/0x3a0 [ 163.861020][ T5841] device_add+0x408/0xb50 [ 163.861061][ T5841] hci_conn_add_sysfs+0xd5/0x1e0 [ 163.861104][ T5841] le_conn_complete_evt+0xc3a/0x1220 [ 163.861152][ T5841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 163.861185][ T5841] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 163.861211][ T5841] ? __asan_memcpy+0x40/0x70 [ 163.861248][ T5841] ? __pfx___mutex_lock+0x10/0x10 [ 163.861274][ T5841] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.861300][ T5841] ? skb_pull_data+0xfb/0x200 [ 163.861332][ T5841] hci_le_conn_complete_evt+0x187/0x450 [ 163.861383][ T5841] hci_event_packet+0x78c/0x1200 [ 163.861412][ T5841] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 163.861464][ T5841] ? __pfx_hci_event_packet+0x10/0x10 [ 163.861498][ T5841] ? kcov_remote_start+0x4d3/0x7f0 [ 163.861534][ T5841] ? lockdep_hardirqs_on+0x90/0x150 [ 163.861565][ T5841] ? hci_send_to_monitor+0xe2/0x570 [ 163.861602][ T5841] hci_rx_work+0x46a/0xe80 [ 163.861639][ T5841] ? process_scheduled_works+0x9ef/0x17b0 [ 163.861669][ T5841] process_scheduled_works+0xade/0x17b0 [ 163.861733][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.861781][ T5841] worker_thread+0x8a0/0xda0 [ 163.861842][ T5841] kthread+0x70e/0x8a0 [ 163.861879][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 163.861906][ T5841] ? __pfx_kthread+0x10/0x10 [ 163.861942][ T5841] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.861966][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.861988][ T5841] ? __pfx_kthread+0x10/0x10 [ 163.862022][ T5841] ret_from_fork+0x3fc/0x770 [ 163.862051][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 163.862084][ T5841] ? __switch_to_asm+0x39/0x70 [ 163.862113][ T5841] ? __switch_to_asm+0x33/0x70 [ 163.862143][ T5841] ? __pfx_kthread+0x10/0x10 [ 163.862178][ T5841] ret_from_fork_asm+0x1a/0x30 [ 163.862232][ T5841] [ 163.862269][ T5841] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.186375][ T5841] Bluetooth: hci2: failed to register connection device [ 164.637397][ T6496] input: syz1 as /devices/virtual/input/input6 [ 166.858775][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 167.838682][ T6517] netlink: 180 bytes leftover after parsing attributes in process `syz.0.142'. [ 168.009443][ T6517] netlink: 'syz.0.142': attribute type 2 has an invalid length. [ 170.554750][ T6536] netlink: 76 bytes leftover after parsing attributes in process `syz.1.146'. [ 172.810801][ T6566] input: syz1 as /devices/virtual/input/input7 [ 173.366235][ T30] audit: type=1326 audit(1754085883.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6565 comm="syz.1.156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac578eb69 code=0x0 [ 173.980011][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 174.187583][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 174.243284][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.378191][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 174.471141][ T6579] netlink: 76 bytes leftover after parsing attributes in process `syz.3.160'. [ 174.522638][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 174.658959][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.836439][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.726890][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.995774][ T6584] netlink: 76 bytes leftover after parsing attributes in process `syz.4.161'. [ 178.366380][ T5906] usb 1-1: string descriptor 0 read error: -71 [ 178.366525][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 178.366591][ T5906] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.052925][ T5906] usb 1-1: config 0 descriptor?? [ 179.056992][ T5906] usb 1-1: can't set config #0, error -71 [ 179.067995][ T5906] usb 1-1: USB disconnect, device number 2 [ 179.694522][ T6604] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.831976][ T6605] Bluetooth: MGMT ver 1.23 [ 179.986562][ T6595] program syz.1.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.131646][ T6613] netlink: 'syz.2.169': attribute type 20 has an invalid length. [ 182.482621][ T6624] input: syz1 as /devices/virtual/input/input8 [ 182.972737][ T6632] mmap: syz.2.174 (6632) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.990087][ T6632] netlink: 'syz.2.174': attribute type 6 has an invalid length. [ 182.997807][ T6632] netlink: 'syz.2.174': attribute type 7 has an invalid length. [ 183.005575][ T6632] netlink: 'syz.2.174': attribute type 8 has an invalid length. [ 183.750689][ T6636] netlink: 'syz.1.175': attribute type 12 has an invalid length. [ 183.763043][ T6636] netlink: 'syz.1.175': attribute type 29 has an invalid length. [ 183.795745][ T6636] netlink: 148 bytes leftover after parsing attributes in process `syz.1.175'. [ 183.804982][ T6636] netlink: 51 bytes leftover after parsing attributes in process `syz.1.175'. [ 184.463333][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 184.469575][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 187.539777][ T6001] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 187.725010][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.921370][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 188.456680][ T6001] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 188.466079][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.491731][ T6001] usb 1-1: config 0 descriptor?? [ 188.497575][ T6668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.012299][ T6001] glorious 0003:22D4:1503.0001: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.0-1/input0 [ 189.635751][ T6001] usb 1-1: USB disconnect, device number 3 [ 189.675539][ T6693] tipc: Started in network mode [ 189.706899][ T6693] tipc: Node identity 00000000000000000000ffffac1414bb, cluster identity 4711 [ 189.761321][ T6693] tipc: Enabling of bearer rejected, failed to enable media [ 190.230216][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 190.330458][ T6701] FAULT_INJECTION: forcing a failure. [ 190.330458][ T6701] name failslab, interval 1, probability 0, space 0, times 1 [ 190.343462][ T6701] CPU: 1 UID: 0 PID: 6701 Comm: syz.2.194 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 190.343489][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.343503][ T6701] Call Trace: [ 190.343511][ T6701] [ 190.343520][ T6701] dump_stack_lvl+0x189/0x250 [ 190.343564][ T6701] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.343589][ T6701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.343614][ T6701] ? __pfx__printk+0x10/0x10 [ 190.343657][ T6701] should_fail_ex+0x414/0x560 [ 190.343685][ T6701] should_failslab+0xa8/0x100 [ 190.343711][ T6701] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 190.343734][ T6701] ? __alloc_skb+0x112/0x2d0 [ 190.343770][ T6701] __alloc_skb+0x112/0x2d0 [ 190.343805][ T6701] netlink_sendmsg+0x5c6/0xb30 [ 190.343837][ T6701] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 190.343868][ T6701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.343909][ T6701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.343931][ T6701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.343964][ T6701] __sock_sendmsg+0x21c/0x270 [ 190.344016][ T6701] ____sys_sendmsg+0x505/0x830 [ 190.344057][ T6701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.344101][ T6701] ? import_iovec+0x74/0xa0 [ 190.344136][ T6701] ___sys_sendmsg+0x21f/0x2a0 [ 190.344173][ T6701] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.344248][ T6701] ? __fget_files+0x2a/0x420 [ 190.344272][ T6701] ? __fget_files+0x3a0/0x420 [ 190.344309][ T6701] __x64_sys_sendmsg+0x19b/0x260 [ 190.344346][ T6701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.344417][ T6701] do_syscall_64+0xfa/0x3b0 [ 190.344444][ T6701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.344465][ T6701] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 190.344487][ T6701] ? clear_bhb_loop+0x60/0xb0 [ 190.344513][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.344535][ T6701] RIP: 0033:0x7f8f9238eb69 [ 190.344559][ T6701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.344577][ T6701] RSP: 002b:00007f8f93203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.344607][ T6701] RAX: ffffffffffffffda RBX: 00007f8f925b6160 RCX: 00007f8f9238eb69 [ 190.344621][ T6701] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 190.344632][ T6701] RBP: 00007f8f93203090 R08: 0000000000000000 R09: 0000000000000000 [ 190.344643][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.344655][ T6701] R13: 0000000000000000 R14: 00007f8f925b6160 R15: 00007ffff7810568 [ 190.344687][ T6701] [ 191.854488][ T6715] input: syz1 as /devices/virtual/input/input10 [ 194.402099][ T6722] tmpfs: Unknown parameter 'ĶWśn ' [ 195.292538][ T6726] netlink: 76 bytes leftover after parsing attributes in process `syz.2.199'. [ 197.203872][ T5898] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 198.853233][ T5898] usb 4-1: device descriptor read/all, error -71 [ 199.585282][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.592249][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.127863][ T6771] bridge1: entered promiscuous mode [ 201.133348][ T6771] bridge1: entered allmulticast mode [ 201.717472][ T6774] input: syz1 as /devices/virtual/input/input11 [ 201.864641][ T6773] 9pnet_fd: Insufficient options for proto=fd [ 204.652116][ T6799] overlay: Unknown parameter 'obj_user' [ 204.779524][ T1217] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 205.204907][ T6001] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.732674][ T6001] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.784448][ T6001] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.817024][ T6001] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.849473][ T1217] usb 5-1: Using ep0 maxpacket: 16 [ 205.856405][ T1217] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.857991][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.897072][ T1217] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.898232][ T6001] usb 3-1: SerialNumber: syz [ 205.919588][ T1217] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.938967][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.956399][ T1217] usb 5-1: Product: syz [ 205.961066][ T1217] usb 5-1: Manufacturer: syz [ 205.965733][ T1217] usb 5-1: SerialNumber: syz [ 206.563167][ T2153] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 206.741542][ T2153] usb 1-1: Using ep0 maxpacket: 16 [ 207.273589][ T1217] usb 5-1: cannot find UAC_HEADER [ 207.291764][ T2153] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 207.472117][ T2153] usb 1-1: config 1 interface 0 has no altsetting 0 [ 207.574355][ T2153] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 207.594342][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.647948][ T2153] usb 1-1: Product: syz [ 207.670532][ T1217] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 207.680339][ T6001] usb 3-1: 0:2 : does not exist [ 207.685348][ T6001] usb 3-1: unit 5: unexpected type 0x0d [ 207.693256][ T2153] usb 1-1: Manufacturer: syz [ 207.697939][ T2153] usb 1-1: SerialNumber: syz [ 207.726025][ T1217] usb 5-1: USB disconnect, device number 3 [ 208.699054][ T2153] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 208.716550][ T6001] usb 3-1: USB disconnect, device number 4 [ 208.845133][ T6820] input: syz1 as /devices/virtual/input/input12 [ 208.954547][ T6506] udevd[6506]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.988843][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.008841][ T2153] usb 1-1: USB disconnect, device number 4 [ 209.567474][ T30] audit: type=1326 audit(1754085919.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 209.632491][ T30] audit: type=1326 audit(1754085919.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 209.857704][ T30] audit: type=1326 audit(1754085919.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 210.107864][ T6848] bridge1: entered promiscuous mode [ 210.113265][ T6848] bridge1: entered allmulticast mode [ 210.599777][ T30] audit: type=1326 audit(1754085919.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 210.621569][ T30] audit: type=1326 audit(1754085919.690:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 210.711759][ T30] audit: type=1326 audit(1754085919.690:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 210.796639][ T30] audit: type=1326 audit(1754085919.710:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 211.728091][ T30] audit: type=1326 audit(1754085919.710:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 211.823361][ T30] audit: type=1326 audit(1754085919.730:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac578eb69 code=0x7ffc0000 [ 211.911174][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 211.920524][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.926628][ T5847] Bluetooth: hci2: command 0x0401 tx timeout [ 211.934000][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 212.299757][ T30] audit: type=1326 audit(1754085919.730:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ac578d4d0 code=0x7ffc0000 [ 213.383000][ T6878] FAULT_INJECTION: forcing a failure. [ 213.383000][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.429194][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.1.236 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 213.429224][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.429237][ T6878] Call Trace: [ 213.429246][ T6878] [ 213.429255][ T6878] dump_stack_lvl+0x189/0x250 [ 213.429295][ T6878] ? __pfx____ratelimit+0x10/0x10 [ 213.429319][ T6878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.429345][ T6878] ? __pfx__printk+0x10/0x10 [ 213.429372][ T6878] ? __might_fault+0xb0/0x130 [ 213.429405][ T6878] should_fail_ex+0x414/0x560 [ 213.429432][ T6878] _copy_from_user+0x2d/0xb0 [ 213.429464][ T6878] ___sys_sendmsg+0x158/0x2a0 [ 213.429500][ T6878] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.429575][ T6878] ? __fget_files+0x2a/0x420 [ 213.429598][ T6878] ? __fget_files+0x3a0/0x420 [ 213.429633][ T6878] __x64_sys_sendmsg+0x19b/0x260 [ 213.429669][ T6878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.429712][ T6878] ? __pfx_ksys_write+0x10/0x10 [ 213.429728][ T6878] ? rcu_is_watching+0x15/0xb0 [ 213.429757][ T6878] ? do_syscall_64+0xbe/0x3b0 [ 213.429784][ T6878] do_syscall_64+0xfa/0x3b0 [ 213.429807][ T6878] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.429828][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.429850][ T6878] ? clear_bhb_loop+0x60/0xb0 [ 213.429875][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.429894][ T6878] RIP: 0033:0x7f7ac578eb69 [ 213.429913][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.429930][ T6878] RSP: 002b:00007f7ac668a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.429952][ T6878] RAX: ffffffffffffffda RBX: 00007f7ac59b5fa0 RCX: 00007f7ac578eb69 [ 213.429968][ T6878] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 213.429981][ T6878] RBP: 00007f7ac668a090 R08: 0000000000000000 R09: 0000000000000000 [ 213.429993][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.430005][ T6878] R13: 0000000000000000 R14: 00007f7ac59b5fa0 R15: 00007ffe7dca27a8 [ 213.430036][ T6878] [ 213.834908][ T976] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.001549][ T976] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.234843][ T976] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 216.112938][ T6897] 9pnet_fd: Insufficient options for proto=fd [ 216.139495][ T6896] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 216.366622][ T976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.385974][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.430485][ T976] usb 1-1: Product: syz [ 216.729895][ T976] usb 1-1: can't set config #1, error -71 [ 216.881180][ T976] usb 1-1: USB disconnect, device number 5 [ 217.342245][ T6897] ISOFS: Unable to identify CD-ROM format. [ 218.268596][ T6915] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 218.906358][ T6911] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 218.948793][ T6915] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.241815][ T6902] syz.2.243 uses obsolete (PF_INET,SOCK_PACKET) [ 222.035786][ T6960] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 222.628666][ T6980] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.664597][ T6980] UDF-fs: Scanning with blocksize 512 failed [ 222.725754][ T6980] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.780644][ T6980] UDF-fs: Scanning with blocksize 1024 failed [ 222.850242][ T6980] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.906109][ T6980] UDF-fs: Scanning with blocksize 2048 failed [ 222.917817][ T6980] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 222.942373][ T6980] UDF-fs: Scanning with blocksize 4096 failed [ 224.098727][ T6991] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 224.357151][ T6995] 9pnet_fd: Insufficient options for proto=fd [ 224.584189][ T7001] FAULT_INJECTION: forcing a failure. [ 224.584189][ T7001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.629584][ T7001] CPU: 1 UID: 0 PID: 7001 Comm: syz.1.258 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 224.629615][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.629629][ T7001] Call Trace: [ 224.629637][ T7001] [ 224.629648][ T7001] dump_stack_lvl+0x189/0x250 [ 224.629678][ T7001] ? __pfx____ratelimit+0x10/0x10 [ 224.629702][ T7001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.629726][ T7001] ? __pfx__printk+0x10/0x10 [ 224.629756][ T7001] ? __asan_memcpy+0x40/0x70 [ 224.629793][ T7001] should_fail_ex+0x414/0x560 [ 224.629822][ T7001] _copy_to_user+0x31/0xb0 [ 224.629855][ T7001] bpf_verifier_vlog+0x48c/0x900 [ 224.629897][ T7001] __btf_verifier_log+0xd4/0x120 [ 224.629934][ T7001] ? __pfx___btf_verifier_log+0x10/0x10 [ 224.629961][ T7001] ? __might_fault+0xb0/0x130 [ 224.629989][ T7001] ? btf_parse_hdr+0x1e2/0x6d0 [ 224.630017][ T7001] btf_parse_hdr+0x380/0x6d0 [ 224.630046][ T7001] btf_new_fd+0x36d/0xc90 [ 224.630081][ T7001] ? __pfx_btf_new_fd+0x10/0x10 [ 224.630107][ T7001] ? bpf_token_put+0x143/0x160 [ 224.630138][ T7001] ? bpf_btf_load+0x126/0x190 [ 224.630161][ T7001] __sys_bpf+0x635/0x860 [ 224.630195][ T7001] ? __pfx___sys_bpf+0x10/0x10 [ 224.630241][ T7001] ? ksys_write+0x22a/0x250 [ 224.630264][ T7001] ? __pfx_ksys_write+0x10/0x10 [ 224.630294][ T7001] __x64_sys_bpf+0x7c/0x90 [ 224.630323][ T7001] do_syscall_64+0xfa/0x3b0 [ 224.630346][ T7001] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.630369][ T7001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.630390][ T7001] ? clear_bhb_loop+0x60/0xb0 [ 224.630416][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.630438][ T7001] RIP: 0033:0x7f7ac578eb69 [ 224.630456][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.630475][ T7001] RSP: 002b:00007f7ac668a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.630498][ T7001] RAX: ffffffffffffffda RBX: 00007f7ac59b5fa0 RCX: 00007f7ac578eb69 [ 224.630520][ T7001] RDX: 0000000000000028 RSI: 0000200000001ec0 RDI: 0000000000000012 [ 224.630534][ T7001] RBP: 00007f7ac668a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.630547][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.630560][ T7001] R13: 0000000000000001 R14: 00007f7ac59b5fa0 R15: 00007ffe7dca27a8 [ 224.630593][ T7001] [ 226.099434][ T1217] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 226.315905][ T7016] bridge1: entered promiscuous mode [ 226.321560][ T7016] bridge1: entered allmulticast mode [ 227.610551][ T7018] netlink: 76 bytes leftover after parsing attributes in process `syz.3.262'. [ 229.454318][ T7006] syz.4.260 (7006) used greatest stack depth: 20088 bytes left [ 229.559424][ T1217] usb 1-1: device not accepting address 6, error -71 [ 229.977085][ T7028] bridge1: entered promiscuous mode [ 229.982830][ T7028] bridge1: entered allmulticast mode [ 231.459415][ T5898] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 231.629506][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 231.636929][ T7038] netlink: 'syz.4.268': attribute type 27 has an invalid length. [ 231.896967][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 231.970152][ T5898] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 232.252376][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.261592][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.269719][ T5898] usb 2-1: Product: syz [ 232.273935][ T5898] usb 2-1: Manufacturer: syz [ 232.278612][ T5898] usb 2-1: SerialNumber: syz [ 232.662786][ T7034] netdevsim netdevsim1: Direct firmware load for . [ 232.662786][ T7034] failed with error -2 [ 232.709555][ T7034] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 232.709555][ T7034] [ 234.452801][ T7064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.272'. [ 235.695660][ T5898] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 235.731735][ T5898] cdc_ncm 2-1:1.0: bind() failure [ 235.784058][ T5898] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 235.835601][ T5898] cdc_ncm 2-1:1.1: bind() failure [ 237.010792][ T5898] usb 2-1: USB disconnect, device number 2 [ 238.070004][ T7022] udevd[7022]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 240.507646][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 240.723727][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 240.723745][ T30] audit: type=1800 audit(1754085950.750:28): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.286" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 242.318254][ T7123] overlayfs: failed to resolve './bus': -2 [ 242.365527][ T7126] net_ratelimit: 380 callbacks suppressed [ 242.365570][ T7126] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.977407][ T7139] bridge1: entered promiscuous mode [ 243.983017][ T7139] bridge1: entered allmulticast mode [ 247.309796][ T7181] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 247.353303][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 248.060162][ T5898] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 248.222681][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.248287][ T5898] usb 2-1: not running at top speed; connect to a high speed hub [ 248.272112][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.290597][ T5898] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.356581][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 248.368064][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 248.384366][ T5898] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 248.432818][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 248.442389][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.453609][ T5898] usb 2-1: Product: syz [ 248.462636][ T5898] usb 2-1: Manufacturer: syz [ 248.468236][ T5898] usb 2-1: SerialNumber: syz [ 248.482642][ T5898] ipaq 2-1:1.0: PocketPC PDA converter detected [ 249.785474][ T7215] pimreg: entered allmulticast mode [ 249.818408][ T7215] pimreg: left allmulticast mode [ 249.871391][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 249.886771][ T7217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 250.896871][ T5898] ipaq 2-1:1.0: probe with driver ipaq failed with error -71 [ 250.914306][ T5898] usb 2-1: USB disconnect, device number 3 [ 251.739609][ T7235] bridge1: entered promiscuous mode [ 251.745080][ T7235] bridge1: entered allmulticast mode [ 253.289551][ T7248] netlink: 'syz.4.324': attribute type 3 has an invalid length. [ 253.318762][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 253.481183][ T7251] tmpfs: Unknown parameter 'usrquotay’’’' [ 257.978750][ T7264] vivid-000: kernel_thread() failed [ 259.514241][ T976] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 259.727113][ T976] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 259.748790][ T976] usb 2-1: config 0 has no interface number 0 [ 260.030006][ T7300] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 260.089630][ T976] usb 2-1: config 0 interface 171 has no altsetting 0 [ 260.104640][ T976] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 260.123997][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.139198][ T976] usb 2-1: Product: syz [ 260.152775][ T976] usb 2-1: Manufacturer: syz [ 260.176247][ T976] usb 2-1: SerialNumber: syz [ 260.225832][ T976] usb 2-1: config 0 descriptor?? [ 260.253991][ T976] usb-storage 2-1:0.171: USB Mass Storage device detected [ 260.354879][ T7309] netlink: 7 bytes leftover after parsing attributes in process `syz.4.340'. [ 260.477271][ T7285] capability: warning: `syz.1.334' uses deprecated v2 capabilities in a way that may be insecure [ 260.664800][ T7321] vcan0: tx drop: invalid sa for name 0x0000040000000000 [ 260.673511][ T7321] vcan0: tx drop: invalid sa for name 0x0000040000000000 [ 260.771886][ T976] usb 2-1: USB disconnect, device number 4 [ 260.852783][ T1217] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 261.043189][ T1217] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.072473][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.087055][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.144951][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.161377][ T1217] usb 1-1: config 0 descriptor?? [ 261.169919][ T1217] cp210x 1-1:0.0: cp210x converter detected [ 262.680226][ T7334] ubi31: attaching mtd0 [ 263.086596][ T7334] ubi31: scanning is finished [ 263.091478][ T7334] ubi31: empty MTD device detected [ 263.242232][ T1217] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 263.280097][ T7309] syz.4.340 (7309) used greatest stack depth: 17992 bytes left [ 263.503465][ T1217] usb 1-1: cp210x converter now attached to ttyUSB0 [ 263.557042][ T1217] usb 1-1: USB disconnect, device number 8 [ 263.609043][ T7334] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 263.617553][ T7334] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 263.618549][ T1217] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.625014][ T7334] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 263.625050][ T7334] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 263.625077][ T7334] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 263.625096][ T7334] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 263.625115][ T7334] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3883962908 [ 263.625137][ T7334] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 263.625981][ T7337] ubi31: background thread "ubi_bgt31d" started, PID 7337 [ 263.768490][ T1217] cp210x 1-1:0.0: device disconnected [ 263.784888][ T7339] netlink: 52 bytes leftover after parsing attributes in process `syz.3.347'. [ 263.833636][ T7342] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 263.877643][ T7342] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 264.046622][ T7342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.378151][ T7366] netlink: 76 bytes leftover after parsing attributes in process `syz.4.355'. [ 268.681110][ T7375] input: syz1 as /devices/virtual/input/input15 [ 271.098661][ T7377] netlink: 76 bytes leftover after parsing attributes in process `syz.3.357'. [ 272.273456][ T7385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.679407][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 272.834239][ T976] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 272.843351][ T976] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 272.855339][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.867322][ T976] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.876783][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.884879][ T976] usb 5-1: Product: syz [ 272.889101][ T976] usb 5-1: Manufacturer: syz [ 272.893975][ T976] usb 5-1: SerialNumber: syz [ 274.220189][ T7393] vivid-003: disconnect [ 274.461434][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 274.469739][ T5846] Bluetooth: hci2: command 0x0401 tx timeout [ 275.376574][ T976] usb 5-1: 0:2 : does not exist [ 275.565535][ T7391] vivid-003: reconnect [ 276.083666][ T7415] cgroup: name respecified [ 276.134473][ T976] usb 5-1: USB disconnect, device number 4 [ 276.438143][ T7341] udevd[7341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.529729][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 278.376592][ T5913] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 278.410314][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.429134][ T5913] usb 5-1: Product: syz [ 278.433829][ T5913] usb 5-1: Manufacturer: syz [ 278.438479][ T5913] usb 5-1: SerialNumber: syz [ 278.456271][ T5913] usb 5-1: config 0 descriptor?? [ 278.774446][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.750201][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.033522][ T5913] usb 5-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 280.091208][ T5913] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 280.194856][ T5913] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 280.394145][ T5913] usb 5-1: USB disconnect, device number 5 [ 281.797108][ T7470] ptrace attach of "./syz-executor exec"[7471] was attempted by "./syz-executor exec"[7470] [ 282.232323][ T7470] xt_CT: No such helper "pptp" [ 288.060075][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 289.646074][ T7526] bond1: entered promiscuous mode [ 289.736029][ T7526] bond1: entered allmulticast mode [ 289.829286][ T7526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.965782][ T7551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.142205][ T7556] netlink: 76 bytes leftover after parsing attributes in process `syz.0.405'. [ 292.576299][ T7577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.412'. [ 292.603494][ T7581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.412'. [ 292.919561][ T5913] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 293.254469][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 293.266413][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.329061][ T5846] Bluetooth: hci2: command 0x0401 tx timeout [ 295.339953][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 296.187014][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 296.219498][ T5913] usb 4-1: can't read configurations, error -71 [ 297.269461][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 298.149453][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 298.222039][ T5913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.826070][ T5913] usb 4-1: config 0 has no interface number 0 [ 298.867028][ T5913] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.939795][ T5913] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.950379][ T5913] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 298.962642][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.023587][ T5913] usb 4-1: config 0 descriptor?? [ 299.294209][ T7617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.425'. [ 300.521316][ T5913] uclogic 0003:28BD:0094.0002: pen parameters not found [ 300.528582][ T5913] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 300.540135][ T7631] veth1_macvtap: left promiscuous mode [ 300.545679][ T7631] macsec0: entered promiscuous mode [ 300.556250][ T7631] veth1_macvtap: entered promiscuous mode [ 300.562328][ T7631] macsec0: left promiscuous mode [ 300.797862][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.812542][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.828864][ T1217] usb 4-1: USB disconnect, device number 6 [ 302.801460][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 303.678891][ T7658] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 303.689339][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.698351][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.745348][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.752766][ T7658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.760524][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.767725][ T7658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.812288][ T7658] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 303.888478][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.974095][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 304.089887][ T7659] bridge_slave_1: left allmulticast mode [ 304.095854][ T7659] bridge_slave_1: left promiscuous mode [ 304.107616][ T7659] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.109985][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 304.213933][ T5906] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 304.233471][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.307558][ T5906] usb 4-1: config 0 descriptor?? [ 304.351992][ T7659] bridge_slave_0: left allmulticast mode [ 304.363059][ T7659] bridge_slave_0: left promiscuous mode [ 304.370122][ T7659] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.955611][ T7659] bond0: (slave bridge0): Releasing backup interface [ 305.062772][ T5906] Bluetooth: Can't get version to change to load ram patch err [ 305.100661][ T5906] Bluetooth: Loading sysconfig file failed [ 305.124460][ T5906] ath3k 4-1:0.0: probe with driver ath3k failed with error -121 [ 306.726373][ T7688] veth1_macvtap: left promiscuous mode [ 306.732320][ T7688] macsec0: entered promiscuous mode [ 306.744374][ T7688] veth1_macvtap: entered promiscuous mode [ 306.750503][ T7688] macsec0: left promiscuous mode [ 306.793500][ T1217] usb 4-1: USB disconnect, device number 7 [ 308.392173][ T7702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.819984][ T2153] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 309.029214][ T7715] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 309.037240][ T7715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.451'. [ 309.172218][ T2153] usb 5-1: Using ep0 maxpacket: 8 [ 309.184043][ T2153] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.192518][ T2153] usb 5-1: config 0 has no interface number 0 [ 309.201400][ T2153] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.211659][ T2153] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.220868][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.257145][ T2153] usb 5-1: config 0 descriptor?? [ 309.976677][ T2153] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 310.001034][ T7715] team0: Port device geneve0 added [ 310.232859][ T5898] usb 5-1: USB disconnect, device number 6 [ 312.893924][ T7753] veth1_macvtap: left promiscuous mode [ 312.899568][ T7753] macsec0: entered promiscuous mode [ 312.908639][ T7753] veth1_macvtap: entered promiscuous mode [ 312.914740][ T7753] macsec0: left promiscuous mode [ 318.988776][ T7802] veth1_macvtap: left promiscuous mode [ 318.994804][ T7802] macsec0: entered promiscuous mode [ 319.005471][ T7802] veth1_macvtap: entered promiscuous mode [ 319.011556][ T7802] macsec0: left promiscuous mode [ 319.375586][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 322.301981][ T7807] delete_channel: no stack [ 322.324102][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 322.474120][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.198495][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.369466][ T5932] usb 1-1: device descriptor read/64, error -71 [ 324.550785][ T7843] veth1_macvtap: left promiscuous mode [ 324.569590][ T7843] macsec0: entered promiscuous mode [ 324.786643][ T7845] veth1_macvtap: entered promiscuous mode [ 324.793190][ T7845] macsec0: left promiscuous mode [ 328.497147][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 329.496612][ T7890] veth1_macvtap: left promiscuous mode [ 329.502254][ T7890] macsec0: entered promiscuous mode [ 329.511996][ T7890] veth1_macvtap: entered promiscuous mode [ 329.518074][ T7890] macsec0: left promiscuous mode [ 331.580802][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 332.624901][ T7917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.861156][ T7919] netlink: 4344 bytes leftover after parsing attributes in process `syz.3.507'. [ 333.096023][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 333.106001][ T7929] veth1_macvtap: left promiscuous mode [ 333.113401][ T7929] macsec0: entered promiscuous mode [ 333.121878][ T7931] veth1_macvtap: entered promiscuous mode [ 333.127912][ T7931] macsec0: left promiscuous mode [ 333.151818][ T7928] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.161915][ T7928] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.172008][ T7928] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.180885][ T7928] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.351753][ T7942] hub 8-0:1.0: USB hub found [ 334.360336][ T7942] hub 8-0:1.0: 1 port detected [ 335.894837][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 337.631228][ T7965] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 337.783911][ T7965] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 337.941447][ T7974] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.953483][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 338.049992][ T7978] trusted_key: syz.4.526 sent an empty control message without MSG_MORE. [ 338.171773][ T7979] random: crng reseeded on system resumption [ 338.190743][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 338.516952][ T7989] 7’: renamed from bond_slave_0 (while UP) [ 339.723773][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 339.733157][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 339.760944][ T30] audit: type=1326 audit(1754086049.790:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce9d8eb69 code=0x7ffc0000 [ 339.782413][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.875278][ T8010] input: syz1 as /devices/virtual/input/input18 [ 339.987070][ T8002] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 341.706681][ T8002] macsec1: entered allmulticast mode [ 341.752173][ T30] audit: type=1326 audit(1754086049.820:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce9d8eb69 code=0x7ffc0000 [ 342.126579][ T8002] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 343.800815][ T8032] ubi: mtd0 is already attached to ubi31 [ 345.793590][ T8042] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.821180][ T8042] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.860983][ T8042] [ 345.863414][ T8042] ============================================ [ 345.869787][ T8042] WARNING: possible recursive locking detected [ 345.875991][ T8042] 6.16.0-syzkaller #0 Not tainted [ 345.881079][ T8042] -------------------------------------------- [ 345.887268][ T8042] syz.4.546/8042 is trying to acquire lock: [ 345.893289][ T8042] ffff8880589fcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 345.904357][ T8042] [ 345.904357][ T8042] but task is already holding lock: [ 345.912025][ T8042] ffff8880589fcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 345.922030][ T8042] and the lock comparison function returns 0: [ 345.928184][ T8042] [ 345.928184][ T8042] other info that might help us debug this: [ 345.936759][ T8042] Possible unsafe locking scenario: [ 345.936759][ T8042] [ 345.944255][ T8042] CPU0 [ 345.947620][ T8042] ---- [ 345.950959][ T8042] lock(&dev_instance_lock_key#20); [ 345.956339][ T8042] lock(&dev_instance_lock_key#20); [ 345.961695][ T8042] [ 345.961695][ T8042] *** DEADLOCK *** [ 345.961695][ T8042] [ 345.969879][ T8042] May be due to missing lock nesting notation [ 345.969879][ T8042] [ 345.978236][ T8042] 2 locks held by syz.4.546/8042: [ 345.983280][ T8042] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 345.992290][ T8042] #1: ffff8880589fcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 346.002593][ T8042] [ 346.002593][ T8042] stack backtrace: [ 346.008583][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.4.546 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 346.008604][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.008625][ T8042] Call Trace: [ 346.008634][ T8042] [ 346.008643][ T8042] dump_stack_lvl+0x189/0x250 [ 346.008668][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.008687][ T8042] ? __pfx__printk+0x10/0x10 [ 346.008711][ T8042] ? print_lock_name+0xde/0x100 [ 346.008734][ T8042] print_deadlock_bug+0x28b/0x2a0 [ 346.008756][ T8042] validate_chain+0x1a3f/0x2140 [ 346.008786][ T8042] __lock_acquire+0xab9/0xd20 [ 346.008804][ T8042] ? __netdev_update_features+0xcb1/0x1a20 [ 346.008821][ T8042] lock_acquire+0x120/0x360 [ 346.008835][ T8042] ? __netdev_update_features+0xcb1/0x1a20 [ 346.008858][ T8042] __mutex_lock+0x182/0xe80 [ 346.008877][ T8042] ? __netdev_update_features+0xcb1/0x1a20 [ 346.008893][ T8042] ? kasan_save_track+0x4f/0x80 [ 346.008920][ T8042] ? kasan_save_free_info+0x46/0x50 [ 346.008941][ T8042] ? __kasan_slab_free+0x62/0x70 [ 346.008956][ T8042] ? kmem_cache_free+0x18f/0x400 [ 346.008972][ T8042] ? netlink_broadcast_filtered+0x103e/0x1140 [ 346.008995][ T8042] ? ethnl_multicast+0xb6/0x100 [ 346.009019][ T8042] ? ethnl_default_notify+0x7c0/0x990 [ 346.009044][ T8042] ? ethnl_netdev_event+0xe2/0x160 [ 346.009070][ T8042] ? __netdev_update_features+0xcb1/0x1a20 [ 346.009086][ T8042] ? __lock_acquire+0xab9/0xd20 [ 346.009101][ T8042] ? __pfx___mutex_lock+0x10/0x10 [ 346.009128][ T8042] __netdev_update_features+0xcb1/0x1a20 [ 346.009152][ T8042] ? __pfx___netdev_update_features+0x10/0x10 [ 346.009168][ T8042] ? __wake_up_common_lock+0x190/0x1f0 [ 346.009194][ T8042] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 346.009222][ T8042] ? consume_skb+0xce/0xf0 [ 346.009247][ T8042] ? netlink_broadcast_filtered+0x10c8/0x1140 [ 346.009270][ T8042] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 346.009302][ T8042] ? __lock_acquire+0xab9/0xd20 [ 346.009324][ T8042] ? do_raw_spin_lock+0x121/0x290 [ 346.009351][ T8042] netdev_update_features+0x6d/0xe0 [ 346.009374][ T8042] ? __pfx_netdev_update_features+0x10/0x10 [ 346.009401][ T8042] macsec_notify+0x2f5/0x660 [ 346.009429][ T8042] ? __pfx_macsec_notify+0x10/0x10 [ 346.009466][ T8042] notifier_call_chain+0x1b3/0x3e0 [ 346.009490][ T8042] netdev_features_change+0x85/0xc0 [ 346.009512][ T8042] ? __pfx_netdev_features_change+0x10/0x10 [ 346.009535][ T8042] ? security_capable+0x7e/0x2e0 [ 346.009560][ T8042] dev_ethtool+0x1520/0x1990 [ 346.009581][ T8042] ? __pfx_dev_ethtool+0x10/0x10 [ 346.009604][ T8042] ? dev_load+0x21/0x1f0 [ 346.009630][ T8042] dev_ioctl+0x392/0x1150 [ 346.009653][ T8042] sock_do_ioctl+0x22c/0x300 [ 346.009673][ T8042] ? __pfx_sock_do_ioctl+0x10/0x10 [ 346.009690][ T8042] ? __lock_acquire+0xab9/0xd20 [ 346.009707][ T8042] ? __asan_memset+0x22/0x50 [ 346.009730][ T8042] ? smack_file_ioctl+0x24a/0x340 [ 346.009748][ T8042] sock_ioctl+0x576/0x790 [ 346.009766][ T8042] ? __pfx_sock_ioctl+0x10/0x10 [ 346.009784][ T8042] ? __fget_files+0x2a/0x420 [ 346.009802][ T8042] ? __fget_files+0x3a0/0x420 [ 346.009820][ T8042] ? __fget_files+0x2a/0x420 [ 346.009839][ T8042] ? bpf_lsm_file_ioctl+0x9/0x20 [ 346.009859][ T8042] ? __pfx_sock_ioctl+0x10/0x10 [ 346.009876][ T8042] __se_sys_ioctl+0xfc/0x170 [ 346.009902][ T8042] do_syscall_64+0xfa/0x3b0 [ 346.009921][ T8042] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.009938][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.009954][ T8042] ? clear_bhb_loop+0x60/0xb0 [ 346.009973][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.009990][ T8042] RIP: 0033:0x7f2ce9d8eb69 [ 346.010006][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.010021][ T8042] RSP: 002b:00007f2ceabe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.010039][ T8042] RAX: ffffffffffffffda RBX: 00007f2ce9fb6080 RCX: 00007f2ce9d8eb69 [ 346.010053][ T8042] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 346.010064][ T8042] RBP: 00007f2ce9e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 346.010074][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.010085][ T8042] R13: 0000000000000000 R14: 00007f2ce9fb6080 R15: 00007ffefad0bab8 [ 346.010104][ T8042] [ 346.430443][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.715673][ T8050] netlink: 7 bytes leftover after parsing attributes in process `syz.0.548'.