last executing test programs: 3m37.911042667s ago: executing program 2 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000300010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008"], 0x25c}}, 0x0) 3m36.983041865s ago: executing program 2 (id=13): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x700) 3m34.894556348s ago: executing program 2 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000200)={0xfffc, 0x3d}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f0000008900)=[{{&(0x7f0000000280)=@l2tp6, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/76, 0x4c}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000900)=""/149, 0x95}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/180, 0xb4}], 0x9, &(0x7f0000000b40)=""/4096, 0x1000}, 0xc9}, {{&(0x7f0000001b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001bc0)=""/102, 0x66}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000002c40)=""/88, 0x58}, {&(0x7f0000002cc0)=""/129, 0x81}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/77, 0x4d}, {&(0x7f0000008a40)=""/121, 0x79}], 0x8, &(0x7f0000008b80)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004f00)=@sco, 0x80, &(0x7f0000007480)=[{&(0x7f0000004f80)=""/211, 0xd3}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/198, 0xc6}, {&(0x7f0000006180)=""/68, 0x44}, {&(0x7f0000006200)=""/229, 0xe5}, {&(0x7f0000006300)=""/229, 0xe5}, {&(0x7f0000006400)=""/87, 0x57}, {&(0x7f00000003c0)}, {&(0x7f0000006480)=""/4096, 0x1000}], 0x9, &(0x7f0000007540)=""/77, 0x4d}, 0x3}, {{&(0x7f00000075c0)=@pptp, 0x80, &(0x7f0000007880)=[{&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000007680)=""/225, 0xe1}, {&(0x7f0000007780)=""/2, 0x2}, {&(0x7f0000008ac0)=""/168, 0xa8}], 0x4}, 0x41a6b939}, {{0x0, 0x0, &(0x7f00000088c0)=[{&(0x7f00000078c0)=""/4096, 0x1000}], 0x1}, 0xfffffff9}], 0x5, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x3c) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) fanotify_mark(0xffffffffffffffff, 0x19c, 0x40001032, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x7, 0x0, 0x40000003}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) 3m30.699115877s ago: executing program 2 (id=32): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000001300)={0x8f, 0x0, 0xc}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) 3m26.443820681s ago: executing program 2 (id=46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x5, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000140000000000000000000000040000000000", @ANYRESDEC=r1, @ANYRES32], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x481, 0x42) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) (async) keyctl$KEYCTL_WATCH_KEY(0x6, r6, 0xffffffffffffffff, 0xfffffffdfffffffc) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x9) (async, rerun: 64) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64) 3m26.182845769s ago: executing program 2 (id=49): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0xfc, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0xeb, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d"]}]}, 0xfc}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0xfffffffc, @loopback}, 0x1c) r6 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r6, 0x0, 0xffffffef) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) 3m10.569221888s ago: executing program 32 (id=49): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0xfc, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0xeb, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d"]}]}, 0xfc}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0xfffffffc, @loopback}, 0x1c) r6 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r6, 0x0, 0xffffffef) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) 18.71892255s ago: executing program 1 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffeffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x1300000000000000}, 0x0) 17.674600565s ago: executing program 1 (id=472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0xe, 0x3, [{0x1, 0x8, "578e0c030064"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpgrp(0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) accept4$x25(r7, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x80000) (async) accept4$x25(r7, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@any, 0x6}, @any, 0x8, 0x4, 0x9, 0xff, 0xfffffffffffffffb, 0xd40a, 0xb}) 15.320851017s ago: executing program 4 (id=474): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12.08272825s ago: executing program 1 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffffd, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x468f, 0xc4bc, 0x2c, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x110003) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a0001010000000000"], 0x14}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002c80)="7bc9772c3adcc294fdfb42a877da40d9ebaf07d3a0033ae45b0f30ae8d06951c436ec8e05eb6d405c058f679840bd7a7e65a2c365fb01d60f395699b64615dd42ef9e52b572165ee7cad1c6d0aa1495ea00d2b23a92bcb88efc487fd97329103b5ce46c6b627ff5ee1fabe15d8efcb16dac17470b83e1f9652a0079518396736a8bda106f0967732cbd4f432508645864faef1b6d760a95db78c42ec5a214f9d383b86a941b9ccb34d3932cbb914220b9cbfc43112c2e9ffcff13016630adc", 0xbf}, {&(0x7f0000002e00)="5206d88b9b29508c45c6b82d58f2169003771d873c53f6c24592e8e2928d37d082519921827b9a19fa44e14ec8a22203ac8b6a892756f3b13ad8667f2bb8555e180cdefa6539d01d35b0a0702785398df6dbe806fa5fbec3c04a62143443ab6c8b9aa57d1504ad0c21c86c", 0x6b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="92f0ac0d687fc396c6e3fcb435c1ab468bfbcb101f67fb0a6eaf21f2fc72ec5a03074a7357c6308114ad5b64ecac13598f51c6ae646ab3f0d7b857201ac0e2c8bee4583571cd", 0x46}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)="b87a12bfe84b8a61e5973e77ad8d2e880d8f77f82bf7f31fb63b3441e4bd657a7248543451a8181b88c0dc4dce63c0d0d89477b6bd6d95ad92ceb4d43e2b720b1235e17c7c744db03b18adbb47804f9e3368cdbeb4b2f75a1989e642b9c9dd84a6f7259615e76ff56a83bdd40f", 0x6d}, {&(0x7f0000003300)="f188f01c5ab1b2d6648a42cff6dd5157a23b61b77e", 0x15}, {&(0x7f0000003340)="eb5331c5b894d975ea5885fc377d68d205d92f42d9b93add8855ef779d0638d6a577269e24a524b3a0ce61dafab620c9c59458f3260a67d355a91c1e59b128964786827aa7262b754b7b72523d0807c6a8e5af2ab370e141c4f8be05ad03e335caf45e25cde29308249c4be6363cc4356dab7c2cfc", 0x75}, {&(0x7f00000033c0)="9e707f06cead4fd09abb88942ed84a458f77ebfeab04150c94f8e8e49793c2cc98d4f83bbf62920ea2dd", 0x2a}, {&(0x7f0000003400)="194e10985a93ab451e60e5e9f33ad8adadfd305ae4216aa152956ce08d30b68d2a10f0efff", 0x25}], 0x5}}], 0x3, 0x24008804) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='contention_begin\x00', r10, 0x0, 0x800000000}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0088a8"], 0xfdef) 12.079277164s ago: executing program 5 (id=483): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x4, r0, 'id0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, 0x0, 0x100400, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) shutdown(0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x1010480, 0x0) 10.939155957s ago: executing program 5 (id=484): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000700000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 10.484626965s ago: executing program 3 (id=486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}], 0x1, 0x4000001) r4 = dup(r3) read$FUSE(r4, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r4, 0x1) fchdir(r2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 9.586739332s ago: executing program 5 (id=487): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x240009, 0x5, 0x8001, 0x0, 0xd25, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x6, 0x2, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80, 0x7, 0x6, 0x81}}) unshare(0x24060400) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x8930, &(0x7f0000000200)={'veth0_vlan\x00', @ifru_data=&(0x7f00000001c0)="ed049d83e9e1276f3d7ce8a147821d4ad335298e88e130e32d87cce99d36a141"}) syz_open_dev$loop(&(0x7f0000000780), 0xffff, 0x82800) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0xf7219000) io_setup(0x6, &(0x7f0000001380)) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b5222", 0x1f}], 0x2}, 0x24040050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) getsockopt$MRT6(r8, 0x29, 0xce, 0xffffffffffffffff, &(0x7f0000000040)) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 9.363594703s ago: executing program 4 (id=488): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000380)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3d8) syz_init_net_socket$ax25(0x3, 0x5, 0x7) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='decodes '], 0xc) 9.290377045s ago: executing program 3 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x200000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x170, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xfffffffe}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x400}, 0x4000800) 7.980194634s ago: executing program 3 (id=491): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x8004}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.97931739s ago: executing program 4 (id=492): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000200)=""/5, 0x1c000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000200)=""/5, 0x1c000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f00000005c0)={0x2c, 0x8, 0x0, 0x1e, r0}, 0x10) (async) bind$xdp(r3, &(0x7f00000005c0)={0x2c, 0x8, 0x0, 0x1e, r0}, 0x10) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) socket$inet6(0xa, 0x805, 0x0) (async) r4 = socket$inet6(0xa, 0x805, 0x0) uname(0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x0, 0x0, 0x0, 0x10, 0x0, @mcast2, @loopback={0x0, 0xffff888101827518}, 0x8000, 0x0, 0x0, 0x26bb89d}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x0, 0x0, 0x0, 0x10, 0x0, @mcast2, @loopback={0x0, 0xffff888101827518}, 0x8000, 0x0, 0x0, 0x26bb89d}}) r7 = signalfd4(r4, &(0x7f0000000380)={[0xfffffffffffffff8]}, 0x8, 0x800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r7, 0x20, &(0x7f0000000480)={&(0x7f0000000400)=""/115, 0x73, 0x0, &(0x7f0000000680)=""/238, 0xee}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b01740000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x9, 0x9}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x5) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x5) r11 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r11, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x0) recvmmsg(r11, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1, &(0x7f0000000440)=""/7, 0x7}, 0xaee02048}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'veth0_virt_wifi\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x39, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x39, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) poll(&(0x7f0000000100)=[{r4, 0x1100}, {r9, 0x8002}], 0x2, 0x7f) (async) poll(&(0x7f0000000100)=[{r4, 0x1100}, {r9, 0x8002}], 0x2, 0x7f) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r12, 0x80049370, &(0x7f00000000c0)) 7.719054039s ago: executing program 5 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0104000000000000f5ff010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008"], 0x25c}}, 0x0) 7.718818127s ago: executing program 3 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x7edcaa70, 0x61, 0x11, 0x4c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010000}]}, &(0x7f0000000000)='GPL\x00'}, 0xbe) 7.127328405s ago: executing program 4 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffffd, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x468f, 0xc4bc, 0x2c, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x110003) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a0001010000000000"], 0x14}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002c80)="7bc9772c3adcc294fdfb42a877da40d9ebaf07d3a0033ae45b0f30ae8d06951c436ec8e05eb6d405c058f679840bd7a7e65a2c365fb01d60f395699b64615dd42ef9e52b572165ee7cad1c6d0aa1495ea00d2b23a92bcb88efc487fd97329103b5ce46c6b627ff5ee1fabe15d8efcb16dac17470b83e1f9652a0079518396736a8bda106f0967732cbd4f432508645864faef1b6d760a95db78c42ec5a214f9d383b86a941b9ccb34d3932cbb914220b9cbfc43112c2e9ffcff13016630adc", 0xbf}, {&(0x7f0000002e00)="5206d88b9b29508c45c6b82d58f2169003771d873c53f6c24592e8e2928d37d082519921827b9a19fa44e14ec8a22203ac8b6a892756f3b13ad8667f2bb8555e180cdefa6539d01d35b0a0702785398df6dbe806fa5fbec3c04a62143443ab6c8b9aa57d1504ad0c21c86c", 0x6b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="92f0ac0d687fc396c6e3fcb435c1ab468bfbcb101f67fb0a6eaf21f2fc72ec5a03074a7357c6308114ad5b64ecac13598f51c6ae646ab3f0d7b857201ac0e2c8bee4583571cd", 0x46}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)="b87a12bfe84b8a61e5973e77ad8d2e880d8f77f82bf7f31fb63b3441e4bd657a7248543451a8181b88c0dc4dce63c0d0d89477b6bd6d95ad92ceb4d43e2b720b1235e17c7c744db03b18adbb47804f9e3368cdbeb4b2f75a1989e642b9c9dd84a6f7259615e76ff56a83bdd40f", 0x6d}, {&(0x7f0000003300)="f188f01c5ab1b2d6648a42cff6dd5157a23b61b77e", 0x15}, {&(0x7f0000003340)="eb5331c5b894d975ea5885fc377d68d205d92f42d9b93add8855ef779d0638d6a577269e24a524b3a0ce61dafab620c9c59458f3260a67d355a91c1e59b128964786827aa7262b754b7b72523d0807c6a8e5af2ab370e141c4f8be05ad03e335caf45e25cde29308249c4be6363cc4356dab7c2cfc", 0x75}, {&(0x7f00000033c0)="9e707f06cead4fd09abb88942ed84a458f77ebfeab04150c94f8e8e49793c2cc98d4f83bbf62920ea2dd", 0x2a}, {&(0x7f0000003400)="194e10985a93ab451e60e5e9f33ad8adadfd305ae4216aa152956ce08d30b68d2a10f0efff4a3642", 0x28}], 0x5}}], 0x3, 0x24008804) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='contention_begin\x00', r10, 0x0, 0x800000000}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0088a8"], 0xfdef) 7.039694187s ago: executing program 1 (id=497): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff3b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008894}, 0x4040810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_io_uring_setup(0x40000832, &(0x7f0000000380)={0x0, 0x6218, 0x801, 0x1, 0x321}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x4, 0x0, {0x0, r8}}) io_uring_enter(r5, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 6.154818037s ago: executing program 0 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x1800, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) fcntl$F_GET_RW_HINT(r3, 0x40b, 0x0) 6.139284011s ago: executing program 5 (id=499): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') modify_ldt$write2(0x11, &(0x7f0000000000)={0x8001, 0x100000, 0xffffffffffffffff, 0x0, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000300000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x3a}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'mountinfo\x00'}}]}}) 6.068985492s ago: executing program 3 (id=500): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb90000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x20000004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000005c0)) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0xc01, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047459, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000001200080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r5, &(0x7f0000000240), 0x0, 0x6, 0x3, 0x0) link(&(0x7f0000000000)='./file0\x00', 0x0) preadv2(r3, 0x0, 0x0, 0x4, 0x9, 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x8000000}, 0x1c) 5.926855858s ago: executing program 1 (id=501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'os2.', './binderfs/binder0\x00'}, &(0x7f0000000180)='./binderfs/binder0\x00', 0x13, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="d9636e175ba4253cb0d67659a79e240be514da880c0dfcf0925be8bbfcdf712897c04362e0d1d20763aa07ffb00ab0d2aff7a02d5cfe18b7edf16aa0639176aa7e9e26e47ac4c253c81a5612e6cd1402644a2055dbabb2261e84b99e20be95bf2f6c30f0f494d38274104096968c198d695496288a53c6a1a115f3250f0f34af83c5aa1ab594b3b24c799743f6880bfcbfabb78750eb878aef85a1d7b8abe3769a1d1857808bcf89c30b4c702f23cfb37522be423a1cfc832cf4def118e29d56901e867d8ac4b0e96773cff2556f3b85b99b480c64291935e4e3199714899fd428b07980f643d8f192ca969ec4cf31c83a0decc948d9c18de0a0d605f586aa9abf930deb3d91e16befd2cc1bf1ab1661d4efde82b62a9883d5494dbaa011a04ea354ca30286151e962b3175ad323bc69b396942fffa62a8f6df2b8017cee07ca3aaa7fba0a9d22a327eec94d73c6032bde794f732656c35be4c2e5650750ac0793e973c0247f61cfeb47922e88aaea137172380057329406c4db4542e2c03e5370e839548fa066cc7f76413972631354f0292f65abd627b233a863f23af19c16b79f98e9ec3bd611da061fd13b9553f43db566a6e6874709ec70407448df6b67d7a0c886dfb196057629781797d7fb5d467fd81860ada27688cb9e1d02cdcac44be7672a97273cbf41e5ca021ff6bfe6efec0998e87082df84a6a8743c4627bb449e54a7f67ea1ef540e3fd5d4aa380a50aa03169b870b88d5022212330c40db8e92d9814a0ee70bf5059256bf760d777612e5b547bfda62c6d70235e6f38b3b0b5f309221ec9e59c98253115eb9e5fa6df0696df71ba473007b406606604edd8e4c91aa174c9273325b1b8c042b5b911b6e717fcd216ff32ad4038f0efad282d4b4d418d22939f8b0ccdbf54c9392ed4b11159653a75853bee917a4cbe80e92f3160ea92a6e29f0cd89bb49c04ff40161d7f574949e61f49693a44090d05583606da55a3bba0abc1a2d07d600616dd5bb6dc952d9a653371a694e8826cb867f23f09a8ead1460eef0200f95a60ec98a70026fb7161eb22b45e3bd82ad026c590307438a24b7fa45ead116d8970bf99cdd03e18ec4f301cde332ff58b77100c828d6288eda4c7172fba5f478816f91f976d79e3eab6343cbee0f9da7e05e4a3527f092dbf920b06c2c5c76c60418bcc648f728796be2797ffa9f8749970954a58e7adba6fed9869346cd9632121cc223cd6dcf47d5afcf68bd7f15bc9da479fee6e69e99e11e0ad1a6422fd6b2cb63861969e4d4befcb9a6eb68ce57e3545dcd98cacc1f33754a7f4287378b6acf13ed0c428935ffedc90eb2b2efc2996c5688ead4981af3f56d4d3b28c22dea7ae4c6f5996dfd8ccfc1ce975f6fe9963fb5debdf5c158f33f73d2ae5ba3c1ec3a1f76a852554664d4c79396531349864324802a08eb5bf3ec308c3265b5f91801f6a90e6aae29126cc1e7b62a465eb70373d03da589c0405af877f65c49962fb3ce464801ef893b7cc3fa3e9ac3f6454b33dde1de013665e72385b1b911bc9d9f443a2131887a4c7bff3513d4d1b30c2bd300659d9f1ff70cd1ce8d3a745cf3d013a4509290772e0a615c9568dfca3e52f851b5a6ee1955bcbbc56e4fd5d432aa1cf010cb9be658bb80d1a9a97716ca3d066ee549fc05c05d5682293e792c11c94ecbbe0138c43bd7e94bfa82ed3debb9aca13a9deca1819261fb69ce3ff3eef4fe71f65c54653b63e998223fb8d127bdfdb87bcab13f27c6c7719b7354bc7c292d00efd38b14004b9331bcc5006ea9facc128db6fc7fb48dc4951d519cd4987b4486581f7d80fa55e0c61fd7a645ca6d845717b4c4e9e41c28db14bd0046c024d82e3e06f76367939112e145e47061b632f237e28f9d9d9c6ab31a4d2f6a040ed5a4df50961855171369686f3bbfbe09f9484265bbad3246c0e90729ad69be06c8b004462c6312f9dab5018c922ccdf4993c7b78206bc39f7d5d018ae06039d04b6f2854e59a7c9888a9d40bf6b6337ce043e0a3a795060928ad2d206f7c2e86044f660ec267e83adc5021b0871135656edc4699a8379ec16a2f1891b40059aedc790e09e4c15151fa1e7a7f8adc9768f3e45795f63684453590da51166a9c8a4316225f9e6f3ce06db2da69ca3810daf7c5cbbcf3be8a4bcad6b8f3516b3dbce8d95417ebfc6d7e9c77470c143640ef032f5bf039717668a31cefe20490c0ae337af084b151b8a5ebbf3a83a6978675029624005feaa3da663f6e8406d0aa812dda448d28f372652f01072e97b6ad298fffaccbab890485a446ce1d6854c0b5b307b2f08ecd19f32d76134d88646c32d705568d076dbd0a71d1114b22c1df9c3be13e6a015be78799bbf7c58025ac6dad2d4d298a4b81a01d3a62e6c7935577b60275691ef410063f3b81ffd37ca8028769ed062dba74b9096a8a960d7be1480abe6fd710d742ff1d0098f75bf35252ff9220fd223a7e0c17696d5054bc87b45804b0f37b4ff20516df395267e0a8a3f929601e655ecd926296f05495db015fa5b5c704812e957497c558a6313d24ea5e227641b96d8ece7a054586ff022b3f60fa8baf5674d45f00c55ca7b32b4dbd67af44a2c4d8177f1786328f4022c1b376f269af156036360b22056ef3b0cb7793ba91400ddd8136fa4c53a4022f31f2b0e71f2a4ca6dee54bc41d756233c1450ccabc77d973e941ce4134149449894561150c4ef06e014f1d5216f5bc8478118e73c3cd079ff8523ab4092630853482118d7de341df63950986aa9ea5859d4fc0f8673116503ad1ef47652e68928270b38baf196940b34e6e0bf61cc3da707b8585378f42d476bf5c1f8b785895c39dc127e605979fd207b6eb746307873868f838a7588982591bb244ffa8ce9667acf35f3723854d99a9e284477865ca41703cec4e703b1fef00a3af570da68beb01636d2b5b030abf89ecf585cf63976b1e24b88f82e6dbba09efdb1672124fb591d3890ee21200b98532f1effdc850fdb87841af5c6da0ab010cc41556d9316cb350e8d27d3c7a5b1eae425968da431e35210bd8589bc20e81023aa6210522e2f5bffd4f6ec89119d40109c5daac1abe8cdb85166c389348678f8bd71dc66605a5ecd300ecc17904275342e3a0dcdeafc482be59296c466407dbd8a313f2663a515672e9f6fe2f4468480295ee93d5c459760919b687274a251f805619dea377ac5cc3f038ea295b107a54e50c9e050271ca0e507051193ff04119d13bf75dffef6b6da1c64c998899563444d3247798ee16e06564ddfa07a2136d1b54f447134b2fabc35f477d1e0d013ba7b301f8ddea93846a4e958117d6f35946d98beb4bc323d4ac0bd1d8e0d0e9282e7e52baf2aeba34a77441df931c1c234584d9cab0a36e4045308b021442c6656b4793fd1bcad5c6298beacb48d624f3c8586a05837f2fadbb2fcd70220f465ee1594c53e049a4049f1347e011315b349905fd6dce347e44342bcc6fca548a94f9cacd91de99607d130dc943b0ff74a7e6e5d00dd05faca1e8a5cf4b2cb0cbf84d0646b4ab471b13e9c26ae87113aa7c172a371c1a256f83570a25887768773675139e57b5061f2091f7d8e37c96c5837a1592d38713fe48f19250b4ae4977ebb777c195acbfe8d29eb816866b78e0bc63ac65a7e74c7ac5facfa5914976ae0a8adf2f64c298d1663a0534be3d7b2c8cb40048c5969e11798a02ed6889cdc267bd4d61c45343fcca2c358e2af39315e8d1fd14ba67e60ef1572dc2da8875a1639bab4f1a3aed8fbdb0814f7a03b8f21d7312d27eff7f3801222d96aa5534cba9c32cf0d624a738be30a10a877a11eb5dd0f3a902e4b4d3b3e6b114006543224a316156fa2646762da1a1cb7870d718a0ead2fc3a442e8132fa508825615f41cd0fc029ef42f26a84fa8468decc2eea711a532928a96b456b81b25384bd721c7056c345f6a8f6ab85ef909d6df006f34e543b7aa3fca1d9200c5271dd0acfd8a82456f3419709d257715ed9b5bc89221afeaaddfce60332d1c99de85befb37b76abf6822a005e56937c81f7f0b669f605246982a7101e5cc19f252f8fceb7cf119953054a3661ac62eadb1b2d58cae794a3b5aa60b4beb19d9178cf17c44ac759bbf674ada87ec674563528c97d9ce3bcb88ff262666a98521cf7ff6e8704f399d0750baf689203a24fb7afad81488d11824f173c99477ce5ca017aeb58633a19dc23ae9cb19ee87a272891a71d816668ce0a2b079d9487bb5e2ca4dfbb373d84e77dd017"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100, 0x800001}, @flat=@weak_binder={0x77622a85, 0x1101, 0x800001}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0xfffffffffffffffc, 0x0}) 5.045684533s ago: executing program 0 (id=502): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000380)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3d8) syz_init_net_socket$ax25(0x3, 0x5, 0x7) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='decodes '], 0xc) 3.030215722s ago: executing program 0 (id=503): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500060000000000080005"], 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000) ioctl$NBD_CLEAR_SOCK(r5, 0x1262) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$team(&(0x7f0000001cc0), r0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendfile(r8, r7, 0x0, 0x17) write$FUSE_STATX(r7, &(0x7f0000000540)={0x130, 0xfffffffffffffffc, 0x0, {0x2, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x6, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1ff}, {0xfffffffffffffffe, 0x3}, 0x80000000, 0xdc, 0xe0, 0xa}}}, 0x130) sendmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000340)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d311368129dbedffabdfbdbde584625cd70900e14c39b8cdbfea919c7b98de245a7c71816b9179eb2ca6c8ba57faa2db69bb3a611d737cb77df145f1ce0cc6f5e6d2dfe4ba4306a80f06e488ef6c98486735f0d531eb2d92f76b249e89634fd0b8930a574ce37d097861d950257b0ec10e2f9299133a6b9bbb64a51f6212638a5740bc54a300b5266261e40f7c2bb87620473da7779333610e6e7592e95a707b0759a2aced805eefe3c73e330d0360ef29a94c3c362c3300e0", 0xb9}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="a3d89dfc33e5488fe763a2215e38953c4995df2c019f6979224e6b9d15f441241963e7ab2c764db7eae1f9aee1b9ac7346b9f6234dda12954cacd67a9b94e3e4ff617c4a73f55b374aaf9ce4f5f390ad637734118f82470b25a9d48931854763b5bcdcbf9a1c90f66907c24382f4143e534dca303efee93db9704d438b90b63a41a2a430ff5dbab0f59b80ca5251cb7c7026b7cff05510c6b2d1ab35c181e7f6874cb093712b10024407c3788b8cd487cf886cbe221eb90249ab8dfd0edace51f34e8061063f138d6127216fd2d166d872eed37fdd92f048a1c419a8ebbfbf6727f47544f9ec20f5", 0xe8}], 0x3, &(0x7f0000000600)=[{0xa8, 0x118, 0x9, "0c5d68c1b5ca13cfbcea04cd3e058db59790a88a2bbd86a7704932a5a338a70a4d8ceb2eea42e85ed278dfeb4b6f3dec54f33e99f2af98741b85d7eea0fe90554e36f6ba17dc72aacf49c9d9bcfbfac7d9c6412e0008c377443234fad7f5713288bed4b170ff55dfa182bf4de32ade345b50d8ab77f07e2abc28c9678dc93397d9dd339e412715877ceeaffc8815e7fb7e62cd95"}, {0xf0, 0x84, 0x4, "428ed8f97935102481ee416a844f825c39f8cb431072928f691b45e344ce904d91dfaae4ddc12f985ff3246bf8e24bf9ee29b498a42ef0744755097caabbae89e17f79bbca0b536c123dde975cbf44ceb73920989857a8a9a197575708cf5de54b76e41ab2ed50ff816ccfb417b8668f1ad8778966e0238f1b394acaab13fcd19fa1ef032b63eed0dde8b9d3d38ae55f8c4a0b03b34d90cf52648a8bef00338816b57f87554d08684181cf8c01de4843ab7ed5ac26d982551080ad2f38f282093730f40dc721dd29080fe72cd50c98d329567a17a53853915d8e74ddcb54"}, {0x20, 0x224, 0x6c96, "ce34ef3469f3ac62c1"}, {0x78, 0x115, 0x6, "132200fb5237ea104328d1f419747eeecefc8493ecbc40d768b9461bc1ee63a99900aa4fe8ad6fa14de583731a540763bf45ac7b37ec12f152147c3300d70c44bd4c5fde883f392ab1668b1dbf64085b08837614be0c49e74b6a02de6a227f4ede5580"}, {0xa0, 0x112, 0x2, "0e4157849f2525b2399179d3126e219ef5089cbdfa935ed8deb47c6453855da2af4f9245c25d643c1f3b53a5776638ba1124f2b2e475788103d5756c2f30ebd4a6c8cf5e85a1d4d7b7db3e6edba49624cc6ab2fc77f70fbecec19c97f2df63d079591ad179443fde76e26546907b3bef300653c916c36afb8071dc6d66d5b08921f844d0e22bde8f44e0db"}, {0x88, 0xff, 0xffffffb5, "3c875043af82306499a4d55dea18712ddbf6bec1b32827d3baf63e3bb12762c8470c1983dfa9c5467d162c1027cadee7c28aa33f8f0d98fb9743b760475b9377b64fe086c4cd5af17febccc86e2ba16d6138b35fc18a0d0c00ce8dab8ae0b00d8a505959defa6cfab006c41c6fa211cf015b64"}], 0x358}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="6af5", 0x2}], 0x2, &(0x7f0000001a00)=[{0xa0, 0x29, 0x1000, "c2a266c9a26b07db193923a6e6addd0f9e5678ca613f1d6e54f3f2fa79f7d0f5374708565017f1ee364b20cfdd2e96ce986767cae1b63aba55f9f76efa8ad22230fcde99a072d1830b69369ad940c7d214522fa4c6cd45df350ce1fc86bf76997d3e151d900b245f64da6f62e76ee13fe130bc72e4458fd046efedb0c5f9fa50d6218202f646a5f2ce6ad4e1cd"}, {0x40, 0x114, 0x400, "3040e4c62e796d3d55a3822ada2f36f8fd25d485f4ffc385671b95a737f12cf37e6ca3a4e26d80cd1c409b7061fc"}], 0xe0}}, {{&(0x7f0000001b00)=@can={0x1d, r2}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)="7388eb9f407dac44a27ceba2e6a24b3576bf2ac993743d4b56a08db0a1c89b93c4", 0x21}, {&(0x7f0000001bc0)="0967775865af2f450aafc46e8b2a6627660ea0c8ba6692db3bcfea2949215451d8f5d3c7652b4899219c8edb5bd646a60e3d5534248c4bf2fc9acc77af9b099366081d2db209ddf7c40ea42a81d9e60a75016c55bcbcc4b722510f3b7652563d599cdb1725564d6126aa17b439a3bfd1833a74936918bbfe49c8df08bfe7d9a305e6dd3cf3b289ee0935d4ee9b9f97aaa97279ccbef58e24b7b6355e5d9afd", 0x9f}], 0x2, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x78}}], 0x3, 0x8001) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000002040)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="f8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f8}}, 0x0) mmap(&(0x7f0000162000/0x3000)=nil, 0x3000, 0xb635773f04ebbee2, 0x8071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000080)=0x2, 0xa, 0x3) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000000)={0x3, @null, r9}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1_to_team\x00', 0x4010}) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f00000002c0)={'trans=unix,', {[{@cache_none}, {@cache_none}, {@aname={'aname', 0x3d, 'veth1_to_team\x00'}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_gt={'fowner>', r9}}]}}) 2.996250981s ago: executing program 1 (id=504): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000400040000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.996008114s ago: executing program 5 (id=505): socket(0x8, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000500000000080004002d000000", 0x24) 2.862710226s ago: executing program 3 (id=506): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x12, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0xb, @pix_mp={0x8, 0x7, 0x6a6d7557, 0x3, 0xa, [{0x0, 0x9}, {0xccbd, 0x7fffffff}, {0x80000001, 0x1}, {0xd, 0x10001}, {0x6, 0x2}, {0x1, 0x9}, {0xffffffff, 0x7d}, {0x1ff, 0xffffffff}], 0x1, 0x8, 0x3, 0x1, 0x2}}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x8}) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380), 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb4}}, 0x48001) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f00000002c0)=0xc) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.787197402s ago: executing program 0 (id=507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 510.274067ms ago: executing program 0 (id=508): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000030058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 386.763325ms ago: executing program 4 (id=509): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r6 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r6, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r9) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x3, 0x1, {0xa, 0x4e1f, 0x9, @private2, 0x9a}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) fsmount(r9, 0x0, 0xfb) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc0000000fff00008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 11.051883ms ago: executing program 4 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "e0f493"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 0s ago: executing program 0 (id=511): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) shutdown(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_setup(0x2dc2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000480)={@private2, 0x3e, r8}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000280)={@local, 0x65, r8}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000f79effff85000000130000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r11, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="6d9202000116f0dcaf4268bc051b416f58cb0646819cbb7328252c787b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r9, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1be1394bc9f4c757"], &(0x7f0000000080)='syzkaller\x00', 0x401, 0xaa, &(0x7f0000000200)=""/170, 0x40f00, 0x20, '\x00', r8, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x9, 0xffffff46, 0x7f}, 0x10, r12, r13, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) sendmsg$sock(r6, 0x0, 0x0) syz_clone(0xa0c00, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 358.868145][ T6065] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 358.887943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 359.228268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 359.283001][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 359.399709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 359.880177][ T6075] Zero length message leads to an empty skb [ 359.911357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 360.015089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 360.019927][ T6079] syz.4.23: attempt to access beyond end of device [ 360.019927][ T6079] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 360.024640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 360.036640][ T6079] efs: cannot read volume header [ 363.553359][ T6114] Bluetooth: MGMT ver 1.23 [ 365.642152][ T6150] loop6: detected capacity change from 0 to 524287999 [ 365.654716][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.674020][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.691779][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.706451][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.718792][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.729269][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.740054][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.751879][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.761033][ T6150] ldm_validate_partition_table(): Disk read failed. [ 365.768656][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.777611][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.788909][ T6150] Dev loop6: unable to read RDB block 0 [ 365.802114][ T6150] loop6: unable to read partition table [ 365.810332][ T6150] loop_reread_partitions: partition scan of loop6 (3 xCU) failed (rc=-5) [ 366.192033][ T6155] syzkaller0: entered promiscuous mode [ 366.209552][ T6155] syzkaller0: entered allmulticast mode [ 366.650009][ T6168] netlink: 48 bytes leftover after parsing attributes in process `syz.1.47'. [ 368.136948][ T6168] netlink: 'syz.1.47': attribute type 2 has an invalid length. [ 368.452212][ T6194] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 369.150623][ T6197] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 369.172419][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.4.53 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 369.172450][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.172470][ T6197] Call Trace: [ 369.172482][ T6197] [ 369.172492][ T6197] dump_stack_lvl+0x189/0x250 [ 369.172540][ T6197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.172566][ T6197] ? __pfx__printk+0x10/0x10 [ 369.172594][ T6197] ? kernfs_path_from_node+0x2c/0x260 [ 369.172620][ T6197] ? kernfs_path_from_node+0x2c/0x260 [ 369.172645][ T6197] ? kernfs_path_from_node+0x2c/0x260 [ 369.172673][ T6197] ? kernfs_path_from_node+0x22c/0x260 [ 369.172699][ T6197] ? kernfs_path_from_node+0x2c/0x260 [ 369.172731][ T6197] sysfs_warn_dup+0x8e/0xa0 [ 369.172757][ T6197] sysfs_do_create_link_sd+0xc0/0x110 [ 369.172785][ T6197] device_add_class_symlinks+0x1cf/0x240 [ 369.172836][ T6197] device_add+0x475/0xb50 [ 369.172870][ T6197] wiphy_register+0x199a/0x26b0 [ 369.172917][ T6197] ? __pfx_wiphy_register+0x10/0x10 [ 369.172947][ T6197] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 369.172988][ T6197] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 369.173027][ T6197] ieee80211_register_hw+0x33e1/0x4120 [ 369.173082][ T6197] ? ieee80211_register_hw+0x1471/0x4120 [ 369.173126][ T6197] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 369.173164][ T6197] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.173217][ T6197] ? __hrtimer_setup+0x187/0x210 [ 369.173239][ T6197] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 369.173276][ T6197] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 369.173339][ T6197] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 369.173367][ T6197] ? trace_kmalloc+0x1f/0xd0 [ 369.173384][ T6197] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 369.173405][ T6197] ? kstrndup+0xbf/0x160 [ 369.173446][ T6197] hwsim_new_radio_nl+0xea4/0x1b10 [ 369.173480][ T6197] ? __pfx___nla_validate_parse+0x10/0x10 [ 369.173525][ T6197] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.173573][ T6197] ? __nla_parse+0x40/0x60 [ 369.173604][ T6197] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 369.173641][ T6197] genl_family_rcv_msg_doit+0x215/0x300 [ 369.173674][ T6197] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.173697][ T6197] ? irqentry_exit+0x74/0x90 [ 369.173737][ T6197] ? genl_rcv_msg+0x5eb/0x790 [ 369.173768][ T6197] genl_rcv_msg+0x60e/0x790 [ 369.173800][ T6197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.173822][ T6197] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.173855][ T6197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.173876][ T6197] ? netlink_rcv_skb+0x1e0/0x470 [ 369.173908][ T6197] ? genl_rcv_msg+0xc/0x790 [ 369.173934][ T6197] netlink_rcv_skb+0x205/0x470 [ 369.173966][ T6197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.173989][ T6197] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.174016][ T6197] ? lock_acquire+0x175/0x360 [ 369.174054][ T6197] ? down_read+0x1ad/0x2e0 [ 369.174084][ T6197] genl_rcv+0x28/0x40 [ 369.174106][ T6197] netlink_unicast+0x75c/0x8e0 [ 369.174153][ T6197] netlink_sendmsg+0x805/0xb30 [ 369.174204][ T6197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.174249][ T6197] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.174272][ T6197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.174307][ T6197] __sock_sendmsg+0x21c/0x270 [ 369.174338][ T6197] ____sys_sendmsg+0x505/0x830 [ 369.174380][ T6197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.174413][ T6197] ? __copy_msghdr+0x231/0x5b0 [ 369.174448][ T6197] ? __asan_memset+0x26/0x50 [ 369.174483][ T6197] ? import_iovec+0x74/0xa0 [ 369.174518][ T6197] ___sys_sendmsg+0x21f/0x2a0 [ 369.174554][ T6197] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.174609][ T6197] ? __fget_files+0x2a/0x420 [ 369.174627][ T6197] ? __fget_files+0x3a0/0x420 [ 369.174653][ T6197] __x64_sys_sendmsg+0x19b/0x260 [ 369.174681][ T6197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.174714][ T6197] ? rcu_is_watching+0x15/0xb0 [ 369.174736][ T6197] ? do_syscall_64+0xbe/0x3b0 [ 369.174757][ T6197] do_syscall_64+0xfa/0x3b0 [ 369.174775][ T6197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.174790][ T6197] ? asm_sysvec_call_function_single+0x1a/0x20 [ 369.174806][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 369.174825][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.174840][ T6197] RIP: 0033:0x7fa39038ebe9 [ 369.174865][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.174878][ T6197] RSP: 002b:00007fa39129b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.174904][ T6197] RAX: ffffffffffffffda RBX: 00007fa3905b6090 RCX: 00007fa39038ebe9 [ 369.174919][ T6197] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 369.174932][ T6197] RBP: 00007fa390411e19 R08: 0000000000000000 R09: 0000000000000000 [ 369.174945][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.174957][ T6197] R13: 00007fa3905b6128 R14: 00007fa3905b6090 R15: 00007ffd08ce0f98 [ 369.174992][ T6197] [ 370.294071][ T6211] trusted_key: syz.0.55 sent an empty control message without MSG_MORE. [ 371.650444][ T6222] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 373.301197][ T6240] Cannot find add_set index 0 as target [ 374.288957][ T6245] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 374.342898][ T6245] CPU: 1 UID: 0 PID: 6245 Comm: syz.3.68 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 374.342931][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.342943][ T6245] Call Trace: [ 374.342949][ T6245] [ 374.342956][ T6245] dump_stack_lvl+0x189/0x250 [ 374.342981][ T6245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.343000][ T6245] ? __pfx__printk+0x10/0x10 [ 374.343022][ T6245] ? kernfs_path_from_node+0x2c/0x260 [ 374.343041][ T6245] ? kernfs_path_from_node+0x2c/0x260 [ 374.343059][ T6245] ? kernfs_path_from_node+0x2c/0x260 [ 374.343079][ T6245] ? kernfs_path_from_node+0x22c/0x260 [ 374.343096][ T6245] ? kernfs_path_from_node+0x2c/0x260 [ 374.343117][ T6245] sysfs_warn_dup+0x8e/0xa0 [ 374.343135][ T6245] sysfs_do_create_link_sd+0xc0/0x110 [ 374.343156][ T6245] device_add_class_symlinks+0x1cf/0x240 [ 374.343184][ T6245] device_add+0x475/0xb50 [ 374.343211][ T6245] wiphy_register+0x199a/0x26b0 [ 374.343232][ T6245] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 374.343260][ T6245] ? __pfx_wiphy_register+0x10/0x10 [ 374.343293][ T6245] ieee80211_register_hw+0x33e1/0x4120 [ 374.343332][ T6245] ? ieee80211_register_hw+0x1471/0x4120 [ 374.343363][ T6245] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 374.343391][ T6245] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.343423][ T6245] ? __hrtimer_setup+0x187/0x210 [ 374.343439][ T6245] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 374.343467][ T6245] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 374.343517][ T6245] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 374.343539][ T6245] ? trace_kmalloc+0x1f/0xd0 [ 374.343552][ T6245] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 374.343568][ T6245] ? kstrndup+0xbf/0x160 [ 374.343596][ T6245] hwsim_new_radio_nl+0xea4/0x1b10 [ 374.343624][ T6245] ? __pfx___nla_validate_parse+0x10/0x10 [ 374.343655][ T6245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 374.343688][ T6245] ? __nla_parse+0x40/0x60 [ 374.343710][ T6245] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 374.343744][ T6245] genl_family_rcv_msg_doit+0x215/0x300 [ 374.343768][ T6245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 374.343794][ T6245] ? security_capable+0x80/0x2e0 [ 374.343816][ T6245] ? security_capable+0x7e/0x2e0 [ 374.343842][ T6245] genl_rcv_msg+0x60e/0x790 [ 374.343864][ T6245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.343880][ T6245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 374.343914][ T6245] netlink_rcv_skb+0x205/0x470 [ 374.343937][ T6245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.343955][ T6245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.343991][ T6245] ? down_read+0x1ad/0x2e0 [ 374.344012][ T6245] genl_rcv+0x28/0x40 [ 374.344027][ T6245] netlink_unicast+0x75c/0x8e0 [ 374.344056][ T6245] netlink_sendmsg+0x805/0xb30 [ 374.344086][ T6245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.344116][ T6245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.344132][ T6245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.344156][ T6245] __sock_sendmsg+0x21c/0x270 [ 374.344177][ T6245] ____sys_sendmsg+0x505/0x830 [ 374.344207][ T6245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.344239][ T6245] ? import_iovec+0x74/0xa0 [ 374.344264][ T6245] ___sys_sendmsg+0x21f/0x2a0 [ 374.344291][ T6245] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.344345][ T6245] ? __fget_files+0x2a/0x420 [ 374.344362][ T6245] ? __fget_files+0x3a0/0x420 [ 374.344388][ T6245] __x64_sys_sendmsg+0x19b/0x260 [ 374.344411][ T6245] ? schedule+0x165/0x360 [ 374.344427][ T6245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.344467][ T6245] ? do_syscall_64+0xbe/0x3b0 [ 374.344488][ T6245] do_syscall_64+0xfa/0x3b0 [ 374.344507][ T6245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.344522][ T6245] ? asm_sysvec_call_function_single+0x1a/0x20 [ 374.344537][ T6245] ? clear_bhb_loop+0x60/0xb0 [ 374.344556][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.344571][ T6245] RIP: 0033:0x7f160158ebe9 [ 374.344586][ T6245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.344599][ T6245] RSP: 002b:00007f1602355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.344616][ T6245] RAX: ffffffffffffffda RBX: 00007f16017b6090 RCX: 00007f160158ebe9 [ 374.344627][ T6245] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 374.344637][ T6245] RBP: 00007f1601611e19 R08: 0000000000000000 R09: 0000000000000000 [ 374.344647][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.344656][ T6245] R13: 00007f16017b6128 R14: 00007f16017b6090 R15: 00007ffecb8fa0b8 [ 374.344681][ T6245] [ 374.667740][ T6251] syz.4.66: attempt to access beyond end of device [ 374.667740][ T6251] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 374.862415][ T6251] efs: cannot read volume header [ 378.122743][ T6281] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 380.605380][ T6293] syz.0.75: attempt to access beyond end of device [ 380.605380][ T6293] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 381.283684][ T6310] loop8: detected capacity change from 0 to 7 [ 381.814776][ T6309] vivid-003: kernel_thread() failed [ 381.874018][ T6310] Dev loop8: unable to read RDB block 7 [ 381.882237][ T6310] loop8: AHDI p1 p2 p3 [ 381.886523][ T6310] loop8: partition table partially beyond EOD, truncated [ 381.893824][ T6310] loop8: p1 start 1601398130 is beyond EOD, truncated [ 381.900806][ T6310] loop8: p2 start 1702059890 is beyond EOD, truncated [ 382.360275][ T6315] syz.4.78 uses obsolete (PF_INET,SOCK_PACKET) [ 382.440047][ T6316] syz.3.80: attempt to access beyond end of device [ 382.440047][ T6316] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 382.460657][ T6316] efs: cannot read volume header [ 382.636849][ T6320] netlink: 'syz.4.78': attribute type 4 has an invalid length. [ 382.833102][ T6327] netlink: 'syz.4.78': attribute type 4 has an invalid length. [ 383.257279][ T6054] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 383.294755][ T6334] o2cb: This node has not been configured. [ 383.300929][ T6334] o2cb: Cluster check failed. Fix errors before retrying. [ 383.308220][ T6334] (syz.3.84,6334,1):user_dlm_register:674 ERROR: status = -22 [ 383.315731][ T6334] (syz.3.84,6334,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 383.506763][ T6341] loop8: detected capacity change from 0 to 7 [ 383.604913][ T6341] Dev loop8: unable to read RDB block 7 [ 383.610790][ T6341] loop8: AHDI p1 p2 p3 [ 383.615238][ T6341] loop8: partition table partially beyond EOD, truncated [ 383.623970][ T6341] loop8: p1 start 1601398130 is beyond EOD, truncated [ 383.631137][ T6341] loop8: p2 start 1702059890 is beyond EOD, truncated [ 383.985949][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.002143][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.011439][ T6054] usb 2-1: Using ep0 maxpacket: 16 [ 384.121488][ T6054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.150908][ T6054] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 384.167190][ T6054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.264910][ T6054] usb 2-1: config 0 descriptor?? [ 384.736778][ T6054] usbhid 2-1:0.0: can't add hid device: -71 [ 384.767923][ T6054] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 384.835262][ T6054] usb 2-1: USB disconnect, device number 2 [ 385.661709][ T6361] xt_hashlimit: max too large, truncated to 1048576 [ 385.706414][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.723832][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.733304][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.745606][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.754672][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.268688][ T6377] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.622111][ T6253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.967664][ T5946] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 387.052350][ T6390] syz.1.92: attempt to access beyond end of device [ 387.052350][ T6390] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 387.210700][ T6393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 387.309389][ T6393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 387.427917][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.447861][ T5946] usb 4-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 387.482302][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.509079][ T5946] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 387.533315][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.536627][ T6253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.620124][ T5946] usb 4-1: config 0 descriptor?? [ 387.739531][ T2152] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 387.774903][ T6253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.808523][ T5895] Bluetooth: hci0: command tx timeout [ 388.016498][ T6369] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 388.211471][ T2152] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 388.247077][ T2152] usb 1-1: config 0 has no interface number 0 [ 389.156825][ T5946] usb 4-1: string descriptor 0 read error: -71 [ 389.319649][ T2152] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.335013][ T2152] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 389.345129][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 389.353593][ T2152] usb 1-1: Product: syz [ 389.358269][ T2152] usb 1-1: SerialNumber: syz [ 389.366747][ T2152] usb 1-1: config 0 descriptor?? [ 389.371926][ T5946] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 389.381177][ T2152] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input7 [ 389.509231][ T5193] bcm5974 4-1:0.0: could not read from device [ 389.613292][ T6417] syz.4.94: attempt to access beyond end of device [ 389.613292][ T6417] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 389.626503][ T6417] efs: cannot read volume header [ 389.684669][ T6253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.769510][ T5193] bcm5974 4-1:0.0: could not read from device [ 389.826778][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.835400][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.840227][ T5193] bcm5974 4-1:0.0: could not read from device [ 389.842589][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.857658][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.865326][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.872189][ T5946] usb 4-1: USB disconnect, device number 2 [ 389.872576][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.885642][ T2152] usb 1-1: USB disconnect, device number 2 [ 389.891668][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 389.891689][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 389.908200][ T5895] Bluetooth: hci0: command tx timeout [ 390.024759][ T2152] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 390.152001][ T6067] udevd[6067]: Error opening device "/dev/input/event5": No such device [ 390.166535][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.97'. [ 390.183195][ T6067] udevd[6067]: Unable to EVIOCGABS device "/dev/input/event5" [ 390.207968][ T6067] udevd[6067]: Unable to EVIOCGABS device "/dev/input/event5" [ 390.236087][ T6067] udevd[6067]: Unable to EVIOCGABS device "/dev/input/event5" [ 390.446673][ T6067] udevd[6067]: Unable to EVIOCGABS device "/dev/input/event5" [ 391.248074][ T6434] comedi comedi3: comedi_config --init_data is deprecated [ 392.001781][ T5895] Bluetooth: hci0: command tx timeout [ 392.729971][ T6449] netlink: 92 bytes leftover after parsing attributes in process `syz.1.101'. [ 393.279039][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 393.577889][ T2152] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 393.797616][ T5915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 394.037788][ T5895] Bluetooth: hci0: command tx timeout [ 394.229462][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 394.302526][ T5915] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 395.829996][ T5915] usb 1-1: config 0 has no interface number 0 [ 398.082753][ T6470] syz.3.108: attempt to access beyond end of device [ 398.082753][ T6470] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 398.151348][ T6470] efs: cannot read volume header [ 398.211747][ T5915] usb 1-1: string descriptor 0 read error: -71 [ 398.228506][ T5915] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 398.240277][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.284309][ T5915] usb 1-1: config 0 descriptor?? [ 398.291403][ T5915] usb 1-1: can't set config #0, error -71 [ 398.301194][ T5915] usb 1-1: USB disconnect, device number 3 [ 398.572876][ T6253] bridge_slave_1: left allmulticast mode [ 398.580114][ T6253] bridge_slave_1: left promiscuous mode [ 398.587860][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.226979][ T2152] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 399.247772][ T2152] usb 5-1: chopping to 0 config(s) [ 399.258132][ T2152] usb 5-1: can't read configurations, error -32 [ 399.405799][ T6253] bridge_slave_0: left allmulticast mode [ 399.429037][ T6253] bridge_slave_0: left promiscuous mode [ 399.435321][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.438742][ T2152] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 401.587025][ T6500] o2cb: This node has not been configured. [ 401.597774][ T6500] o2cb: Cluster check failed. Fix errors before retrying. [ 401.607047][ T6500] (syz.1.115,6500,0):user_dlm_register:674 ERROR: status = -22 [ 401.615226][ T6500] (syz.1.115,6500,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 403.150933][ T6525] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.491548][ T6519] o2cb: This node has not been configured. [ 403.497682][ T6519] o2cb: Cluster check failed. Fix errors before retrying. [ 403.507565][ T6519] (syz.1.119,6519,0):user_dlm_register:674 ERROR: status = -22 [ 403.517735][ T6519] (syz.1.119,6519,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 404.004761][ T6533] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 405.891473][ T6253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.933556][ T6253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.949426][ T6253] bond0 (unregistering): Released all slaves [ 408.167676][ T6562] o2cb: This node has not been configured. [ 408.173770][ T6562] o2cb: Cluster check failed. Fix errors before retrying. [ 408.184187][ T6562] (syz.0.128,6562,0):user_dlm_register:674 ERROR: status = -22 [ 408.192401][ T6562] (syz.0.128,6562,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 408.643646][ T6565] comedi comedi3: comedi_config --init_data is deprecated [ 409.877708][ T6574] loop6: detected capacity change from 0 to 524287999 [ 409.899075][ T6574] buffer_io_error: 7 callbacks suppressed [ 409.899110][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.927696][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.936711][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.968754][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 410.002132][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 410.032244][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 410.041135][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 410.070216][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.091689][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 410.102300][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.115405][ T6362] bridge_slave_0: entered allmulticast mode [ 410.123476][ T6574] ldm_validate_partition_table(): Disk read failed. [ 410.132901][ T6362] bridge_slave_0: entered promiscuous mode [ 410.147952][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 410.163551][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.171749][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.183707][ T6574] Buffer I/O error on dev loop6, logical block 0, async page read [ 410.197869][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 410.208088][ T6362] bridge_slave_1: entered allmulticast mode [ 410.221148][ T6362] bridge_slave_1: entered promiscuous mode [ 410.227393][ T6574] Dev loop6: unable to read RDB block 0 [ 410.264584][ T6574] loop6: unable to read partition table [ 410.279672][ T6574] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 410.352703][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.364823][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.450829][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.462702][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.485743][ T9] usb 4-1: SerialNumber: syz [ 410.546535][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.615051][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.723918][ T6253] hsr_slave_0: left promiscuous mode [ 410.755086][ T6253] hsr_slave_1: left promiscuous mode [ 410.779040][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.793488][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.815274][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.832444][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.861656][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.884577][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.900598][ T9] usb 4-1: 0:2 : does not exist [ 411.549505][ T9] usb 4-1: USB disconnect, device number 3 [ 411.612656][ T6253] veth1_macvtap: left promiscuous mode [ 411.646045][ T6253] veth0_macvtap: left promiscuous mode [ 411.674274][ T6253] veth1_vlan: left promiscuous mode [ 411.705642][ T6253] veth0_vlan: left promiscuous mode [ 411.920374][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.277754][ T6609] syz.0.135: attempt to access beyond end of device [ 412.277754][ T6609] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 412.294603][ T6609] efs: cannot read volume header [ 412.458072][ T24] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 412.619364][ T24] usb 4-1: device descriptor read/64, error -71 [ 412.887626][ T24] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 413.145172][ T24] usb 4-1: device descriptor read/64, error -71 [ 413.328380][ T6626] Cannot find add_set index 0 as target [ 413.958019][ T24] usb usb4-port1: attempt power cycle [ 414.617985][ T24] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 414.696550][ T24] usb 4-1: device descriptor read/8, error -71 [ 414.921085][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 414.962137][ T24] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 415.058137][ T24] usb 4-1: device descriptor read/8, error -71 [ 415.181091][ T24] usb usb4-port1: unable to enumerate USB device [ 415.438378][ T6253] team0 (unregistering): Port device team_slave_1 removed [ 415.810412][ T6646] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.143'. [ 416.521501][ T6253] team0 (unregistering): Port device team_slave_0 removed [ 416.591535][ T6651] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.146'. [ 416.616433][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 416.632807][ T6651] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.146'. [ 418.181470][ T6653] syzkaller0: entered promiscuous mode [ 418.190510][ T6653] syzkaller0: entered allmulticast mode [ 421.409061][ T6362] team0: Port device team_slave_0 added [ 421.469078][ T6362] team0: Port device team_slave_1 added [ 421.768399][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.820974][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.886632][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.949115][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.966827][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.088250][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.166847][ T6362] hsr_slave_0: entered promiscuous mode [ 423.254860][ T6362] hsr_slave_1: entered promiscuous mode [ 423.288756][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.338253][ T6362] Cannot create hsr debugfs directory [ 423.359299][ T6721] tipc: Started in network mode [ 423.364476][ T6721] tipc: Node identity ac141413, cluster identity 4711 [ 423.372340][ T6721] tipc: New replicast peer: 10.1.1.2 [ 423.378229][ T6721] tipc: Enabled bearer , priority 10 [ 423.841666][ T6731] o2cb: This node has not been configured. [ 423.848137][ T6731] o2cb: Cluster check failed. Fix errors before retrying. [ 423.858460][ T6731] (syz.0.161,6731,0):user_dlm_register:674 ERROR: status = -22 [ 423.866414][ T6731] (syz.0.161,6731,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 424.570060][ T5915] tipc: Node number set to 2886997011 [ 426.554231][ T6362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.623673][ T6362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.687466][ T6362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.825402][ T6362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.877600][ T5946] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 427.068863][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 427.094693][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.283097][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.328762][ T6777] netlink: 'syz.3.171': attribute type 11 has an invalid length. [ 427.337019][ T6777] netlink: 'syz.3.171': attribute type 11 has an invalid length. [ 427.345289][ T6777] netlink: 220 bytes leftover after parsing attributes in process `syz.3.171'. [ 427.633915][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.764781][ T5946] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 427.809253][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.829283][ T5946] usb 1-1: config 0 descriptor?? [ 427.841716][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.888110][ T5862] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 427.935442][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.216227][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.223501][ T6515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.463719][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.471676][ T6515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.561137][ T5946] hid-multitouch 0003:0457:07DA.0001: unknown main item tag 0x0 [ 428.715618][ T5946] hid-multitouch 0003:0457:07DA.0001: unknown main item tag 0x0 [ 428.851104][ T6789] vlan0: entered promiscuous mode [ 428.857170][ T5946] hid-multitouch 0003:0457:07DA.0001: unknown main item tag 0x0 [ 428.901338][ T5946] hid-multitouch 0003:0457:07DA.0001: unknown main item tag 0x0 [ 428.953362][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 428.960814][ T5862] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.965869][ T5946] hid-multitouch 0003:0457:07DA.0001: unknown main item tag 0x0 [ 428.971863][ T5862] usb 2-1: config 0 has no interface number 0 [ 429.020845][ T5862] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 429.030095][ T5946] hid-multitouch 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 429.065217][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.103113][ T5946] usb 1-1: USB disconnect, device number 4 [ 429.105560][ T5862] usb 2-1: Product: syz [ 429.130154][ T5862] usb 2-1: Manufacturer: syz [ 429.148736][ T5862] usb 2-1: SerialNumber: syz [ 429.200358][ T5862] usb 2-1: config 0 descriptor?? [ 429.226902][ T5862] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 429.263221][ T5862] usb 2-1: selecting invalid altsetting 1 [ 429.295876][ T5862] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 429.330302][ T5862] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 429.353054][ T6794] fido_id[6794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 429.388861][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 429.397179][ T5862] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 429.437113][ T5862] usb 2-1: media controller created [ 429.551858][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 429.577646][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 429.604527][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 429.657725][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 429.666508][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 429.734090][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.771294][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.799226][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.819473][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.875545][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 429.926853][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.045931][ T9] usb 4-1: config 0 descriptor?? [ 430.618536][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 430.745546][ T9] usb 4-1: USB disconnect, device number 8 [ 430.831444][ T5862] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 430.841558][ T9] usblp0: removed [ 430.848318][ T5862] zl10353_read_register: readreg error (reg=127, ret==-110) [ 431.092087][ T5862] usb 2-1: USB disconnect, device number 3 [ 431.227614][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 431.514382][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 431.817428][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 431.842825][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 431.880965][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 431.890923][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.916409][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 431.947200][ T6811] mkiss: ax0: crc mode is auto. [ 431.973813][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 432.031916][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 432.073649][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.137687][ T9] usb 4-1: config 0 descriptor?? [ 432.196487][ T9] usb 4-1: can't set config #0, error -71 [ 432.215575][ T6814] slcan: can't register candev [ 432.238129][ T6814] Falling back ldisc for ttyS3. [ 432.358719][ T9] usb 4-1: USB disconnect, device number 9 [ 432.846928][ T6847] syz.3.183: attempt to access beyond end of device [ 432.846928][ T6847] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 433.042664][ T6847] efs: cannot read volume header [ 433.473447][ T6849] Cannot find add_set index 0 as target [ 433.485801][ T6362] veth0_vlan: entered promiscuous mode [ 433.616332][ T6850] netlink: 'syz.0.182': attribute type 11 has an invalid length. [ 433.624530][ T6850] netlink: 'syz.0.182': attribute type 11 has an invalid length. [ 433.633052][ T6850] netlink: 220 bytes leftover after parsing attributes in process `syz.0.182'. [ 434.138242][ T6362] veth1_vlan: entered promiscuous mode [ 434.277297][ T6362] veth0_macvtap: entered promiscuous mode [ 434.429674][ T6362] veth1_macvtap: entered promiscuous mode [ 435.148272][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.170388][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.179132][ T5915] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 435.239512][ T6362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.296611][ T6362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.311024][ T6362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.322904][ T6362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.412469][ T6870] syz.0.189: attempt to access beyond end of device [ 435.412469][ T6870] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 435.537411][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 435.558893][ T5915] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 435.569771][ T5915] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 435.583774][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.660952][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.670225][ T5915] usb 5-1: Product: 缏然뤬렫﨟畳㳡蠏ݦ﹃片协ˀ䪐褋圎ܝ䚾㯻鐽복弑㔓饑ቐ봟 宎雿℘㐠厠箊끭䋑㨮圑ᩑ醪廉웹䶪澾ꕼ偗膼䋿ᇪﴝ櫬䖟ഽ궷緈ꩩᨕଂᔅ鲀뷫⍷汈ꈠ娘繇㷇ʲ㪘쩫߆꼛熓驿梿য옋་ꈽ༹꼆‮伬倽췰ㅣ秪袩陸‰樜Ѵᐰʣ똟壻縜꒞વ鮁 [ 435.762957][ T5915] usb 5-1: Manufacturer: 㱏 [ 435.777736][ T5915] usb 5-1: SerialNumber: 㰵 [ 436.719427][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.754613][ T6253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.782883][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.796508][ T6253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.827257][ T6883] netlink: 340 bytes leftover after parsing attributes in process `syz.1.191'. [ 436.884445][ T6887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 436.912174][ T6887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 436.926096][ T6253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.952891][ T6253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.281130][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.369771][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.732927][ T5915] cdc_ncm 5-1:1.0: bind() failure [ 438.760470][ T5915] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 438.780889][ T5915] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 438.825817][ T5915] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 439.947610][ T5915] usb 5-1: USB disconnect, device number 4 [ 440.006945][ T6926] netlink: 'syz.4.198': attribute type 11 has an invalid length. [ 440.015614][ T6926] netlink: 'syz.4.198': attribute type 11 has an invalid length. [ 440.024072][ T6926] netlink: 220 bytes leftover after parsing attributes in process `syz.4.198'. [ 440.485297][ T6931] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 440.497624][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.3.197 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 440.497654][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.497669][ T6931] Call Trace: [ 440.497691][ T6931] [ 440.497703][ T6931] dump_stack_lvl+0x189/0x250 [ 440.497737][ T6931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.497761][ T6931] ? __pfx__printk+0x10/0x10 [ 440.497793][ T6931] ? __rcu_read_unlock+0x84/0xe0 [ 440.497823][ T6931] ? kernfs_path_from_node+0x2c/0x260 [ 440.497862][ T6931] ? kernfs_path_from_node+0x22c/0x260 [ 440.497888][ T6931] ? kernfs_path_from_node+0x2c/0x260 [ 440.497924][ T6931] sysfs_warn_dup+0x8e/0xa0 [ 440.497951][ T6931] sysfs_do_create_link_sd+0xc0/0x110 [ 440.497980][ T6931] device_add_class_symlinks+0x1cf/0x240 [ 440.498021][ T6931] device_add+0x475/0xb50 [ 440.498061][ T6931] wiphy_register+0x199a/0x26b0 [ 440.498110][ T6931] ? __pfx_wiphy_register+0x10/0x10 [ 440.498139][ T6931] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 440.498180][ T6931] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 440.498220][ T6931] ieee80211_register_hw+0x33e1/0x4120 [ 440.498276][ T6931] ? ieee80211_register_hw+0x1471/0x4120 [ 440.498322][ T6931] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 440.498363][ T6931] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 440.498410][ T6931] ? __hrtimer_setup+0x187/0x210 [ 440.498432][ T6931] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 440.498473][ T6931] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 440.498541][ T6931] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 440.498570][ T6931] ? trace_kmalloc+0x1f/0xd0 [ 440.498587][ T6931] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 440.498609][ T6931] ? kstrndup+0xbf/0x160 [ 440.498647][ T6931] hwsim_new_radio_nl+0xea4/0x1b10 [ 440.498712][ T6931] ? __pfx___nla_validate_parse+0x10/0x10 [ 440.498759][ T6931] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 440.498809][ T6931] ? __nla_parse+0x40/0x60 [ 440.498842][ T6931] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 440.498879][ T6931] genl_family_rcv_msg_doit+0x215/0x300 [ 440.498914][ T6931] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 440.498955][ T6931] ? bpf_lsm_capable+0x9/0x20 [ 440.498984][ T6931] ? security_capable+0x7e/0x2e0 [ 440.499021][ T6931] genl_rcv_msg+0x60e/0x790 [ 440.499053][ T6931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.499077][ T6931] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 440.499129][ T6931] netlink_rcv_skb+0x205/0x470 [ 440.499162][ T6931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.499188][ T6931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.499242][ T6931] ? down_read+0x1ad/0x2e0 [ 440.499274][ T6931] genl_rcv+0x28/0x40 [ 440.499294][ T6931] netlink_unicast+0x75c/0x8e0 [ 440.499341][ T6931] netlink_sendmsg+0x805/0xb30 [ 440.499385][ T6931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.499427][ T6931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.499448][ T6931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.499482][ T6931] __sock_sendmsg+0x21c/0x270 [ 440.499513][ T6931] ____sys_sendmsg+0x505/0x830 [ 440.499555][ T6931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.499603][ T6931] ? import_iovec+0x74/0xa0 [ 440.499640][ T6931] ___sys_sendmsg+0x21f/0x2a0 [ 440.499678][ T6931] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.499769][ T6931] ? __fget_files+0x2a/0x420 [ 440.499794][ T6931] ? __fget_files+0x3a0/0x420 [ 440.499834][ T6931] __x64_sys_sendmsg+0x19b/0x260 [ 440.499873][ T6931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.499923][ T6931] ? rcu_is_watching+0x15/0xb0 [ 440.499954][ T6931] ? do_syscall_64+0xbe/0x3b0 [ 440.499985][ T6931] do_syscall_64+0xfa/0x3b0 [ 440.500012][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.500033][ T6931] ? asm_sysvec_call_function_single+0x1a/0x20 [ 440.500055][ T6931] ? clear_bhb_loop+0x60/0xb0 [ 440.500084][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.500105][ T6931] RIP: 0033:0x7f160158ebe9 [ 440.500126][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.500145][ T6931] RSP: 002b:00007f1602355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.500168][ T6931] RAX: ffffffffffffffda RBX: 00007f16017b6090 RCX: 00007f160158ebe9 [ 440.500184][ T6931] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 440.500199][ T6931] RBP: 00007f1601611e19 R08: 0000000000000000 R09: 0000000000000000 [ 440.500212][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.500225][ T6931] R13: 00007f16017b6128 R14: 00007f16017b6090 R15: 00007ffecb8fa0b8 [ 440.500263][ T6931] [ 442.099825][ T6949] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 442.112122][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.3.200 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 442.112152][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.112165][ T6949] Call Trace: [ 442.112174][ T6949] [ 442.112183][ T6949] dump_stack_lvl+0x189/0x250 [ 442.112213][ T6949] ? irqentry_exit+0x74/0x90 [ 442.112239][ T6949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.112285][ T6949] sysfs_warn_dup+0x8e/0xa0 [ 442.112312][ T6949] sysfs_do_create_link_sd+0xc0/0x110 [ 442.112342][ T6949] device_add_class_symlinks+0x1cf/0x240 [ 442.112382][ T6949] device_add+0x475/0xb50 [ 442.112421][ T6949] wiphy_register+0x199a/0x26b0 [ 442.112449][ T6949] ? trace_irq_disable+0x37/0x110 [ 442.112501][ T6949] ? __pfx_wiphy_register+0x10/0x10 [ 442.112559][ T6949] ieee80211_register_hw+0x33e1/0x4120 [ 442.112616][ T6949] ? ieee80211_register_hw+0x1471/0x4120 [ 442.112660][ T6949] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 442.112697][ T6949] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 442.112742][ T6949] ? __hrtimer_setup+0x187/0x210 [ 442.112764][ T6949] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 442.112811][ T6949] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 442.112881][ T6949] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 442.112912][ T6949] ? trace_kmalloc+0x1f/0xd0 [ 442.112931][ T6949] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 442.112954][ T6949] ? kstrndup+0xbf/0x160 [ 442.112995][ T6949] hwsim_new_radio_nl+0xea4/0x1b10 [ 442.113052][ T6949] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 442.113089][ T6949] ? irqentry_exit+0x74/0x90 [ 442.113113][ T6949] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.113146][ T6949] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 442.113191][ T6949] genl_family_rcv_msg_doit+0x215/0x300 [ 442.113224][ T6949] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 442.113265][ T6949] ? bpf_lsm_capable+0x9/0x20 [ 442.113294][ T6949] ? security_capable+0x7e/0x2e0 [ 442.113332][ T6949] genl_rcv_msg+0x60e/0x790 [ 442.113365][ T6949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.113388][ T6949] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 442.113437][ T6949] netlink_rcv_skb+0x205/0x470 [ 442.113470][ T6949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.113497][ T6949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.113560][ T6949] ? down_read+0x1ad/0x2e0 [ 442.113591][ T6949] genl_rcv+0x28/0x40 [ 442.113613][ T6949] netlink_unicast+0x75c/0x8e0 [ 442.113661][ T6949] netlink_sendmsg+0x805/0xb30 [ 442.113706][ T6949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.113751][ T6949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.113773][ T6949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.113807][ T6949] __sock_sendmsg+0x21c/0x270 [ 442.113838][ T6949] ____sys_sendmsg+0x505/0x830 [ 442.113881][ T6949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.113929][ T6949] ? import_iovec+0x74/0xa0 [ 442.113964][ T6949] ___sys_sendmsg+0x21f/0x2a0 [ 442.114003][ T6949] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.114085][ T6949] ? __fget_files+0x2a/0x420 [ 442.114110][ T6949] ? __fget_files+0x3a0/0x420 [ 442.114149][ T6949] __x64_sys_sendmsg+0x19b/0x260 [ 442.114187][ T6949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.114236][ T6949] ? rcu_is_watching+0x15/0xb0 [ 442.114267][ T6949] ? do_syscall_64+0xbe/0x3b0 [ 442.114299][ T6949] do_syscall_64+0xfa/0x3b0 [ 442.114326][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.114347][ T6949] ? asm_sysvec_call_function_single+0x1a/0x20 [ 442.114369][ T6949] ? clear_bhb_loop+0x60/0xb0 [ 442.114397][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.114419][ T6949] RIP: 0033:0x7f160158ebe9 [ 442.114438][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.114457][ T6949] RSP: 002b:00007f1602355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.114481][ T6949] RAX: ffffffffffffffda RBX: 00007f16017b6090 RCX: 00007f160158ebe9 [ 442.114498][ T6949] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 442.114512][ T6949] RBP: 00007f1601611e19 R08: 0000000000000000 R09: 0000000000000000 [ 442.114534][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.114547][ T6949] R13: 00007f16017b6128 R14: 00007f16017b6090 R15: 00007ffecb8fa0b8 [ 442.114584][ T6949] [ 442.721465][ T5999] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 442.997697][ T5880] Bluetooth: hci0: command 0x0405 tx timeout [ 443.048987][ T5999] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 443.058200][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.067579][ T5999] usb 6-1: Product: syz [ 443.071783][ T5999] usb 6-1: Manufacturer: syz [ 443.076480][ T5999] usb 6-1: SerialNumber: syz [ 443.128378][ T5999] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 443.155767][ T6957] binder: BINDER_SET_CONTEXT_MGR already set [ 443.164461][ T6957] binder: 6956:6957 ioctl 4018620d 200000000040 returned -16 [ 444.097985][ T5915] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 444.468822][ T5999] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 444.617638][ T5932] usb 6-1: USB disconnect, device number 2 [ 444.708434][ T5999] usb 4-1: Using ep0 maxpacket: 32 [ 444.819194][ T5999] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 444.828894][ T5999] usb 4-1: config 0 has no interface number 0 [ 444.835064][ T5999] usb 4-1: config 0 interface 6 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.930725][ T5999] usb 4-1: config 0 interface 6 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 444.967989][ T5999] usb 4-1: config 0 interface 6 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 445.008320][ T5999] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 445.047591][ T5999] usb 4-1: config 0 interface 6 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 445.077638][ T5999] usb 4-1: config 0 interface 6 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.207928][ T5999] usb 4-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=48.42 [ 445.250720][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.256440][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.265132][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.519301][ T5915] usb 6-1: Service connection timeout for: 256 [ 445.577063][ T5999] usb 4-1: Product: syz [ 445.719855][ T5915] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 445.737749][ T5999] usb 4-1: Manufacturer: syz [ 445.742422][ T5999] usb 4-1: SerialNumber: syz [ 445.768854][ T5915] ath9k_htc: Failed to initialize the device [ 445.779046][ T5932] usb 6-1: ath9k_htc: USB layer deinitialized [ 445.794414][ T5999] usb 4-1: config 0 descriptor?? [ 445.833008][ T6971] o2cb: This node has not been configured. [ 445.841862][ T6971] o2cb: Cluster check failed. Fix errors before retrying. [ 445.849314][ T6971] (syz.4.205,6971,1):user_dlm_register:674 ERROR: status = -22 [ 445.856874][ T6971] (syz.4.205,6971,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 445.879306][ T6963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 445.909671][ T6963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 446.235730][ T5999] asix 4-1:0.6 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 446.362943][ T6983] syz.5.206: attempt to access beyond end of device [ 446.362943][ T6983] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 446.377655][ T6983] efs: cannot read volume header [ 446.589349][ T5999] asix 4-1:0.6: probe with driver asix failed with error -71 [ 446.627462][ T6984] netlink: 4528 bytes leftover after parsing attributes in process `syz.4.207'. [ 446.637344][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 446.648120][ T6984] netlink: 4528 bytes leftover after parsing attributes in process `syz.4.207'. [ 446.662375][ T5999] usb 4-1: USB disconnect, device number 10 [ 447.243718][ T6999] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.210'. [ 447.253855][ T6999] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.210'. [ 447.757271][ T6994] netlink: 'syz.3.212': attribute type 11 has an invalid length. [ 447.765252][ T6994] netlink: 'syz.3.212': attribute type 11 has an invalid length. [ 447.774604][ T6994] netlink: 220 bytes leftover after parsing attributes in process `syz.3.212'. [ 449.007004][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'. [ 449.017106][ T7014] 9pnet_fd: Insufficient options for proto=fd [ 449.176102][ T7021] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 449.188386][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.1.217 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 449.188414][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.188426][ T7021] Call Trace: [ 449.188434][ T7021] [ 449.188444][ T7021] dump_stack_lvl+0x189/0x250 [ 449.188472][ T7021] ? irqentry_exit+0x74/0x90 [ 449.188499][ T7021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.188536][ T7021] ? dump_stack+0x9/0x20 [ 449.188568][ T7021] sysfs_warn_dup+0x8e/0xa0 [ 449.188596][ T7021] sysfs_do_create_link_sd+0xc0/0x110 [ 449.188628][ T7021] device_add_class_symlinks+0x1cf/0x240 [ 449.188669][ T7021] device_add+0x475/0xb50 [ 449.188708][ T7021] wiphy_register+0x199a/0x26b0 [ 449.188758][ T7021] ? __pfx_wiphy_register+0x10/0x10 [ 449.188787][ T7021] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 449.188827][ T7021] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 449.188867][ T7021] ieee80211_register_hw+0x33e1/0x4120 [ 449.188923][ T7021] ? ieee80211_register_hw+0x1471/0x4120 [ 449.188969][ T7021] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 449.189011][ T7021] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 449.189058][ T7021] ? __hrtimer_setup+0x187/0x210 [ 449.189081][ T7021] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 449.189119][ T7021] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 449.189196][ T7021] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 449.189228][ T7021] ? trace_kmalloc+0x1f/0xd0 [ 449.189248][ T7021] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 449.189271][ T7021] ? kstrndup+0xbf/0x160 [ 449.189312][ T7021] hwsim_new_radio_nl+0xea4/0x1b10 [ 449.189349][ T7021] ? __pfx___nla_validate_parse+0x10/0x10 [ 449.189396][ T7021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 449.189445][ T7021] ? __nla_parse+0x40/0x60 [ 449.189478][ T7021] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 449.189515][ T7021] genl_family_rcv_msg_doit+0x215/0x300 [ 449.189549][ T7021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 449.189591][ T7021] ? bpf_lsm_capable+0x9/0x20 [ 449.189620][ T7021] ? security_capable+0x7e/0x2e0 [ 449.189659][ T7021] genl_rcv_msg+0x60e/0x790 [ 449.189693][ T7021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.189717][ T7021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 449.189768][ T7021] netlink_rcv_skb+0x205/0x470 [ 449.189802][ T7021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.189828][ T7021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.189882][ T7021] ? down_read+0x1ad/0x2e0 [ 449.189913][ T7021] genl_rcv+0x28/0x40 [ 449.189934][ T7021] netlink_unicast+0x75c/0x8e0 [ 449.189977][ T7021] netlink_sendmsg+0x805/0xb30 [ 449.190022][ T7021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.190066][ T7021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.190088][ T7021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.190123][ T7021] __sock_sendmsg+0x21c/0x270 [ 449.190166][ T7021] ____sys_sendmsg+0x505/0x830 [ 449.190210][ T7021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.190257][ T7021] ? import_iovec+0x74/0xa0 [ 449.190294][ T7021] ___sys_sendmsg+0x21f/0x2a0 [ 449.190334][ T7021] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.190416][ T7021] ? __fget_files+0x2a/0x420 [ 449.190441][ T7021] ? __fget_files+0x3a0/0x420 [ 449.190480][ T7021] __x64_sys_sendmsg+0x19b/0x260 [ 449.190520][ T7021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.190570][ T7021] ? rcu_is_watching+0x15/0xb0 [ 449.190601][ T7021] ? do_syscall_64+0xbe/0x3b0 [ 449.190632][ T7021] do_syscall_64+0xfa/0x3b0 [ 449.190658][ T7021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.190678][ T7021] ? asm_sysvec_call_function_single+0x1a/0x20 [ 449.190696][ T7021] ? clear_bhb_loop+0x60/0xb0 [ 449.190716][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.190731][ T7021] RIP: 0033:0x7fa86798ebe9 [ 449.190746][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.190759][ T7021] RSP: 002b:00007fa8687e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.190776][ T7021] RAX: ffffffffffffffda RBX: 00007fa867bb6090 RCX: 00007fa86798ebe9 [ 449.190787][ T7021] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 449.190797][ T7021] RBP: 00007fa867a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 449.190807][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.190816][ T7021] R13: 00007fa867bb6128 R14: 00007fa867bb6090 R15: 00007ffeecccb6a8 [ 449.190841][ T7021] [ 450.824660][ T7038] syz.4.220: attempt to access beyond end of device [ 450.824660][ T7038] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 450.847169][ T7038] efs: cannot read volume header [ 451.946545][ T7050] trusted_key: encrypted_key: insufficient parameters specified [ 451.958610][ T7050] mmap: syz.5.222 (7050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 452.467857][ T7059] netlink: 5844 bytes leftover after parsing attributes in process `syz.0.225'. [ 452.477599][ T7059] netlink: 5844 bytes leftover after parsing attributes in process `syz.0.225'. [ 453.092173][ T5999] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 453.208086][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 453.398990][ T5999] usb 4-1: Using ep0 maxpacket: 8 [ 453.658034][ T5999] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 453.667368][ T5999] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 453.782546][ T7067] loop6: detected capacity change from 0 to 524287999 [ 453.793825][ T7067] buffer_io_error: 7 callbacks suppressed [ 453.793843][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.809789][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.829344][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.838971][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.847691][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.856222][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.876845][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.891962][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.904639][ T7067] ldm_validate_partition_table(): Disk read failed. [ 453.920397][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.934554][ T7067] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.944414][ T7067] Dev loop6: unable to read RDB block 0 [ 453.953806][ T7067] loop6: unable to read partition table [ 453.962517][ T7067] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 454.208495][ T5999] usb 4-1: Product: syz [ 454.331146][ T5999] usb 4-1: Manufacturer: syz [ 454.488226][ T5999] usb 4-1: SerialNumber: syz [ 454.496585][ T5999] usb 4-1: config 0 descriptor?? [ 454.578802][ T5999] usb 4-1: can't set config #0, error -71 [ 454.736598][ T5999] usb 4-1: USB disconnect, device number 11 [ 455.845040][ T7079] netlink: 'syz.0.230': attribute type 11 has an invalid length. [ 455.853568][ T7079] netlink: 'syz.0.230': attribute type 11 has an invalid length. [ 455.863211][ T7079] netlink: 220 bytes leftover after parsing attributes in process `syz.0.230'. [ 456.154153][ T7092] process 'syz.3.232' launched './file0' with NULL argv: empty string added [ 456.413088][ T7096] IPv6: NLM_F_CREATE should be specified when creating new route [ 457.280661][ T7110] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.238'. [ 457.290401][ T7110] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.238'. [ 458.356243][ T7114] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.239'. [ 458.407640][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 458.461345][ T7114] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.239'. [ 459.476299][ T7130] Cannot find add_set index 0 as target [ 459.758410][ T7131] ======================================================= [ 459.758410][ T7131] WARNING: The mand mount option has been deprecated and [ 459.758410][ T7131] and is ignored by this kernel. Remove the mand [ 459.758410][ T7131] option from the mount to silence this warning. [ 459.758410][ T7131] ======================================================= [ 459.912709][ T7134] FAULT_INJECTION: forcing a failure. [ 459.912709][ T7134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 459.943369][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.5.244 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 459.943399][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.943412][ T7134] Call Trace: [ 459.943421][ T7134] [ 459.943429][ T7134] dump_stack_lvl+0x189/0x250 [ 459.943459][ T7134] ? __pfx____ratelimit+0x10/0x10 [ 459.943482][ T7134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.943507][ T7134] ? __pfx__printk+0x10/0x10 [ 459.943548][ T7134] should_fail_ex+0x414/0x560 [ 459.943578][ T7134] _copy_to_user+0x31/0xb0 [ 459.943612][ T7134] simple_read_from_buffer+0xe1/0x170 [ 459.943649][ T7134] proc_fail_nth_read+0x1df/0x250 [ 459.943681][ T7134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.943711][ T7134] ? rw_verify_area+0x258/0x650 [ 459.943745][ T7134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.943773][ T7134] vfs_read+0x200/0x980 [ 459.943813][ T7134] ? __pfx___mutex_lock+0x10/0x10 [ 459.943838][ T7134] ? __pfx_vfs_read+0x10/0x10 [ 459.943874][ T7134] ? __fget_files+0x2a/0x420 [ 459.943903][ T7134] ? __fget_files+0x3a0/0x420 [ 459.943926][ T7134] ? __fget_files+0x2a/0x420 [ 459.943969][ T7134] ksys_read+0x145/0x250 [ 459.943993][ T7134] ? __pfx_ksys_read+0x10/0x10 [ 459.944010][ T7134] ? rcu_is_watching+0x15/0xb0 [ 459.944041][ T7134] ? do_syscall_64+0xbe/0x3b0 [ 459.944071][ T7134] do_syscall_64+0xfa/0x3b0 [ 459.944094][ T7134] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.944117][ T7134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.944139][ T7134] ? clear_bhb_loop+0x60/0xb0 [ 459.944166][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.944188][ T7134] RIP: 0033:0x7f052918d5fc [ 459.944208][ T7134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 459.944227][ T7134] RSP: 002b:00007f052a08b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.944250][ T7134] RAX: ffffffffffffffda RBX: 00007f05293b5fa0 RCX: 00007f052918d5fc [ 459.944266][ T7134] RDX: 000000000000000f RSI: 00007f052a08b0a0 RDI: 0000000000000003 [ 459.944279][ T7134] RBP: 00007f052a08b090 R08: 0000000000000000 R09: 0000000000000000 [ 459.944293][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.944305][ T7134] R13: 00007f05293b6038 R14: 00007f05293b5fa0 R15: 00007ffe2c3f8d98 [ 459.944340][ T7134] [ 460.583078][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'. [ 460.625828][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'. [ 460.797875][ T7150] netlink: 'syz.5.247': attribute type 11 has an invalid length. [ 460.805771][ T7150] netlink: 'syz.5.247': attribute type 11 has an invalid length. [ 460.813884][ T7150] netlink: 220 bytes leftover after parsing attributes in process `syz.5.247'. [ 461.328080][ T7154] netlink: 340 bytes leftover after parsing attributes in process `syz.1.250'. [ 461.815962][ T7161] netlink: 5844 bytes leftover after parsing attributes in process `syz.0.251'. [ 461.825792][ T7161] netlink: 5844 bytes leftover after parsing attributes in process `syz.0.251'. [ 462.807942][ T6054] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 463.067938][ T6054] usb 5-1: Using ep0 maxpacket: 32 [ 463.113276][ T6054] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 463.127398][ T6054] usb 5-1: config 0 has no interface number 0 [ 463.199772][ T6054] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 463.244374][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.267752][ T6054] usb 5-1: Product: syz [ 463.272097][ T6054] usb 5-1: Manufacturer: syz [ 463.276741][ T6054] usb 5-1: SerialNumber: syz [ 463.297002][ T6054] usb 5-1: config 0 descriptor?? [ 463.315782][ T6054] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 463.325249][ T7172] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 463.374075][ T6054] usb 5-1: selecting invalid altsetting 1 [ 463.397583][ T6054] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 463.453802][ T6054] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 463.526429][ T6054] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 463.673334][ T6054] usb 5-1: media controller created [ 464.135913][ T6054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.554640][ T7188] syz.5.257: attempt to access beyond end of device [ 464.554640][ T7188] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 464.572978][ T7188] efs: cannot read volume header [ 464.838830][ T7183] loop6: detected capacity change from 0 to 524287999 [ 464.846260][ T7183] buffer_io_error: 7 callbacks suppressed [ 464.846272][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.860199][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.868307][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.877242][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.885249][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.893401][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.901874][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.909984][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.918009][ T7183] ldm_validate_partition_table(): Disk read failed. [ 464.924728][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.932888][ T7183] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.941026][ T7183] Dev loop6: unable to read RDB block 0 [ 464.947093][ T7183] loop6: unable to read partition table [ 464.953007][ T7183] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 465.451544][ T7201] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.754059][ T6054] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 466.112307][ T6054] zl10353_read_register: readreg error (reg=127, ret==-110) [ 466.768046][ T7209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.263'. [ 467.127988][ T6054] usb 5-1: USB disconnect, device number 5 [ 467.289641][ T5999] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 467.474604][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.540601][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.577933][ T5999] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 467.679634][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.741156][ T7225] netlink: 5844 bytes leftover after parsing attributes in process `syz.3.265'. [ 467.750937][ T7225] netlink: 5844 bytes leftover after parsing attributes in process `syz.3.265'. [ 468.635411][ T5999] usb 2-1: config 0 descriptor?? [ 469.176141][ T7232] FAULT_INJECTION: forcing a failure. [ 469.176141][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 469.189727][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.3.268 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 469.189747][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.189757][ T7232] Call Trace: [ 469.189763][ T7232] [ 469.189769][ T7232] dump_stack_lvl+0x189/0x250 [ 469.189791][ T7232] ? __pfx____ratelimit+0x10/0x10 [ 469.189807][ T7232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.189828][ T7232] ? __pfx__printk+0x10/0x10 [ 469.189852][ T7232] ? __pfx___might_resched+0x10/0x10 [ 469.189874][ T7232] should_fail_ex+0x414/0x560 [ 469.189893][ T7232] should_failslab+0xa8/0x100 [ 469.189911][ T7232] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 469.189927][ T7232] ? __alloc_skb+0x112/0x2d0 [ 469.189952][ T7232] __alloc_skb+0x112/0x2d0 [ 469.189977][ T7232] netlink_sendmsg+0x5c6/0xb30 [ 469.190006][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.190035][ T7232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.190050][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.190072][ T7232] __sock_sendmsg+0x21c/0x270 [ 469.190093][ T7232] ____sys_sendmsg+0x505/0x830 [ 469.190121][ T7232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.190152][ T7232] ? import_iovec+0x74/0xa0 [ 469.190176][ T7232] ___sys_sendmsg+0x21f/0x2a0 [ 469.190202][ T7232] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.190253][ T7232] ? __fget_files+0x2a/0x420 [ 469.190270][ T7232] ? __fget_files+0x3a0/0x420 [ 469.190295][ T7232] __x64_sys_sendmsg+0x19b/0x260 [ 469.190321][ T7232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.190352][ T7232] ? __pfx_ksys_write+0x10/0x10 [ 469.190371][ T7232] ? do_syscall_64+0xbe/0x3b0 [ 469.190391][ T7232] do_syscall_64+0xfa/0x3b0 [ 469.190407][ T7232] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.190422][ T7232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.190437][ T7232] ? clear_bhb_loop+0x60/0xb0 [ 469.190456][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.190470][ T7232] RIP: 0033:0x7f160158ebe9 [ 469.190491][ T7232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.190503][ T7232] RSP: 002b:00007f1602355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.190520][ T7232] RAX: ffffffffffffffda RBX: 00007f16017b6090 RCX: 00007f160158ebe9 [ 469.190531][ T7232] RDX: 0000000000004800 RSI: 00002000000046c0 RDI: 000000000000000b [ 469.190540][ T7232] RBP: 00007f1602355090 R08: 0000000000000000 R09: 0000000000000000 [ 469.190550][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.190558][ T7232] R13: 00007f16017b6128 R14: 00007f16017b6090 R15: 00007ffecb8fa0b8 [ 469.190582][ T7232] [ 469.460498][ T5999] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x1 [ 469.467930][ T5999] hid-steam 0003:28DE:1142.0002: item fetching failed at offset 4/5 [ 469.476584][ T5999] hid-steam 0003:28DE:1142.0002: steam_probe:parse of hid interface failed [ 469.487330][ T5999] hid-steam 0003:28DE:1142.0002: probe with driver hid-steam failed with error -22 [ 469.717103][ T7240] xt_bpf: check failed: parse error [ 469.837820][ T6009] usb 2-1: USB disconnect, device number 4 [ 470.365318][ T7240] overlayfs: failed to resolve './file1/file0': -2 [ 470.425517][ T7233] misc userio: No port type given on /dev/userio [ 471.008102][ T7251] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.272'. [ 471.018628][ T7251] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.272'. [ 471.822006][ T7255] netlink: 104 bytes leftover after parsing attributes in process `syz.1.275'. [ 472.119548][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.276'. [ 472.658220][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 472.987424][ T5894] Bluetooth: hci2: command 0x0406 tx timeout [ 472.993666][ T5158] Bluetooth: hci4: command 0x0405 tx timeout [ 473.000913][ T5894] Bluetooth: hci3: command 0x0406 tx timeout [ 473.006984][ T5894] Bluetooth: hci1: command 0x0406 tx timeout [ 473.039132][ T6009] delete_channel: no stack [ 473.045182][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 473.127855][ T9] usb 5-1: config 0 has an invalid interface number: 9 but max is 2 [ 473.281177][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.273'. [ 473.336467][ T9] usb 5-1: config 0 has an invalid interface number: 9 but max is 2 [ 473.350552][ T9] usb 5-1: config 0 has an invalid interface number: 157 but max is 2 [ 473.364542][ T9] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 473.376941][ T9] usb 5-1: config 0 has no interface number 0 [ 473.383171][ T9] usb 5-1: config 0 has no interface number 1 [ 473.926758][ T9] usb 5-1: config 0 interface 9 has no altsetting 0 [ 473.928802][ T7272] Cannot find add_set index 0 as target [ 473.933856][ T9] usb 5-1: config 0 interface 9 has no altsetting 1 [ 473.946258][ T9] usb 5-1: config 0 interface 157 has no altsetting 0 [ 473.955894][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 473.986404][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.236552][ T9] usb 5-1: Product: syz [ 474.262221][ T9] usb 5-1: Manufacturer: syz [ 474.266919][ T9] usb 5-1: SerialNumber: syz [ 474.275359][ T9] usb 5-1: config 0 descriptor?? [ 474.350668][ T7280] netlink: 5844 bytes leftover after parsing attributes in process `syz.0.278'. [ 474.360529][ T7280] netlink: 5844 bytes leftover after parsing attributes in process `syz.0.278'. [ 474.865514][ T9] usb 5-1: selecting invalid altsetting 1 [ 474.895473][ T9] sierra 5-1:0.9: Sierra USB modem converter detected [ 474.938945][ T9] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 475.095979][ T9] usb 5-1: USB disconnect, device number 6 [ 475.174288][ T7285] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.280'. [ 475.188980][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 475.201234][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 475.259150][ T9] sierra 5-1:0.9: device disconnected [ 475.267691][ T7285] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.280'. [ 475.356297][ T7288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.281'. [ 476.690498][ T7304] o2cb: This node has not been configured. [ 476.696454][ T7304] o2cb: Cluster check failed. Fix errors before retrying. [ 476.706258][ T7304] (syz.1.284,7304,0):user_dlm_register:674 ERROR: status = -22 [ 476.714057][ T7304] (syz.1.284,7304,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 476.947549][ T7308] o2cb: This node has not been configured. [ 476.953513][ T7308] o2cb: Cluster check failed. Fix errors before retrying. [ 476.967385][ T7308] (syz.4.285,7308,0):user_dlm_register:674 ERROR: status = -22 [ 476.975520][ T7308] (syz.4.285,7308,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 477.414256][ T7312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.287'. [ 481.874823][ T7358] o2cb: This node has not been configured. [ 481.881408][ T7358] o2cb: Cluster check failed. Fix errors before retrying. [ 481.889670][ T7358] (syz.3.296,7358,0):user_dlm_register:674 ERROR: status = -22 [ 481.897386][ T7358] (syz.3.296,7358,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 482.806846][ T7376] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 483.347617][ T6009] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 485.427171][ T7378] bond1: (slave gretap1): making interface the new active one [ 485.573533][ T7378] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 485.707603][ T6009] usb 2-1: device descriptor read/64, error -71 [ 486.736390][ T6009] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 487.571940][ T7395] loop6: detected capacity change from 0 to 524287999 [ 487.579488][ T7395] buffer_io_error: 6 callbacks suppressed [ 487.579499][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.593294][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.601327][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.610278][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.618342][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.626303][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.634310][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.642322][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.650465][ T7395] ldm_validate_partition_table(): Disk read failed. [ 487.657610][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.665607][ T7395] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.673754][ T7395] Dev loop6: unable to read RDB block 0 [ 487.679853][ T7395] loop6: unable to read partition table [ 487.685763][ T7395] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 487.994144][ T7405] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 488.006284][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.0.306 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 488.006314][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.006329][ T7405] Call Trace: [ 488.006341][ T7405] [ 488.006354][ T7405] dump_stack_lvl+0x189/0x250 [ 488.006382][ T7405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.006401][ T7405] ? __pfx__printk+0x10/0x10 [ 488.006424][ T7405] ? __rcu_read_unlock+0x84/0xe0 [ 488.006446][ T7405] ? kernfs_path_from_node+0x2c/0x260 [ 488.006467][ T7405] ? kernfs_path_from_node+0x22c/0x260 [ 488.006485][ T7405] ? kernfs_path_from_node+0x2c/0x260 [ 488.006507][ T7405] sysfs_warn_dup+0x8e/0xa0 [ 488.006525][ T7405] sysfs_do_create_link_sd+0xc0/0x110 [ 488.006546][ T7405] device_add_class_symlinks+0x1cf/0x240 [ 488.006579][ T7405] device_add+0x475/0xb50 [ 488.006606][ T7405] wiphy_register+0x199a/0x26b0 [ 488.006641][ T7405] ? __pfx_wiphy_register+0x10/0x10 [ 488.006660][ T7405] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 488.006689][ T7405] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 488.006715][ T7405] ieee80211_register_hw+0x33e1/0x4120 [ 488.006754][ T7405] ? ieee80211_register_hw+0x1471/0x4120 [ 488.006785][ T7405] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 488.006823][ T7405] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 488.006857][ T7405] ? __hrtimer_setup+0x187/0x210 [ 488.006872][ T7405] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 488.006901][ T7405] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 488.006948][ T7405] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 488.006970][ T7405] ? trace_kmalloc+0x1f/0xd0 [ 488.006984][ T7405] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 488.007000][ T7405] ? kstrndup+0xbf/0x160 [ 488.007028][ T7405] hwsim_new_radio_nl+0xea4/0x1b10 [ 488.007053][ T7405] ? __pfx___nla_validate_parse+0x10/0x10 [ 488.007085][ T7405] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 488.007119][ T7405] ? __nla_parse+0x40/0x60 [ 488.007141][ T7405] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 488.007167][ T7405] genl_family_rcv_msg_doit+0x215/0x300 [ 488.007190][ T7405] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.007219][ T7405] ? bpf_lsm_capable+0x9/0x20 [ 488.007239][ T7405] ? security_capable+0x7e/0x2e0 [ 488.007270][ T7405] genl_rcv_msg+0x60e/0x790 [ 488.007292][ T7405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.007308][ T7405] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 488.007343][ T7405] netlink_rcv_skb+0x205/0x470 [ 488.007366][ T7405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.007383][ T7405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.007420][ T7405] ? down_read+0x1ad/0x2e0 [ 488.007442][ T7405] genl_rcv+0x28/0x40 [ 488.007456][ T7405] netlink_unicast+0x75c/0x8e0 [ 488.007495][ T7405] netlink_sendmsg+0x805/0xb30 [ 488.007536][ T7405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.007578][ T7405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.007599][ T7405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.007623][ T7405] __sock_sendmsg+0x21c/0x270 [ 488.007645][ T7405] ____sys_sendmsg+0x505/0x830 [ 488.007675][ T7405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.007708][ T7405] ? import_iovec+0x74/0xa0 [ 488.007733][ T7405] ___sys_sendmsg+0x21f/0x2a0 [ 488.007760][ T7405] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.007821][ T7405] ? __fget_files+0x2a/0x420 [ 488.007839][ T7405] ? __fget_files+0x3a0/0x420 [ 488.007865][ T7405] __x64_sys_sendmsg+0x19b/0x260 [ 488.007893][ T7405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.007927][ T7405] ? rcu_is_watching+0x15/0xb0 [ 488.007949][ T7405] ? do_syscall_64+0xbe/0x3b0 [ 488.007970][ T7405] do_syscall_64+0xfa/0x3b0 [ 488.007989][ T7405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.008004][ T7405] ? asm_sysvec_call_function_single+0x1a/0x20 [ 488.008019][ T7405] ? clear_bhb_loop+0x60/0xb0 [ 488.008039][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.008054][ T7405] RIP: 0033:0x7fac07d8ebe9 [ 488.008069][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.008082][ T7405] RSP: 002b:00007fac08bc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.008099][ T7405] RAX: ffffffffffffffda RBX: 00007fac07fb6090 RCX: 00007fac07d8ebe9 [ 488.008111][ T7405] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 488.008121][ T7405] RBP: 00007fac07e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 488.008131][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.008140][ T7405] R13: 00007fac07fb6128 R14: 00007fac07fb6090 R15: 00007ffe427182a8 [ 488.008165][ T7405] [ 489.532983][ C1] sd 0:0:1:0: [sda] tag#6487 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 489.543930][ C1] sd 0:0:1:0: [sda] tag#6487 CDB: Read(6) 08 00 0c 6a 08 48 [ 489.582787][ C1] sd 0:0:1:0: [sda] tag#6488 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 489.593343][ C1] sd 0:0:1:0: [sda] tag#6488 CDB: Read(6) 08 00 0c 6a 08 48 [ 490.091582][ T6009] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 490.091794][ T7424] FAULT_INJECTION: forcing a failure. [ 490.091794][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.112857][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.0.313 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 490.112886][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.112899][ T7424] Call Trace: [ 490.112906][ T7424] [ 490.112912][ T7424] dump_stack_lvl+0x189/0x250 [ 490.112934][ T7424] ? __pfx____ratelimit+0x10/0x10 [ 490.112951][ T7424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.112968][ T7424] ? __pfx__printk+0x10/0x10 [ 490.112988][ T7424] ? __might_fault+0xb0/0x130 [ 490.113012][ T7424] should_fail_ex+0x414/0x560 [ 490.113032][ T7424] _copy_from_user+0x2d/0xb0 [ 490.113054][ T7424] memdup_user+0x5e/0xd0 [ 490.113074][ T7424] strndup_user+0x68/0xd0 [ 490.113094][ T7424] __se_sys_mount+0x9c/0x410 [ 490.113112][ T7424] ? ksys_write+0x22a/0x250 [ 490.113129][ T7424] ? __pfx___se_sys_mount+0x10/0x10 [ 490.113150][ T7424] ? do_syscall_64+0xbe/0x3b0 [ 490.113166][ T7424] ? __x64_sys_mount+0x20/0xc0 [ 490.113185][ T7424] do_syscall_64+0xfa/0x3b0 [ 490.113202][ T7424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.113217][ T7424] ? asm_sysvec_call_function_single+0x1a/0x20 [ 490.113232][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 490.113250][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.113265][ T7424] RIP: 0033:0x7fac07d8ebe9 [ 490.113279][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.113291][ T7424] RSP: 002b:00007fac08bc8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 490.113307][ T7424] RAX: ffffffffffffffda RBX: 00007fac07fb6090 RCX: 00007fac07d8ebe9 [ 490.113318][ T7424] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000000 [ 490.113329][ T7424] RBP: 00007fac08bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 490.113338][ T7424] R10: 0000000000208402 R11: 0000000000000246 R12: 0000000000000001 [ 490.113349][ T7424] R13: 00007fac07fb6128 R14: 00007fac07fb6090 R15: 00007ffe427182a8 [ 490.113373][ T7424] [ 490.422836][ T7427] netlink: 60 bytes leftover after parsing attributes in process `syz.0.313'. [ 490.561774][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 490.599042][ T6009] usb 5-1: no configurations [ 490.604254][ T6009] usb 5-1: can't read configurations, error -22 [ 490.868715][ T6009] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 491.060895][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 491.112958][ T6009] usb 5-1: no configurations [ 491.191320][ T6009] usb 5-1: can't read configurations, error -22 [ 491.889194][ T6009] usb usb5-port1: attempt power cycle [ 494.116977][ T7448] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 494.181916][ T7448] overlayfs: missing 'lowerdir' [ 494.239787][ T7436] hpfs: Bad magic ... probably not HPFS [ 494.549042][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 494.559455][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 495.597798][ T7462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.321'. [ 498.159547][ T7499] overlayfs: overlapping lowerdir path [ 499.212983][ T7510] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 499.368355][ T5932] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 499.751039][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 499.930890][ T5932] usb 6-1: config 1 has an invalid interface number: 27 but max is 0 [ 499.972830][ T5932] usb 6-1: config 1 has no interface number 0 [ 500.043150][ T5932] usb 6-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 500.119861][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 500.197853][ T5932] usb 6-1: Product: syz [ 500.227844][ T5932] usb 6-1: Manufacturer: syz [ 500.232557][ T5932] usb 6-1: SerialNumber: syz [ 500.324836][ T7529] netlink: 36 bytes leftover after parsing attributes in process `syz.0.336'. [ 500.414887][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'. [ 500.502524][ T5932] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 500.704552][ T5932] usb 6-1: USB disconnect, device number 3 [ 501.055199][ T7541] o2cb: This node has not been configured. [ 501.061605][ T7541] o2cb: Cluster check failed. Fix errors before retrying. [ 501.070711][ T7541] (syz.1.338,7541,0):user_dlm_register:674 ERROR: status = -22 [ 501.079987][ T7541] (syz.1.338,7541,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 501.756824][ T30] audit: type=1326 audit(682066158.883:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7552 comm="syz.1.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86798ebe9 code=0x0 [ 502.028333][ T7560] Cannot find add_set index 0 as target [ 502.645822][ T7562] capability: warning: `syz.3.340' uses deprecated v2 capabilities in a way that may be insecure [ 503.018349][ T7565] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 503.478302][ T7573] syz.0.344: attempt to access beyond end of device [ 503.478302][ T7573] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 504.811062][ T7570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.344'. [ 504.836689][ T7581] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>' [ 504.892719][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.4.348 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 504.892743][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.892752][ T7581] Call Trace: [ 504.892759][ T7581] [ 504.892768][ T7581] dump_stack_lvl+0x189/0x250 [ 504.892794][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.892813][ T7581] ? __pfx__printk+0x10/0x10 [ 504.892834][ T7581] ? kernfs_path_from_node+0x2c/0x260 [ 504.892855][ T7581] ? kernfs_path_from_node+0x2c/0x260 [ 504.892873][ T7581] ? kernfs_path_from_node+0x2c/0x260 [ 504.892893][ T7581] ? kernfs_path_from_node+0x22c/0x260 [ 504.892911][ T7581] ? kernfs_path_from_node+0x2c/0x260 [ 504.892933][ T7581] sysfs_warn_dup+0x8e/0xa0 [ 504.892951][ T7581] sysfs_do_create_link_sd+0xc0/0x110 [ 504.892972][ T7581] device_add_class_symlinks+0x1cf/0x240 [ 504.893000][ T7581] device_add+0x475/0xb50 [ 504.893027][ T7581] wiphy_register+0x199a/0x26b0 [ 504.893067][ T7581] ? __pfx_wiphy_register+0x10/0x10 [ 504.893087][ T7581] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 504.893115][ T7581] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 504.893143][ T7581] ieee80211_register_hw+0x33e1/0x4120 [ 504.893182][ T7581] ? ieee80211_register_hw+0x1471/0x4120 [ 504.893213][ T7581] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 504.893241][ T7581] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 504.893274][ T7581] ? __hrtimer_setup+0x187/0x210 [ 504.893290][ T7581] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 504.893318][ T7581] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 504.893366][ T7581] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 504.893392][ T7581] ? trace_kmalloc+0x1f/0xd0 [ 504.893406][ T7581] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 504.893422][ T7581] ? kstrndup+0xbf/0x160 [ 504.893450][ T7581] hwsim_new_radio_nl+0xea4/0x1b10 [ 504.893476][ T7581] ? __pfx___nla_validate_parse+0x10/0x10 [ 504.893508][ T7581] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 504.893533][ T7581] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 504.893559][ T7581] ? __nla_parse+0x40/0x60 [ 504.893581][ T7581] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 504.893605][ T7581] genl_family_rcv_msg_doit+0x215/0x300 [ 504.893628][ T7581] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 504.893657][ T7581] ? bpf_lsm_capable+0x9/0x20 [ 504.893678][ T7581] ? security_capable+0x7e/0x2e0 [ 504.893704][ T7581] genl_rcv_msg+0x60e/0x790 [ 504.893727][ T7581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.893742][ T7581] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 504.893777][ T7581] netlink_rcv_skb+0x205/0x470 [ 504.893801][ T7581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.893818][ T7581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.893855][ T7581] ? down_read+0x1ad/0x2e0 [ 504.893876][ T7581] genl_rcv+0x28/0x40 [ 504.893890][ T7581] netlink_unicast+0x75c/0x8e0 [ 504.893920][ T7581] netlink_sendmsg+0x805/0xb30 [ 504.893951][ T7581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.893981][ T7581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.893997][ T7581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.894020][ T7581] __sock_sendmsg+0x21c/0x270 [ 504.894042][ T7581] ____sys_sendmsg+0x505/0x830 [ 504.894072][ T7581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.894105][ T7581] ? import_iovec+0x74/0xa0 [ 504.894130][ T7581] ___sys_sendmsg+0x21f/0x2a0 [ 504.894157][ T7581] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.894213][ T7581] ? __fget_files+0x2a/0x420 [ 504.894230][ T7581] ? __fget_files+0x3a0/0x420 [ 504.894256][ T7581] __x64_sys_sendmsg+0x19b/0x260 [ 504.894284][ T7581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.894318][ T7581] ? rcu_is_watching+0x15/0xb0 [ 504.894339][ T7581] ? do_syscall_64+0xbe/0x3b0 [ 504.894360][ T7581] do_syscall_64+0xfa/0x3b0 [ 504.894384][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.894400][ T7581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.894416][ T7581] ? clear_bhb_loop+0x60/0xb0 [ 504.894435][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.894451][ T7581] RIP: 0033:0x7fa39038ebe9 [ 504.894466][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.894480][ T7581] RSP: 002b:00007fa3912bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.894497][ T7581] RAX: ffffffffffffffda RBX: 00007fa3905b5fa0 RCX: 00007fa39038ebe9 [ 504.894508][ T7581] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 504.894518][ T7581] RBP: 00007fa390411e19 R08: 0000000000000000 R09: 0000000000000000 [ 504.894528][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.894537][ T7581] R13: 00007fa3905b6038 R14: 00007fa3905b5fa0 R15: 00007ffd08ce0f98 [ 504.894563][ T7581] [ 505.547844][ T6009] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 506.038390][ T6009] usb 6-1: Using ep0 maxpacket: 32 [ 506.117090][ T6009] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 506.237231][ T6009] usb 6-1: config 0 has no interface number 0 [ 506.688744][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.695438][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.702105][ T6009] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 506.869603][ T6009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.125818][ T6009] usb 6-1: Product: syz [ 507.244031][ T6009] usb 6-1: Manufacturer: syz [ 507.314631][ T6009] usb 6-1: SerialNumber: syz [ 508.759144][ T5895] Bluetooth: hci0: command 0x0405 tx timeout [ 508.973790][ T6009] usb 6-1: config 0 descriptor?? [ 509.362027][ T7594] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 509.538694][ T6009] usb 6-1: can't set config #0, error -71 [ 509.574333][ T6009] usb 6-1: USB disconnect, device number 4 [ 509.626883][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.351'. [ 509.637986][ T7594] CPU: 0 UID: 0 PID: 7594 Comm: syz.1.349 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 509.638013][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.638025][ T7594] Call Trace: [ 509.638033][ T7594] [ 509.638041][ T7594] dump_stack_lvl+0x189/0x250 [ 509.638071][ T7594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.638093][ T7594] ? __pfx__printk+0x10/0x10 [ 509.638121][ T7594] ? __rcu_read_unlock+0x84/0xe0 [ 509.638145][ T7594] ? kernfs_path_from_node+0x2c/0x260 [ 509.638170][ T7594] ? kernfs_path_from_node+0x22c/0x260 [ 509.638191][ T7594] ? kernfs_path_from_node+0x2c/0x260 [ 509.638216][ T7594] sysfs_warn_dup+0x8e/0xa0 [ 509.638238][ T7594] sysfs_do_create_link_sd+0xc0/0x110 [ 509.638263][ T7594] device_add_class_symlinks+0x1cf/0x240 [ 509.638296][ T7594] device_add+0x475/0xb50 [ 509.638328][ T7594] wiphy_register+0x199a/0x26b0 [ 509.638372][ T7594] ? __pfx_wiphy_register+0x10/0x10 [ 509.638395][ T7594] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 509.638428][ T7594] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 509.638460][ T7594] ieee80211_register_hw+0x33e1/0x4120 [ 509.638507][ T7594] ? ieee80211_register_hw+0x1471/0x4120 [ 509.638544][ T7594] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 509.638577][ T7594] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 509.638635][ T7594] ? __hrtimer_setup+0x187/0x210 [ 509.638657][ T7594] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 509.638698][ T7594] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 509.638766][ T7594] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 509.638797][ T7594] ? trace_kmalloc+0x1f/0xd0 [ 509.638815][ T7594] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 509.638838][ T7594] ? kstrndup+0xbf/0x160 [ 509.638878][ T7594] hwsim_new_radio_nl+0xea4/0x1b10 [ 509.638915][ T7594] ? __pfx___nla_validate_parse+0x10/0x10 [ 509.638961][ T7594] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.639009][ T7594] ? __nla_parse+0x40/0x60 [ 509.639041][ T7594] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 509.639077][ T7594] genl_family_rcv_msg_doit+0x215/0x300 [ 509.639111][ T7594] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.639134][ T7594] ? irqentry_exit+0x74/0x90 [ 509.639185][ T7594] genl_rcv_msg+0x60e/0x790 [ 509.639217][ T7594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.639240][ T7594] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.639272][ T7594] ? irqentry_exit+0x74/0x90 [ 509.639295][ T7594] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.639329][ T7594] netlink_rcv_skb+0x205/0x470 [ 509.639362][ T7594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.639388][ T7594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.639441][ T7594] ? down_read+0x1e4/0x2e0 [ 509.639471][ T7594] genl_rcv+0x28/0x40 [ 509.639491][ T7594] netlink_unicast+0x75c/0x8e0 [ 509.639534][ T7594] netlink_sendmsg+0x805/0xb30 [ 509.639567][ T7594] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 509.639604][ T7594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.639641][ T7594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.639663][ T7594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.639693][ T7594] __sock_sendmsg+0x21c/0x270 [ 509.639723][ T7594] ____sys_sendmsg+0x505/0x830 [ 509.639762][ T7594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.639820][ T7594] ? import_iovec+0x74/0xa0 [ 509.639856][ T7594] ___sys_sendmsg+0x21f/0x2a0 [ 509.639894][ T7594] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.639974][ T7594] ? __fget_files+0x2a/0x420 [ 509.639998][ T7594] ? __fget_files+0x3a0/0x420 [ 509.640036][ T7594] __x64_sys_sendmsg+0x19b/0x260 [ 509.640067][ T7594] ? schedule+0x165/0x360 [ 509.640089][ T7594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.640147][ T7594] ? do_syscall_64+0xbe/0x3b0 [ 509.640177][ T7594] do_syscall_64+0xfa/0x3b0 [ 509.640203][ T7594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.640224][ T7594] ? asm_sysvec_call_function_single+0x1a/0x20 [ 509.640246][ T7594] ? clear_bhb_loop+0x60/0xb0 [ 509.640273][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.640294][ T7594] RIP: 0033:0x7fa86798ebe9 [ 509.640315][ T7594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.640333][ T7594] RSP: 002b:00007fa8687bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.640356][ T7594] RAX: ffffffffffffffda RBX: 00007fa867bb6180 RCX: 00007fa86798ebe9 [ 509.640372][ T7594] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 509.640386][ T7594] RBP: 00007fa867a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 509.640400][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.640412][ T7594] R13: 00007fa867bb6218 R14: 00007fa867bb6180 R15: 00007ffeecccb6a8 [ 509.640449][ T7594] [ 510.994707][ T7607] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.353'. [ 511.047910][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 511.089028][ T7607] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.353'. [ 511.322428][ T5895] Bluetooth: hci0: command 0x0405 tx timeout [ 511.883451][ T7630] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 512.650162][ T7630] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 512.975261][ T7647] netlink: 104 bytes leftover after parsing attributes in process `syz.0.363'. [ 513.509151][ T7658] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.365'. [ 513.519742][ T7658] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.365'. [ 515.232157][ T7673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.309703][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.321362][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.445549][ T5946] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 515.614368][ T5946] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 516.778693][ T7681] fido_id[7681]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 516.816087][ T6009] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 517.277371][ T7694] xt_bpf: check failed: parse error [ 517.581357][ T6009] usb 6-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.642637][ T6009] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 517.699935][ T6009] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 517.749363][ T6009] usb 6-1: Manufacturer: syz [ 517.769439][ T6009] usb 6-1: SerialNumber: syz [ 518.103473][ T6009] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 518.165563][ T6009] usb 6-1: USB disconnect, device number 5 [ 519.355105][ T7720] loop6: detected capacity change from 0 to 524287999 [ 519.377689][ T7720] buffer_io_error: 7 callbacks suppressed [ 519.377733][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.396554][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.436802][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.448587][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.467556][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.477640][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.500037][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.568746][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.594860][ T7720] ldm_validate_partition_table(): Disk read failed. [ 519.618711][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.643584][ T7720] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.696111][ T7720] Dev loop6: unable to read RDB block 0 [ 519.729961][ T7720] loop6: unable to read partition table [ 519.737338][ T7720] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 520.044593][ T7729] veth0_to_bridge: entered promiscuous mode [ 522.443188][ T7726] veth0_to_bridge: left promiscuous mode [ 522.602695][ T5862] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 522.686505][ T7757] syzkaller0: entered promiscuous mode [ 522.692526][ T7757] syzkaller0: entered allmulticast mode [ 522.831972][ T5862] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 522.921266][ T5862] usb 6-1: config 0 has no interface number 0 [ 523.052754][ T5862] usb 6-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 523.191216][ T5862] usb 6-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 523.329677][ T5862] usb 6-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65 [ 523.377906][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.386085][ T5862] usb 6-1: Product: syz [ 523.391689][ T5862] usb 6-1: Manufacturer: syz [ 523.406618][ T5862] usb 6-1: SerialNumber: syz [ 523.446996][ T5862] usb 6-1: config 0 descriptor?? [ 523.510686][ T7747] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 523.547881][ T7747] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 523.939556][ T7747] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 523.959004][ T7747] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.008212][ T7777] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.394'. [ 524.018159][ T7777] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.394'. [ 524.834357][ T7769] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 524.861048][ T7769] CPU: 0 UID: 0 PID: 7769 Comm: syz.1.395 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 524.861082][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.861096][ T7769] Call Trace: [ 524.861105][ T7769] [ 524.861115][ T7769] dump_stack_lvl+0x189/0x250 [ 524.861264][ T7769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.861297][ T7769] ? __pfx__printk+0x10/0x10 [ 524.861326][ T7769] ? kernfs_path_from_node+0x2c/0x260 [ 524.861355][ T7769] ? kernfs_path_from_node+0x2c/0x260 [ 524.861379][ T7769] ? kernfs_path_from_node+0x2c/0x260 [ 524.861404][ T7769] ? kernfs_path_from_node+0x22c/0x260 [ 524.861429][ T7769] ? kernfs_path_from_node+0x2c/0x260 [ 524.861458][ T7769] sysfs_warn_dup+0x8e/0xa0 [ 524.861484][ T7769] sysfs_do_create_link_sd+0xc0/0x110 [ 524.861514][ T7769] device_add_class_symlinks+0x1cf/0x240 [ 524.861551][ T7769] device_add+0x475/0xb50 [ 524.861599][ T7769] wiphy_register+0x199a/0x26b0 [ 524.861650][ T7769] ? __pfx_wiphy_register+0x10/0x10 [ 524.861678][ T7769] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 524.861719][ T7769] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 524.861757][ T7769] ieee80211_register_hw+0x33e1/0x4120 [ 524.861815][ T7769] ? ieee80211_register_hw+0x1471/0x4120 [ 524.861859][ T7769] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 524.861900][ T7769] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 524.861947][ T7769] ? __hrtimer_setup+0x187/0x210 [ 524.861969][ T7769] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 524.861999][ T7769] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 524.862070][ T7769] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 524.862105][ T7769] ? trace_kmalloc+0x1f/0xd0 [ 524.862124][ T7769] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 524.862150][ T7769] ? kstrndup+0xbf/0x160 [ 524.862192][ T7769] hwsim_new_radio_nl+0xea4/0x1b10 [ 524.862231][ T7769] ? __pfx___nla_validate_parse+0x10/0x10 [ 524.862281][ T7769] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 524.862333][ T7769] ? __nla_parse+0x40/0x60 [ 524.862362][ T7769] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 524.862391][ T7769] genl_family_rcv_msg_doit+0x215/0x300 [ 524.862422][ T7769] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.862465][ T7769] ? bpf_lsm_capable+0x9/0x20 [ 524.862496][ T7769] ? security_capable+0x7e/0x2e0 [ 524.862536][ T7769] genl_rcv_msg+0x60e/0x790 [ 524.862568][ T7769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.862662][ T7769] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 524.862715][ T7769] netlink_rcv_skb+0x205/0x470 [ 524.862748][ T7769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.862773][ T7769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.862828][ T7769] ? down_read+0x1ad/0x2e0 [ 524.862859][ T7769] genl_rcv+0x28/0x40 [ 524.862879][ T7769] netlink_unicast+0x75c/0x8e0 [ 524.862922][ T7769] netlink_sendmsg+0x805/0xb30 [ 524.862972][ T7769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.863017][ T7769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.863043][ T7769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.863094][ T7769] __sock_sendmsg+0x21c/0x270 [ 524.863127][ T7769] ____sys_sendmsg+0x505/0x830 [ 524.863173][ T7769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.863222][ T7769] ? import_iovec+0x74/0xa0 [ 524.863260][ T7769] ___sys_sendmsg+0x21f/0x2a0 [ 524.863302][ T7769] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.863383][ T7769] ? __fget_files+0x2a/0x420 [ 524.863409][ T7769] ? __fget_files+0x3a0/0x420 [ 524.863449][ T7769] __x64_sys_sendmsg+0x19b/0x260 [ 524.863489][ T7769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.863539][ T7769] ? rcu_is_watching+0x15/0xb0 [ 524.863573][ T7769] ? do_syscall_64+0xbe/0x3b0 [ 524.863612][ T7769] do_syscall_64+0xfa/0x3b0 [ 524.863640][ T7769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.863661][ T7769] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.863685][ T7769] ? clear_bhb_loop+0x60/0xb0 [ 524.863715][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.863738][ T7769] RIP: 0033:0x7fa86798ebe9 [ 524.863760][ T7769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.863780][ T7769] RSP: 002b:00007fa868801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.863804][ T7769] RAX: ffffffffffffffda RBX: 00007fa867bb5fa0 RCX: 00007fa86798ebe9 [ 524.863822][ T7769] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 524.863837][ T7769] RBP: 00007fa867a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 524.863850][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.863863][ T7769] R13: 00007fa867bb6038 R14: 00007fa867bb5fa0 R15: 00007ffeecccb6a8 [ 524.863900][ T7769] [ 524.878605][ T5862] asix 6-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 526.368850][ T5862] asix 6-1:0.135: probe with driver asix failed with error -71 [ 526.388185][ T5862] usb 6-1: USB disconnect, device number 6 [ 526.875737][ T7800] xt_bpf: check failed: parse error [ 530.711226][ T7838] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 530.730283][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.5.411 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 530.730313][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.730326][ T7838] Call Trace: [ 530.730334][ T7838] [ 530.730341][ T7838] dump_stack_lvl+0x189/0x250 [ 530.730366][ T7838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.730384][ T7838] ? __pfx__printk+0x10/0x10 [ 530.730406][ T7838] ? kernfs_path_from_node+0x2c/0x260 [ 530.730426][ T7838] ? kernfs_path_from_node+0x2c/0x260 [ 530.730444][ T7838] ? kernfs_path_from_node+0x2c/0x260 [ 530.730464][ T7838] ? kernfs_path_from_node+0x22c/0x260 [ 530.730482][ T7838] ? kernfs_path_from_node+0x2c/0x260 [ 530.730503][ T7838] sysfs_warn_dup+0x8e/0xa0 [ 530.730521][ T7838] sysfs_do_create_link_sd+0xc0/0x110 [ 530.730542][ T7838] device_add_class_symlinks+0x1cf/0x240 [ 530.730570][ T7838] device_add+0x475/0xb50 [ 530.730597][ T7838] wiphy_register+0x199a/0x26b0 [ 530.730632][ T7838] ? __pfx_wiphy_register+0x10/0x10 [ 530.730651][ T7838] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 530.730679][ T7838] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 530.730706][ T7838] ieee80211_register_hw+0x33e1/0x4120 [ 530.730752][ T7838] ? ieee80211_register_hw+0x1471/0x4120 [ 530.730784][ T7838] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 530.730813][ T7838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 530.730847][ T7838] ? __hrtimer_setup+0x187/0x210 [ 530.730864][ T7838] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 530.730892][ T7838] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 530.730939][ T7838] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 530.730961][ T7838] ? trace_kmalloc+0x1f/0xd0 [ 530.730975][ T7838] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 530.730991][ T7838] ? kstrndup+0xbf/0x160 [ 530.731020][ T7838] hwsim_new_radio_nl+0xea4/0x1b10 [ 530.731045][ T7838] ? __pfx___nla_validate_parse+0x10/0x10 [ 530.731078][ T7838] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 530.731111][ T7838] ? __nla_parse+0x40/0x60 [ 530.731133][ T7838] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 530.731159][ T7838] genl_family_rcv_msg_doit+0x215/0x300 [ 530.731182][ T7838] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 530.731211][ T7838] ? bpf_lsm_capable+0x9/0x20 [ 530.731231][ T7838] ? security_capable+0x7e/0x2e0 [ 530.731258][ T7838] genl_rcv_msg+0x60e/0x790 [ 530.731281][ T7838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.731297][ T7838] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 530.731324][ T7838] ? netlink_rcv_skb+0x19d/0x470 [ 530.731351][ T7838] netlink_rcv_skb+0x205/0x470 [ 530.731374][ T7838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.731392][ T7838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.731428][ T7838] ? down_read+0x1ad/0x2e0 [ 530.731450][ T7838] genl_rcv+0x28/0x40 [ 530.731464][ T7838] netlink_unicast+0x75c/0x8e0 [ 530.731494][ T7838] netlink_sendmsg+0x805/0xb30 [ 530.731517][ T7838] ? irqentry_exit+0x74/0x90 [ 530.731539][ T7838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.731569][ T7838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.731584][ T7838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.731608][ T7838] __sock_sendmsg+0x21c/0x270 [ 530.731630][ T7838] ____sys_sendmsg+0x505/0x830 [ 530.731660][ T7838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.731691][ T7838] ? ___sys_sendmsg+0x205/0x2a0 [ 530.731720][ T7838] ___sys_sendmsg+0x21f/0x2a0 [ 530.731754][ T7838] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.731810][ T7838] ? __fget_files+0x2a/0x420 [ 530.731828][ T7838] ? __fget_files+0x3a0/0x420 [ 530.731855][ T7838] __x64_sys_sendmsg+0x19b/0x260 [ 530.731878][ T7838] ? schedule+0x165/0x360 [ 530.731895][ T7838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.731938][ T7838] ? do_syscall_64+0xbe/0x3b0 [ 530.731959][ T7838] do_syscall_64+0xfa/0x3b0 [ 530.731978][ T7838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.731993][ T7838] ? asm_sysvec_call_function_single+0x1a/0x20 [ 530.732009][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 530.732028][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.732044][ T7838] RIP: 0033:0x7f052918ebe9 [ 530.732060][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.732074][ T7838] RSP: 002b:00007f052a06a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.732091][ T7838] RAX: ffffffffffffffda RBX: 00007f05293b6090 RCX: 00007f052918ebe9 [ 530.732103][ T7838] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 530.732114][ T7838] RBP: 00007f0529211e19 R08: 0000000000000000 R09: 0000000000000000 [ 530.732124][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.732134][ T7838] R13: 00007f05293b6128 R14: 00007f05293b6090 R15: 00007ffe2c3f8d98 [ 530.732160][ T7838] [ 532.056525][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 532.805677][ T7850] loop6: detected capacity change from 0 to 524287999 [ 532.813532][ T7850] buffer_io_error: 7 callbacks suppressed [ 532.813544][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.828155][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.836325][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.844600][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.852640][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.860789][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.870405][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.878387][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.886261][ T7850] ldm_validate_partition_table(): Disk read failed. [ 532.892949][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.900926][ T7850] Buffer I/O error on dev loop6, logical block 0, async page read [ 532.908955][ T7850] Dev loop6: unable to read RDB block 0 [ 532.914931][ T7850] loop6: unable to read partition table [ 532.920820][ T7850] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 539.050393][ T5946] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 539.227310][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 539.259879][ T5946] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 539.300700][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.101023][ T5946] usb 6-1: can't set config #252, error -71 [ 540.119170][ T5946] usb 6-1: USB disconnect, device number 7 [ 540.267857][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 540.477884][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 540.765565][ T5862] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 540.777213][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.794848][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.805798][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 540.917585][ T5862] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 541.036705][ T7941] o2cb: This node has not been configured. [ 541.045468][ T7941] o2cb: Cluster check failed. Fix errors before retrying. [ 541.054319][ T7941] (syz.5.438,7941,0):user_dlm_register:674 ERROR: status = -22 [ 541.062816][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.076716][ T7941] (syz.5.438,7941,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 541.172722][ T5862] usb 5-1: config 0 descriptor?? [ 541.951195][ T5862] redragon 0003:0C45:760B.0004: unknown main item tag 0x6 [ 542.005705][ T5862] redragon 0003:0C45:760B.0004: item fetching failed at offset 7/133 [ 542.028799][ T5862] redragon 0003:0C45:760B.0004: probe with driver redragon failed with error -22 [ 542.197893][ T5999] usb 5-1: USB disconnect, device number 10 [ 543.500955][ T7972] o2cb: This node has not been configured. [ 543.512839][ T7972] o2cb: Cluster check failed. Fix errors before retrying. [ 543.526925][ T7972] (syz.0.443,7972,0):user_dlm_register:674 ERROR: status = -22 [ 543.537406][ T7972] (syz.0.443,7972,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 544.608658][ T5946] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 544.777572][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 544.839890][ T5946] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=9b.5e [ 544.867206][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.876470][ T5946] usb 4-1: Product: syz [ 544.881350][ T5946] usb 4-1: Manufacturer: syz [ 544.886556][ T5946] usb 4-1: SerialNumber: syz [ 545.135868][ T5946] usb 4-1: config 0 descriptor?? [ 545.175694][ T5946] kalmia 4-1:0.0: probe with driver kalmia failed with error -22 [ 545.547298][ T7990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.761345][ T7979] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 545.802213][ T7993] xt_hashlimit: max too large, truncated to 1048576 [ 545.808632][ T5862] usb 4-1: USB disconnect, device number 12 [ 546.037402][ T7996] binder: BINDER_SET_CONTEXT_MGR already set [ 546.070141][ T7996] binder: 7995:7996 ioctl 4018620d 200000000040 returned -16 [ 546.978260][ T5880] block nbd0: Receive control failed (result -107) [ 547.161207][ T5931] block nbd0: shutting down sockets [ 550.657697][ T5932] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 552.271888][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 552.313385][ T5932] usb 5-1: device descriptor read/all, error -71 [ 552.600484][ T8060] netlink: 5844 bytes leftover after parsing attributes in process `syz.5.464'. [ 552.610456][ T8060] netlink: 5844 bytes leftover after parsing attributes in process `syz.5.464'. [ 553.388622][ T8064] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 553.763660][ T8067] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 554.080950][ T8074] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.465'. [ 554.091125][ T8074] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.465'. [ 554.637227][ T8073] netlink: 340 bytes leftover after parsing attributes in process `syz.5.468'. [ 554.796142][ T8073] netlink: 48 bytes leftover after parsing attributes in process `syz.5.468'. [ 555.324323][ T8087] loop6: detected capacity change from 0 to 524287999 [ 555.346673][ T8087] buffer_io_error: 6 callbacks suppressed [ 555.346714][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.347604][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.348792][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.349611][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.350395][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.351375][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.352496][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.353384][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.353820][ T8087] ldm_validate_partition_table(): Disk read failed. [ 555.354262][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.355293][ T8087] Buffer I/O error on dev loop6, logical block 0, async page read [ 555.357560][ T8087] Dev loop6: unable to read RDB block 0 [ 555.361718][ T8087] loop6: unable to read partition table [ 555.363685][ T8087] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 559.579640][ T8122] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.477'. [ 559.589585][ T8122] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.477'. [ 560.702418][ T8136] netlink: 'syz.0.480': attribute type 4 has an invalid length. [ 560.925243][ T8143] netlink: 'syz.0.480': attribute type 4 has an invalid length. [ 561.303036][ T8149] syz.5.483: attempt to access beyond end of device [ 561.303036][ T8149] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 561.322153][ T8149] efs: cannot read volume header [ 561.934248][ T8143] syz.0.480 (8143) used greatest stack depth: 20192 bytes left [ 563.425283][ T8169] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 565.640937][ T8196] netlink: 340 bytes leftover after parsing attributes in process `syz.5.494'. [ 565.688703][ T8196] netlink: 48 bytes leftover after parsing attributes in process `syz.5.494'. [ 567.619516][ T8213] netlink: 92 bytes leftover after parsing attributes in process `syz.5.499'. [ 568.167970][ T8215] loop6: detected capacity change from 0 to 524287999 [ 568.182060][ T8215] buffer_io_error: 7 callbacks suppressed [ 568.182101][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.208397][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.217989][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.224440][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.243624][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.257348][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.276067][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.292528][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.317277][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.327598][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.341243][ T8215] ldm_validate_partition_table(): Disk read failed. [ 568.352260][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.367842][ T8215] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.392706][ T8215] Dev loop6: unable to read RDB block 0 [ 568.418594][ T8215] loop6: unable to read partition table [ 568.431323][ T8215] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 568.995484][ T5208] ldm_validate_partition_table(): Disk read failed. [ 569.037669][ T5208] Dev loop6: unable to read RDB block 0 [ 569.737123][ T5208] loop6: unable to read partition table [ 573.149279][ T8252] [ 573.151677][ T8252] ====================================================== [ 573.158800][ T8252] WARNING: possible circular locking dependency detected [ 573.166666][ T8252] 6.16.0-syzkaller #0 Not tainted [ 573.172047][ T8252] ------------------------------------------------------ [ 573.179480][ T8252] syz.0.511/8252 is trying to acquire lock: [ 573.185838][ T8252] ffff888024d85358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 573.195372][ T8252] [ 573.195372][ T8252] but task is already holding lock: [ 573.203043][ T8252] ffff888024d84368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 573.212761][ T8252] [ 573.212761][ T8252] which lock already depends on the new lock. [ 573.212761][ T8252] [ 573.223196][ T8252] [ 573.223196][ T8252] the existing dependency chain (in reverse order) is: [ 573.232261][ T8252] [ 573.232261][ T8252] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 573.240836][ T8252] lock_acquire+0x120/0x360 [ 573.245929][ T8252] down_write+0x96/0x1f0 [ 573.250817][ T8252] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 573.257194][ T8252] nbd_start_device+0x16c/0xac0 [ 573.262615][ T8252] nbd_ioctl+0x636/0xeb0 [ 573.267789][ T8252] blkdev_ioctl+0x5a8/0x6d0 [ 573.272877][ T8252] __se_sys_ioctl+0xfc/0x170 [ 573.278376][ T8252] do_syscall_64+0xfa/0x3b0 [ 573.283721][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.290333][ T8252] [ 573.290333][ T8252] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 573.298280][ T8252] lock_acquire+0x120/0x360 [ 573.303326][ T8252] __mutex_lock+0x182/0xe80 [ 573.308454][ T8252] refcount_dec_and_mutex_lock+0x30/0xa0 [ 573.314734][ T8252] nbd_config_put+0x2c/0x790 [ 573.319939][ T8252] nbd_release+0xfe/0x140 [ 573.324840][ T8252] bdev_release+0x533/0x650 [ 573.329942][ T8252] blkdev_release+0x15/0x20 [ 573.335183][ T8252] __fput+0x449/0xa70 [ 573.339729][ T8252] fput_close_sync+0x119/0x200 [ 573.345044][ T8252] __x64_sys_close+0x7f/0x110 [ 573.350271][ T8252] do_syscall_64+0xfa/0x3b0 [ 573.355324][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.361946][ T8252] [ 573.361946][ T8252] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 573.369943][ T8252] validate_chain+0xb9b/0x2140 [ 573.375281][ T8252] __lock_acquire+0xab9/0xd20 [ 573.380509][ T8252] lock_acquire+0x120/0x360 [ 573.385546][ T8252] __mutex_lock+0x182/0xe80 [ 573.390603][ T8252] __del_gendisk+0x129/0x9e0 [ 573.395819][ T8252] del_gendisk+0xe8/0x160 [ 573.400702][ T8252] loop_remove+0x42/0xc0 [ 573.405621][ T8252] loop_control_ioctl+0x4ac/0x5a0 [ 573.411303][ T8252] __se_sys_ioctl+0xfc/0x170 [ 573.416583][ T8252] do_syscall_64+0xfa/0x3b0 [ 573.421846][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.428287][ T8252] [ 573.428287][ T8252] other info that might help us debug this: [ 573.428287][ T8252] [ 573.438723][ T8252] Chain exists of: [ 573.438723][ T8252] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 573.438723][ T8252] [ 573.453013][ T8252] Possible unsafe locking scenario: [ 573.453013][ T8252] [ 573.460479][ T8252] CPU0 CPU1 [ 573.465858][ T8252] ---- ---- [ 573.471241][ T8252] rlock(&set->update_nr_hwq_lock); [ 573.476544][ T8252] lock(&nbd->config_lock); [ 573.483850][ T8252] lock(&set->update_nr_hwq_lock); [ 573.491676][ T8252] lock(&disk->open_mutex); [ 573.496285][ T8252] [ 573.496285][ T8252] *** DEADLOCK *** [ 573.496285][ T8252] [ 573.504530][ T8252] 1 lock held by syz.0.511/8252: [ 573.509478][ T8252] #0: ffff888024d84368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 573.519626][ T8252] [ 573.519626][ T8252] stack backtrace: [ 573.525534][ T8252] CPU: 0 UID: 0 PID: 8252 Comm: syz.0.511 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 573.525556][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.525567][ T8252] Call Trace: [ 573.525574][ T8252] [ 573.525583][ T8252] dump_stack_lvl+0x189/0x250 [ 573.525611][ T8252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.525631][ T8252] ? __pfx__printk+0x10/0x10 [ 573.525656][ T8252] ? print_lock_name+0xde/0x100 [ 573.525680][ T8252] print_circular_bug+0x2ee/0x310 [ 573.525703][ T8252] check_noncircular+0x134/0x160 [ 573.525727][ T8252] validate_chain+0xb9b/0x2140 [ 573.525746][ T8252] ? __schedule+0x16c8/0x4c90 [ 573.525764][ T8252] ? trace_sched_exit_tp+0x38/0x120 [ 573.525796][ T8252] __lock_acquire+0xab9/0xd20 [ 573.525815][ T8252] ? __del_gendisk+0x129/0x9e0 [ 573.525836][ T8252] lock_acquire+0x120/0x360 [ 573.525852][ T8252] ? __del_gendisk+0x129/0x9e0 [ 573.525880][ T8252] __mutex_lock+0x182/0xe80 [ 573.525898][ T8252] ? __del_gendisk+0x129/0x9e0 [ 573.525925][ T8252] ? __del_gendisk+0x129/0x9e0 [ 573.525945][ T8252] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.525964][ T8252] ? __pfx___mutex_lock+0x10/0x10 [ 573.525990][ T8252] ? __pfx___might_resched+0x10/0x10 [ 573.526012][ T8252] ? __lock_acquire+0xab9/0xd20 [ 573.526028][ T8252] ? disk_del_events+0xb5/0x210 [ 573.526052][ T8252] ? __del_gendisk+0xc1/0x9e0 [ 573.526075][ T8252] __del_gendisk+0x129/0x9e0 [ 573.526098][ T8252] ? del_gendisk+0xe0/0x160 [ 573.526122][ T8252] ? __pfx___del_gendisk+0x10/0x10 [ 573.526147][ T8252] ? down_read+0x1ad/0x2e0 [ 573.526168][ T8252] del_gendisk+0xe8/0x160 [ 573.526191][ T8252] loop_remove+0x42/0xc0 [ 573.526220][ T8252] loop_control_ioctl+0x4ac/0x5a0 [ 573.526239][ T8252] ? __pfx_loop_control_ioctl+0x10/0x10 [ 573.526254][ T8252] ? __fget_files+0x2a/0x420 [ 573.526276][ T8252] ? bpf_lsm_file_ioctl+0x9/0x20 [ 573.526296][ T8252] ? __pfx_loop_control_ioctl+0x10/0x10 [ 573.526311][ T8252] __se_sys_ioctl+0xfc/0x170 [ 573.526338][ T8252] do_syscall_64+0xfa/0x3b0 [ 573.526358][ T8252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.526375][ T8252] ? asm_sysvec_call_function_single+0x1a/0x20 [ 573.526393][ T8252] ? clear_bhb_loop+0x60/0xb0 [ 573.526412][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.526429][ T8252] RIP: 0033:0x7fac07d8ebe9 [ 573.526446][ T8252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.526462][ T8252] RSP: 002b:00007fac08bc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.526482][ T8252] RAX: ffffffffffffffda RBX: 00007fac07fb6090 RCX: 00007fac07d8ebe9 [ 573.526495][ T8252] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 573.526506][ T8252] RBP: 00007fac07e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 573.526517][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.526528][ T8252] R13: 00007fac07fb6128 R14: 00007fac07fb6090 R15: 00007ffe427182a8 [ 573.526549][ T8252] [ 573.526618][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.831341][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.013523][ T8251] batman_adv: batadv0: Adding interface: ipvlan2 [ 574.029722][ T8251] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.099138][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.109973][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.127631][ T8251] batman_adv: batadv0: Interface activated: ipvlan2