last executing test programs: 8m54.086750464s ago: executing program 2 (id=513): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e814382db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803006c", 0x30}], 0x1}, 0x410) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = syz_clone(0x48001200, 0x0, 0x45, 0x0, 0x0, 0x0) ptrace(0x10, r2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=']) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e814382db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803006c", 0x30}], 0x1}, 0x410) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) syz_clone(0x48001200, 0x0, 0x45, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) (async) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=']) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) (async) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) (async) 8m53.836142193s ago: executing program 2 (id=515): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000) (async) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79b2, 0x3180, 0x8000, 0x40024f}, 0x0, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 32) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 32) syz_usb_connect(0x2, 0x4a, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) (async, rerun: 32) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000206000003"], 0x48}}, 0x4000000) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x6) (async) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 8m53.800403962s ago: executing program 2 (id=516): creat(&(0x7f0000000000)='./file0\x00', 0x1ea) syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 8m53.726842023s ago: executing program 2 (id=517): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x810, r0, 0xcef6e000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8001, 0x6, 0x4, 0x6}, {0x1f1, 0x81, 0x80, 0x1ff}, {0x2, 0x9, 0xe5, 0x101}, {0x2, 0x8, 0x80}, {0x5, 0x7f, 0x7f, 0x1}, {0x3, 0x6, 0x3, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2, 0x1, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) socket(0x2c, 0x3, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x810, r0, 0xcef6e000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8001, 0x6, 0x4, 0x6}, {0x1f1, 0x81, 0x80, 0x1ff}, {0x2, 0x9, 0xe5, 0x101}, {0x2, 0x8, 0x80}, {0x5, 0x7f, 0x7f, 0x1}, {0x3, 0x6, 0x3, 0x2}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2, 0x1, 0x1}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) sigaltstack(0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 8m53.687455847s ago: executing program 2 (id=518): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r1, 0x1a1c1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) 8m52.324726207s ago: executing program 2 (id=519): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r1, r1, 0x0, 0x7ffff000) 8m37.207729921s ago: executing program 32 (id=519): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r1, r1, 0x0, 0x7ffff000) 4m49.473988263s ago: executing program 3 (id=2410): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 'id1\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, r1, 0x10, 0xb, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8c, 0xa8, @random="587187c103e20294ec653d963c5833014afe51ef81157d5a1c468a58beaa37f5e2088d79cc70ef73af0c7472508be6c20281fd46eaa1848abfb89a4ada4202c08c97d4c29453ffacd518b43fe0979030954ff0e84f15f9c03c91c835b7355521973c6433e9ed3a2b81edf6403399e06d081a2442b5e0c69ca996edb8957a054c036b3bd3fe5a4864"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6c7}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x881) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r2, &(0x7f00000003c0)={0x3, 0x5139a74a, 0x1, 0x4}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) syz_clone(0x58194200, &(0x7f0000000440)="7443a7980438102fc6c71c380d7df9695d8c22bb9518302daef3006a582f21a33bae56fe73d6de5f04a9cb3127fb0b3ddc6d98e41203f48d74b8bc852a3d90bb8b8d7b325a899ffc04bccebc27f9e9ae4ab7984f9b5b5eead5dce2f446500bde798cf12adf9e63794bd87d70d06d9eca2ddd5d6e3af7", 0x76, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="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") writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000001540)="415fe40bdebf98114d2397f71ac02a59c16ad4226217a292b1c9d9018d39215fce27212152837b5c46e52c85dc0a7aa84644d6f1c263d67c4d0df64b2e1f1a6c76b7040abc52a5d3f138a29597c252c443092c2c96f6c436b5ad2cda64ad29b914ea01", 0x63}, {&(0x7f00000015c0)="05e78209c47dd7d700ba9b368e9201d16fc9fa234b6f984adde798f47364f16d5034cddd8a54d08d25b680fd45de906d671aed5cabd7ed0a99b4c15ecc4e7d72dcf03590b2a7c9afbac35b3eb708a7b6372270dc0394fa306055843dfcf11e699e2a07adba7a12", 0x67}, {&(0x7f0000001640)="b635cb43d45ce874e4efa972ebe92d52e11d103f442bc80837ffd8fb0bc379cb5e9fc217886216c81373a78285d9b4add4e31a68f8ec0516aee638d6ab12f61cb65f8d5ff4f9d63f587843cc63c7996d710881b074e817f2e65bc490398004248a4d052d320a5ed1411561d7930f5a40332bca20190e6b3971f7b2c018184ce65c95c2aa0b8bb1c828a51446ebb9a672b43767f8814b3e7d9f34ed4e0dd97225a3919c42416a7043a70b9427b2232d7beb32e31d890069aadbdf1ce46c09dfbc905ee976f53c0111d38de8e5c35b5ba66c72a7c4cc64a7f027f8ae", 0xdb}], 0x3) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000017c0), r0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001800)={@empty, @broadcast, 0x0}, &(0x7f0000001840)=0xc) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, r4, 0x801, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000801) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000001b00)={&(0x7f0000001980), 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xd4, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x25b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2b9f4e62}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001b40)={{0x9c, 0x7}, 0x1, 0xc01b, 0x7, {0x0, 0x4}, 0x2, 0xb7e1}) fcntl$getflags(r0, 0x401) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), r0) getpeername$packet(r0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c80)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001ec0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x1bc, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40091}, 0x48d0) write$midi(r0, &(0x7f0000001f00)="bf4fdc62f856f6a1c06dccfaa778cd5593ecccc1278307e212c986b41f71eafbc3f08186378363a6cf27c498fe95c95a2a3360", 0x33) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001f40)=0xe) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001f80)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000001fc0)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002040)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000002080)={0x2, 0x0, {0x2, 0x2, 0x5, 0x3, 0x4}, 0x9}) fcntl$addseals(r0, 0x409, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000002100)={0x91b8, 0x8, 0x1, 'queue0\x00', 0x77541c93}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000002440)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002400)={&(0x7f0000002200)={0x1c4, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x800}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x81}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7e26}, {0x6, 0x16, 0x8d5}, {0x5, 0x12, 0xb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f04}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x1c4}}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000002480)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000024c0), 0xa100, 0x0) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000003500)={0x28, 0x1, r8, 0x0, &(0x7f0000002500)="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", 0x1000, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003540)='./cgroup/syz0\x00', 0x200002, 0x0) 4m49.394859609s ago: executing program 3 (id=2411): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5, 0x300}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 4m49.383129217s ago: executing program 3 (id=2413): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r0, 0x57789000) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1) madvise(&(0x7f00006b8000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m49.089839754s ago: executing program 3 (id=2418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m48.901492599s ago: executing program 3 (id=2421): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x4) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) io_setup(0x6, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m48.827928581s ago: executing program 3 (id=2423): munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x2710, 0x1, 0x100000, 0x1000, &(0x7f0000164000/0x1000)=nil, 0x2}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000256000/0x2000)=nil, 0x2000}, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="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", 0xfffffffffffffe4f) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000013000/0x4000)=nil, &(0x7f0000012000/0x4000)=nil, 0x4000, 0x1}) syz_usb_control_io$printer(r0, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x0, 0x6, 0x89, {0x56, 0x34, "28a44cc68c39b8db5ec8e4a300619ebc87085fd6467a7b3c124dd837f4ce0c6384c951b0e3639ae20331ffa864c7763e706034fa73e8564a17b6a1547a89a00e2e1469b85e82984d7e9e4c22cb54a109aa918be8f328fc91e42987c14f717639c657243da7d43608a45d7cca95eb9d00"/135}}, &(0x7f00000001c0)={0x0, 0x3, 0x3a, @lang_id={0x0, 0x3, 0xc0c}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000640)={0x20, 0x15, 0x27, "ff6d6f92a853ed490c6cbbc0f97f836d7a6f14ea23b1d55e20b1c9b4023bdf21aec77701942aac4626dd26c8168f042e06865dbce01b0c896208e75f20963da63e01e1c1b00135f3a486e16d8b6911bc9ac16b088b75958edfbaa4d362ad9cece5cb63ee6939c896d7d2bc0eca7aea722cd81a6b72ca073a23620844ff6214fd800c46d9637107aa158c4d48b22bdfcfd2e25ccbc2cae271df6ff20082fd18bd95f909d503df7478d0991da3427696c3738a437912521834f2e6b85d73f6dd7bc110ac181b5b76b886a6e51d17cc5b61776262ea682ec67a48a9e969d32178830c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0xd4, {0x6a, "938a03a3670c0e8c93dce05c5f08a52306ea46e72d6663595715cdad07477cbf812f52fcef491db6c106758373f38c3898e6474c2221b58a2f8e607f965656a77e09e2053dad90b648f41cf2730facd7281d14fb7a1643e1b2635a5dfa8d5aed71a394e7f33b23224113db64e5ad9d1cd234c3ce8ccda3a22bafb69e8ff3e50d5648e5a9eebcec7a1b7803f0384552d1b34a5f45cb0f1a454bc4fa4611a8cb0d3ad0f4431a00231878170207cfedfa4b51698049976d21ae39272d472f0700025db48a7ca2c8615b332af24221a167c2ee25"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x1}}) 4m33.700916367s ago: executing program 33 (id=2423): munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x2710, 0x1, 0x100000, 0x1000, &(0x7f0000164000/0x1000)=nil, 0x2}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000256000/0x2000)=nil, 0x2000}, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e81899c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856435f8c1a46f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf6060599e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8800dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046393169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59ee42b22f3dd7f18bbccfc81c82d92e739b1d3451a1053bee3f88d6aa67b0b428971df26b3ea8e924d25542a0ab16803bd2b8b14a0e54d9ae76cb7edae9a26366ce9d49ac12dbf06824d7e4bce78a25c33246571497e5f564083d556eb6d5033764", 0xfffffffffffffe4f) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000013000/0x4000)=nil, &(0x7f0000012000/0x4000)=nil, 0x4000, 0x1}) syz_usb_control_io$printer(r0, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x0, 0x6, 0x89, {0x56, 0x34, "28a44cc68c39b8db5ec8e4a300619ebc87085fd6467a7b3c124dd837f4ce0c6384c951b0e3639ae20331ffa864c7763e706034fa73e8564a17b6a1547a89a00e2e1469b85e82984d7e9e4c22cb54a109aa918be8f328fc91e42987c14f717639c657243da7d43608a45d7cca95eb9d00"/135}}, &(0x7f00000001c0)={0x0, 0x3, 0x3a, @lang_id={0x0, 0x3, 0xc0c}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000640)={0x20, 0x15, 0x27, "ff6d6f92a853ed490c6cbbc0f97f836d7a6f14ea23b1d55e20b1c9b4023bdf21aec77701942aac4626dd26c8168f042e06865dbce01b0c896208e75f20963da63e01e1c1b00135f3a486e16d8b6911bc9ac16b088b75958edfbaa4d362ad9cece5cb63ee6939c896d7d2bc0eca7aea722cd81a6b72ca073a23620844ff6214fd800c46d9637107aa158c4d48b22bdfcfd2e25ccbc2cae271df6ff20082fd18bd95f909d503df7478d0991da3427696c3738a437912521834f2e6b85d73f6dd7bc110ac181b5b76b886a6e51d17cc5b61776262ea682ec67a48a9e969d32178830c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0xd4, {0x6a, "938a03a3670c0e8c93dce05c5f08a52306ea46e72d6663595715cdad07477cbf812f52fcef491db6c106758373f38c3898e6474c2221b58a2f8e607f965656a77e09e2053dad90b648f41cf2730facd7281d14fb7a1643e1b2635a5dfa8d5aed71a394e7f33b23224113db64e5ad9d1cd234c3ce8ccda3a22bafb69e8ff3e50d5648e5a9eebcec7a1b7803f0384552d1b34a5f45cb0f1a454bc4fa4611a8cb0d3ad0f4431a00231878170207cfedfa4b51698049976d21ae39272d472f0700025db48a7ca2c8615b332af24221a167c2ee25"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x1}}) 3m42.994314962s ago: executing program 0 (id=2940): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x47) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f000030e000/0x4000)=nil, 0x4000, 0xf411119edabebbb5, 0x1010, r2, 0xbf638000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m42.890866702s ago: executing program 0 (id=2941): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300), 0x50) 3m42.890477688s ago: executing program 0 (id=2942): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x340a) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000004c0)=""/79, &(0x7f0000000480)=""/35}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x7, 0x6, 0x1, 0xe4e, 0x9}) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="80000000c2d9b1732cef35784e233b26335f4776945fed8cb9631ae675875edcd013c5e672317aa060d13f588caa636468047fe650e9ceb3dd8700061d26550c0960f6149a36999501b94a5cdc38dd20bcca01f94e05783d8b74a08213f2971d95463419ce8d58db5634fdf23528f95d22624609484d39f1abb75a46dfb430a76448957085b91b3c7f4fd3c843943196f584fdcf193641c42dc8681ce8c4c0a62694abee11cbf00ca6a78ce870acd163746893b2c418421de36e7a18dc1fc29358a4efd355ba600a30ecb37e6551fcd0a1d971a1b32d6f8a92b7d2597e90595abb96201b86003063c8c182a27471dca6ca0d3df35ca0185b7f7bca018090badd52f1014224710030c94592d3d7e4a9d9ed3159fb194bce0280ac3a62e6bc12483c0231917329b47c497417828dde5e853d44b401bfae2e60a5c47bf6ef9c25eb6d43"]) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x420080, 0x0) 3m42.741576682s ago: executing program 0 (id=2943): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000300)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000007880), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000009500)={0x0, 0x0, &(0x7f00000094c0)={&(0x7f0000009380)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c4}, 0x20008000) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 3m42.178642207s ago: executing program 0 (id=2947): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0x3, 0x80008000, 0x7fff, 0x2, 0x2f, 0x0, 0x1, 0xd, 0xffe, 0x1, 0x7, 0x1, 0x1005, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0x40a00000, 0x3, 0x4, 0x10000, 0x100, 0xe2df, 0x7, 0x8, 0x5, 0x3, 0x5, 0x4, 0x28045]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$COMEDI_POLL(r0, 0x640f) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x80, 0x5a, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x10, 0x10, 0x1, {0x22, 0x50}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xe0}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0403408ccd010000000000000000a9", @ANYRESDEC=0x0, @ANYRESOCT=r0], 0xe) fadvise64(r2, 0x94, 0x6e, 0x5) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000180)={{r5}, 0x2, &(0x7f0000000140)=[0x8, 0x7], 0x6cc, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x0, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0x3, 0x80008000, 0x7fff, 0x2, 0x2f, 0x0, 0x1, 0xd, 0xffe, 0x1, 0x7, 0x1, 0x1005, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0x40a00000, 0x3, 0x4, 0x10000, 0x100, 0xe2df, 0x7, 0x8, 0x5, 0x3, 0x5, 0x4, 0x28045]}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) (async) ioctl$COMEDI_POLL(r0, 0x640f) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x80, 0x5a, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x10, 0x10, 0x1, {0x22, 0x50}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xe0}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0403408ccd010000000000000000a9", @ANYRESDEC=0x0, @ANYRESOCT=r0], 0xe) (async) fadvise64(r2, 0x94, 0x6e, 0x5) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000180)={{r5}, 0x2, &(0x7f0000000140)=[0x8, 0x7], 0x6cc, 0x7}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) (async) 3m41.967057349s ago: executing program 0 (id=2948): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 3m26.974999369s ago: executing program 34 (id=2948): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 3m22.342237981s ago: executing program 1 (id=3070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) prlimit64(r1, 0x2, &(0x7f0000000080)={0x100000000, 0x7}, &(0x7f00000000c0)) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$rds(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x46343, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 3m22.268572156s ago: executing program 1 (id=3071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000000c0)="eb8eabf96113eaf2281b594c6948eab7ed7fe2228ebda597174098c21ee4a32ac6c130b99d36919e82f70b78becffdda23492905da3e01c8ed275e738cf000003719b0f9d5933c92693cf93a640f395be8eea86b93e33d33dd100ce3a2660da3b29b855aebce133d67ef68c828c5de606571e238cbb7247e1d8b9d482a89fea4d42ced064b") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0x0, 0x1c, 0xffae}) 3m22.132663025s ago: executing program 1 (id=3072): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000540)='net_prio.prioidx\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000500)="99", 0x1}], 0x1}, 0x4048043) r5 = socket(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='veth0_to_bond\x00', 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000000)={0x200, [[0x7fff], [0x2, 0x0, 0x0, 0x0, 0x0, 0xecdc, 0x0, 0xda44], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0xfffffffe}, {}, {0x0, 0x1}, {0x7fb, 0x7fc}, {}, {0x0, 0x1004}, {}, {}, {}, {0x4}, {}, {0xe}], '\x00', 0x0, 0x0, 0x0, 0x2}) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x40c5, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xa012}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500030000", 0x39}], 0x1) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x74fc, 0x0, 0x1) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000540)='net_prio.prioidx\x00', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) dup(r3) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) (async) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000500)="99", 0x1}], 0x1}, 0x4048043) (async) socket(0xa, 0x5, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='veth0_to_bond\x00', 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) (async) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000000)={0x200, [[0x7fff], [0x2, 0x0, 0x0, 0x0, 0x0, 0xecdc, 0x0, 0xda44], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0xfffffffe}, {}, {0x0, 0x1}, {0x7fb, 0x7fc}, {}, {0x0, 0x1004}, {}, {}, {}, {0x4}, {}, {0xe}], '\x00', 0x0, 0x0, 0x0, 0x2}) (async) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x40c5, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xa012}, 0x1c) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500030000", 0x39}], 0x1) (async) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x74fc, 0x0, 0x1) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) (async) 3m21.923313757s ago: executing program 1 (id=3073): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x628080, 0x0) pidfd_send_signal(r4, 0x36, &(0x7f0000000380)={0x41, 0x6, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./bus\x00', 0x6b0682, 0x147) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x5, r6, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa471a000) 3m21.41021836s ago: executing program 1 (id=3078): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000) 3m20.989934552s ago: executing program 1 (id=3081): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket(0xa, 0x5, 0x0) (async) r1 = socket(0xa, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/90, 0x5a}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @multicast1}], 0x4c) clock_nanosleep(0xd, 0x0, 0x0, 0xfffffffffffffffe) (async) clock_nanosleep(0xd, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)}) 3m20.732069989s ago: executing program 35 (id=3081): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket(0xa, 0x5, 0x0) (async) r1 = socket(0xa, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/90, 0x5a}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @multicast1}], 0x4c) clock_nanosleep(0xd, 0x0, 0x0, 0xfffffffffffffffe) (async) clock_nanosleep(0xd, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)}) 2m56.714919322s ago: executing program 6 (id=3256): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000), 0x12) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r3}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) 2m56.600055176s ago: executing program 6 (id=3257): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f000000d080)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="d5024b880319e7dbf8dec24004493535ef76b0f3ae45da08c17bc251c3a7b2d5a7ebf5b80e7addcb495a", 0x2a}], 0x1}}], 0x1, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b00", @ANYRES32], 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6}) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) setreuid(0x0, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000002302000200", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m55.234296819s ago: executing program 6 (id=3264): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) close(0x3) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x0, '\x00', @p_u32=0x0}}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "0200", "066580001e00"}, 0x38) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r5 = fanotify_init(0x2, 0x800) r6 = dup2(r5, r4) write$nbd(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="6744669801000015"], 0x10) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 2m55.161088843s ago: executing program 6 (id=3265): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x4a1, 0x40) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x4a1, 0x40) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0xb, r0}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x9}) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) (async) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffea5, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff00005156d795eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) r6 = semget(0x1, 0x4, 0x200) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000000)=""/209) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000300)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x40) 2m55.047043894s ago: executing program 6 (id=3266): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) getpid() sendfile(r0, r0, 0x0, 0x7ffff000) 2m54.118786086s ago: executing program 6 (id=3277): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x8, 0xffffffff, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r2, r1, 0x0, 0x7fffefff) (async) fadvise64(r1, 0x9, 0x9, 0x2) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de2842110000000000010902240001000000000904000001030000000921000000012205000905bc030000000000"], 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="e366ec09000000b2b16da7"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 2m12.831893985s ago: executing program 36 (id=3277): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x8, 0xffffffff, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r2, r1, 0x0, 0x7fffefff) (async) fadvise64(r1, 0x9, 0x9, 0x2) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de2842110000000000010902240001000000000904000001030000000921000000012205000905bc030000000000"], 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="e366ec09000000b2b16da7"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 1m27.835459341s ago: executing program 5 (id=3674): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x501, 0x8) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa004}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206030000000000000000000500000014000780080008000000004008000640000000060900020073797a32000000000500040000000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) 1m27.810411524s ago: executing program 5 (id=3675): move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, 0xffffffffffffffff, 0xd83b9000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m27.731776297s ago: executing program 5 (id=3676): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m27.728706833s ago: executing program 5 (id=3677): prlimit64(0x0, 0x9, 0x0, 0x0) (async) prlimit64(0x0, 0x9, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x4) (async) r0 = socket$inet(0x2, 0xa, 0x4) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4(r2, &(0x7f0000000100)=@isdn, &(0x7f0000000040)=0x80, 0x800) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) io_setup(0x6, 0x0) (async) io_setup(0x6, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455cb, 0x6) (async) ioctl$TCFLSH(r4, 0x400455cb, 0x6) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000365000/0x2000)=nil, 0x2000) 1m27.662805533s ago: executing program 5 (id=3678): fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = getpgrp(0x0) fstat(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000002500)='./cgroup/file0\x00', 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="140000002500010026bd7000ffdbdf2509000000f1eaa163a6d83f8f5277"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000003000000000a0010000800030016"], 0x1c}}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4211, r8, 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r9, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r10, r11}}}], 0x20, 0x40044}}], 0x1, 0x4) r12 = socket$igmp(0x2, 0x3, 0x2) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f00000002c0)=0x20) r14 = syz_open_dev$vim2m(&(0x7f0000002580), 0x29, 0x2) r15 = syz_open_procfs$userns(0x0, &(0x7f00000025c0)) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setfsuid(r17) statx(0xffffffffffffffff, &(0x7f0000002600)='./cgroup/file0\x00', 0x0, 0x80, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002480)=[{&(0x7f0000000140)={0x147c, 0x29, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x27, 0xd2, 0x0, 0x1, [@generic="1b044fc55f1722d267fe2fb1e0c8fa5cc8abf89f69c20a", @nested={0x4, 0x62}, @typed={0x8, 0xbc, 0x0, 0x0, @pid}]}, @nested={0x1be, 0x8f, 0x0, 0x1, [@generic="2a83763a92b49c7f6534f83491fdbbc4aa7ab2994090f5a9f8c93d84bdd7182f845801ce9589de0eaf1abaadfc51c98f182adbc00ec216cdbbed14c03eff5db57bc8dff7c5bb16b9bc95ffaa4b4f8f274e3887e462d3317857b22b21f872a09b381f8c4ff32a2467009d214370b53be173a352d04aad3e38443d3c2d5bb7c74699d62945afa7af0398618e836f8147aa9cc81a7bd892753935739b0851a2", @generic="d8993c354277c14be27b3baf25e2a9e0131c6af523530d9f5e8e822e8757084790fca23f94ca99a5b6a4e683522b30283f9add473f97f2ad5b8476709e24c9b412f085a406dcbbb637de26f2225e91f12e8fa3314830e78068c049bc881e6a04319402d6c74ac0f6d71a3f9fd6e41310af33a81d66998357f65218f358c83c03dde739e1cc0b39", @typed={0x8, 0xe7, 0x0, 0x0, @fd}, @typed={0x8, 0x14f, 0x0, 0x0, @uid}, @typed={0x35, 0x117, 0x0, 0x0, @binary="0dbbc3b0dec0b6a9dc50b15da6ebf75ba3bff7c5975ccdb1bd2ce3df564a8a3fe93242bdb542d5d54ee2a227e61564f664"}, @generic="4f3efe3def5ee1eabcabd4a4354eee5fb833aabc38437859d965ec833ad6249394ee313050ee00b9078273464fbddc5a62207f81911657c22c5c0430ea3ebca82facfd0530cf18f15c", @nested={0x4, 0x7e}]}, @generic="586daaec5b4fbb1db27caf67aa7b17f8176ab72322c1956b461a3985d4decca00882b36c907383ce7a259e43c87a99ee85", @generic="c98fb904471d76905beb44becbbd4b7835d92b809b27eab8106d31a3333c08859ff4422f06ab94ff3d1f8bf6a154e786ef8287e96d8f30c557537324f053527d856796411083d7802fb687", @nested={0x177, 0x144, 0x0, 0x1, [@generic="cdbd0b15d77c853f3835995574ebcd645052ed6534539466338b4a4f4f73bc312d3c2bc6838bc7249a08402bb110b4b65eba42ba3d23f0aee9749ab9fac0abc34c97f4b59f0553a729adc50094b32554adb516d0ed8ad3548d73c0aa34d6030e22e26d2b891ecbb7851b7f5a808fa9d0a0b366bcbeb01f5a6b854013df61fa9fb5a9253f893dd7703182de2ea20155082e5d951077e153e70ee8b986f86e38135cfb", @generic="951d61759d64a0987bce1e2d670cc9faba5910ffe2d4bac2e33f91e4f88c6eaaad18db239a6b7b760b4c1056a65d24b64941979aff1993411f0717ad133ef06155de8cf73b93198e2f229f4abdb74b17aed069828b94e91c67d8d63f535b185860f4a2ff504d3ff3a48a4767e3c437b06b684e6705b7eb83c852640be972887515c1f6b574a92e49fb2cfe6186337feb6b09071815d626513bfaa9b390c8fe7ded01b0649250eb6b576797baa73ab4ad649cb074da6af1e3730970deed9f4813ab3f152a63c2a34d5cbd18721947e7d038"]}, @nested={0x1090, 0x13a, 0x0, 0x1, [@typed={0x4, 0x14c}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x6}, @generic="42700939088a8490d68857492fbbd3d90aa54a61a6c84be6108a9f11a3c092a9a889930b6ca66961c6b6a37ca0031bc2", @generic="26982988fc770121751cceb3f9bbbcc0aefe883a419d82f20b906ad892f987af16e80954c0e21338513a9cc336b44b1b4eed64844f679a3f9fd7241d3f1a342978bf8fcb75007750f5dae4a870d306fafa1a8974e7634808fe7f1769a87ca4f73117b78b5cc4b9d9a6a3dcbe5c859e7c6d6861bed22ae2464ff2306c74aa76c21586a1f93554c5bc113132a4d4e50e30deddb0d85ac3cc52d39ca71173a075b21117098dea549edfcb72985cf4f941000b8f4d264c45fd179b5e52a3e88255deb2aa7bdaf10aee44ae17156c3da8c9c605c284479d0bd806cd93291b2ca3021b3d100b98a77344b4e167fb7258f48900caf04f98ec9976475ec1c21bfe2ee89c726d66461e0aecf52cb977744d45a6ac8c27ed31b6590c1298566fb5c2e27543b91d379b963ce281c3a0aecb4e2f5d284792b6288127eedd320b93adc2198905dd322df66947f308ea4cf00040da86b0a0830c9f221b5d9b073f1c7c4270ec993b1921a122fba13969535ea360e40fbe85603a56d61a7c04f155734640e7198899d44038fe2586fa9fafe6d26cc4f7b6b6b911e9611918fc6d7d99800bda9cfab3a73015e3443555c8e95e9ec7e84aa3fc0d4308ef71871dcb367ca07409cf67514789f7dadd0dfb95895f03077bd340490a1212949945a2f213b4c5e01713bbaa78ccf5258aab201a78d33f469065a56899cd240bc0ba2b8519c0ec732d4e07993adeda5348f8b1a952c1d0d622e6d36c8912da3fad19feb8f1cd727813b6b50b7e1743f3ed3a15685ff5a0f732ebae4b43a2c7711f932cb17f7487d5f37abfce0fdd9c380cc7ff80f39e3c554cac9471849b8ebc20ea6fa9ed67b3c8bfc4ac48c90b0816243dd2b8d6f21537ff309b97c353633ea4edacc9d32cf09ce89326a68eb4fa39ea52cd3e8d18aafb8b026876fe598f9f986425d2c4cd26eda1ed6f75458586e9d86a0ed751250a5311d496143d1b18782c4d34d4df52071a6cdf7bbbb4999fcda84b2ec0a8f5d92512863cd0b3065b21bd235dedc5f6d4ad7e3de8c7ea0447675a5657d324b889abef48f2995b5027b8f1dd7fbdc28a46dfbb4377bc7227b878a9a0859e1d75b4e5b42d5996e6612b1f50609310fbf5a9532b00997ee76404e42df2c716cd5d0a1b42dabc7790c6b54fcbf307a9927b2243fa4d29be57dc493bb6d37493acf1cd7c5ff445b01da8c936af5325c1420f9c6b3ee81f02d8caba99a81517292062b4f86e6b50d436fac2622336d529288cb4f8ac43eab8cf5eea9f2126b04d779f7a1ffa10dbb95cb6362227c785d8d23bdbc38491e09aa3f4c3d793a14e71c2c40d0074518df381e4a7a24674714ef4ce687a40ab0fb036de3d131a65b7873282b3eb2a2b65dbf50b70ba49ad3c8434ee36c03f9a201110eb0480a7b8c30cd4986298a434f4a1d8d465607f57c3d56da4c46348e9fc99ca70346bee47a5681b60512f295f4084ff7b172a00c66bbc1bbde9beb51b7fa120de3c082d4cf51d6ffefd24266c4aa490f9f99d2ad0e4dbcb933e222ffe84344485eb40faec0e7f7cd1c1b3a9a0b6c38b7be70af5e2588d549964faca678d808ef8fc122f61fc778213e5bf521154a914b20968b2a7ce08f792dbc7af2377cfeb79eeaf9c399e351fc884e7e35a8e2d5b97d009334dd72fc2ff756d9ab9deeb96f9ef42e9274879770f9027701903653532b1e3c2034a3cd9758dcdc5209a57ff8afbcbdf192c4840090567abdb43d304991de200c72f8bb3221f9b7f51d1f390ef445a0d16ecca9ddee9c2c3a7101e6aa08b9ce5cd8a87d9fa86048614aa3a265fbd3dca8e2f15fa78f8d637dffe39b5e2e961b8221b85ba227bbe0ea41af41e9f48c0752f8713b2f4e2fc45f2eb33a77b00f92b8a39bb1344ab7c620e3335a8d76053f381a40993543f2d6a2197e0856c3ddd1d79a9d00ac2b07df6205c28eb44f490aa7b807503097e182824fe74e1b9174d72c371f76d2b6610c0eb8f3b0d1997375a7abd9c6502ae1da16b9b0795a0c9b9a3a3e230b1410c7e350c18e60aa5d287dda8e184218f7cd561df69fc9360309e960ee88b88147ace10901bdb2ff0cc59f9d92d6b9e8e6dfb3916f4d052c1ec1f01b54254d4f501b2aa95941232ef393f08b115a72a2e4219ac5a0a2eaac7126c2292efbf0578a26d53a442b4122e771e3e343f4c4ce7fbfa5514072c1ece0203b13cdc23e363f2388147903418f2f603c770aa4d076e0ea6e973800f008e5a926db2b4bb02e8b522976503fc1fabfca7b2ef960e5375dc50b056b00c090e37e0abb75611ad58b8871666bb6251bad72c24c3e1c5305cf1dadc36a45ca3026ef55716389b33edc83334a8c61e521ec2459968e0e1f66b508d7c0a901f3507b6c1073f56892fa325dd1c26a0e08c81e0c3a6b2235e0273f5b51eebd0a462f1afc8693536361d868a473def5ff8f590735f0092866b9e6dd3cddf64392f8d39587e00c7e224fd7a561d1fb0e6e04a40718959a0eb611d58dde50c39c3efaa03f96c8ce0e0d7a7a09bdcd38b45a128990afb946a0c67ce96a01387560a78e7c3113a22897118c1dab4c01bef6b06b61a99e11cde841d2ce8cb9e14c41b95ce36d4f6caf6fb5e7027098df7bb6711ff44e867a95a7d519aebaa79c9a7836e9cab48e1753c777008d97a63645a90d76cc64c016fdacc5189a52ef06714a070443a1b904e40489ce8ac1a007ff72bc2fcecc2e425de2aea9016e90d2520db6d9a5218eecfd323f325a2e7b29bb03f38f6965baa42ab49eade6fd190ffb307264cca5efe3d4f822e21b3f0ebd57b14bbe957825a43e9ab393f9c9fb26c3b6341b20ddee622718af497057e93b86ea047492570b3f9be634827ac97f788bbb77b8013fa152d3bd19ca329d612f22520cd947c8ad6146e6502662375fdbb3c88d9025838a00a7cf6947b4964b0a3a2323968b31d0b134ff410a72fd6edd60fc0bec8a33a9b975f3358132e9a7533a8d74d840775dca7e09e258cb241b6e802e911d812b10bfa981982ca3d59fe1e0b5c969c14ca8716b488c35703d4cf776c86afa56ecafe3e4cfdafb47cdeaf38f749b9633a3ee200f98e500af652047400072b51567f3097d99a2cd345388072291cfb1996facadd66e1776902f397094cbc49472e76066198bdf64296f6e7f7ba1558e024f783c11f15b38a138dcd227ad7b8bd584dd9717c85df2608d0d45b325ab55f7452784e0253815fe792fb9d488ed64f00e678f34f4793ec4c89b31e299c44fd61d7a0c7519ad30f98def5fec2ca82bf4445f30b4aa48388f16ab2ec1a357d6a75b7383291e894024e164415ddd2c072c0321ed2f674f28afd4cf59dbcef0afe392c933b82c150b0f114a7aff79881507d7402bd88b745c6288f14412ea411abe20e457606ffe7186a51e05428834359ae4eec1087cd4a9e0cc4efbfe3723dca3f4fe7dcc2692a987f1bf273538c17ef373109d9fb57fe7814844abfdb1107703abd288a142b35187dbf0228f698b9a662786f0654d6ea51e36557f29a23280f9330e6e12eea479c70875efc972b5a92fcb445c309bcfd5fa4130dc44d3dd3a4803d72b89b6716f50f15f6f4379ff5077762214b72f6792347992eacdd81846caaaa28243c392502bddc8867254fe80f5c5f14f0497fbc86ff84b370127eb4d9419f89ddb684e41f27a4d6ee505ce78a485bdaaabd857f9a81e2cfb3b6251be5e3732bdc363f9b9e21f5d5b15538701df94f5acf0c1e6479870407cdcfc52dfeda538870228a1e693b264b50c907a66ae38319c26c9b7b317d1af5838761ebf777ba623b0497747974fa9bff7fa13ae004dae7460f1a7d5933f54f9b4aa0111f6514d9e97721e3b1b9ca6c4ca8ede9192145b8c0a497f573717bdd0d848c35ce70e98e248f182eee26b3ddc37949c996d9916e32dfde9ec47a1fbf5545508f95d0dfb53e525ac6f3b2a9880dcb798e2923b1d44c53c83a5b2e90881f1132b98b024140872dea5f7b16dfa37b6926c8b3e3b10cc1e1327bbcf9a5d4437d7e2f0c06df203306fd09cf14cca62d47ca3b0c261a10056295aaeceffbff084905bb5bdcc0aadcfe3ee5662d7d8018418c741bcb5b667b24c92be827d513fe4d9a35d1f49a16ab6adf2dfd587c02c99852847143cd5fd314a5130fd3ee12668646711b211cb6aaaa019dc947c22fd25547d4ac29958d59aff62172c56a9858ef89a0740d981569075fcb6e6ddba44633ccf18f9367d261a0bde70c41cd0b9bf1ba98cc2767bbbfc08cb05fc452d00591c8e6e31d5cf915f2d9b63ab21572c036b61408e6c06e309c09771edf6c9312e25d40c6c7d9b8b19650d2db78fc68631ed2e9c8e74b3ce97788e0b81a30b87eb7cad91b047148945d183c43e06ed13d9f91365ce3ca933aab29cfec4357a16b6fd8102cc14ca32aef035daee32191f46a1b6fbc4999d3ab6c788bba01e6f036a83e0d32befe0c1cd377622c005b295d9ac6f91fc6f47fa3b44acbe9c5b03d394d36aa9131098b602a26662d810ced14474c2bc510ccab1657f8c53ab3aadc63c26dd0ba77fcc77330299b1fab1775e6f8712cb71f5572c3984b9543679a1bee905fa799c4676822876cd9537274a9740b60cacbe31cd7f4ecbe2623328c1ed5a297247c504029275a3bbd2e79bad557677dbf5d9e7f98feac67532a354d15f262719719e3cd077d4b1a63ab132e07deb3f47da5dba0c230d379028ba5e549115108eb0b0da00ce0816cfc5134f83e3d0aec9949059296d7ad8c0662f6be314b86682810ee51fc72184aed490c03ade7bcfe6ee10b778bf585b6f70f576b2f5c6ef945936d1ee52673a7d4b94a8a05016962c90f74fe85390732f2780ca3d692846379ddd1d2b661d53007c58e99f3bbb77d42b071513c915d34f67bfa283935df835852e021d20dac02e4b536b3b325687dc9ad7a21d9c5b21590c89c2b2fb7726c8cf81386d0978cc333bc187b996988c6319b34da12d202b56931d0753e41c68fd10d9942f0ec9affcef91145f3a41b14b3469906ebd328f80505f0a98c2a9f3b29e9f32bd848f5ced91895cda5047c02e6a4b1f9370fdd1788d186b8743baaa484110dad0263edbb864359b1803acbe9d51372c95fcd6c31cbc0a405fdcf05f1d0b6a6fea888b164c7b877697e68019b710fd15c82997b9068ccb69f169045fdc535bbc428214657916f0bc0cf4e2e57c12ddfa9085cae545fefe90308bdcc427dce81bc93e3524375d3e7dde07624bbbf5ca7640d628aa41d4b1c30056393c8aa04fd147c2c94bbe3d99d8b1ca4504f40a2ebb3cc3f8637bce69b27e95c6376b087ab863eac3d14429024c689c97d6c8c53ed922985e258adf86c56b4e79f325862a4bf3b3df968e3eb3dbd8a868df255e2da445848e55f3a81a4eea8b511ecce2b42617a1bfdc417b11c668f859bcbf3493e65ee70938a1140b3b0bb3664239caa0c1a1bbf7cb76afb452f2d809b7470672de5a1ee2214dfb8d0778623d2f06625549bf1ba092960457a795d644cc54f6e363efd55ef048ffc068d5be1d999b455ddd8daceb3de3b7cfabe7ec984c2a3a0d57df5fc9b48e3375555d120561a63cecdec8a89c8aaa594e7284113aa658c82601794416f58a56c92192967de4dcbadaea4d626ac77ee294ec918c26101a9b57b880a01e38cca3a45cce88a9e95e2aec1d1d940e65bf10770a12853be2d85248630c045de308d4e34fa580e2df64a5d25a3f3ffb5e91d3b9260116c65e2e3cab4e1519972efe4dd1377f2690ae6443503ac52044ac915713457131133db", @generic="1b272c318e8cb4dd4c1d02f228c406cf0efd7b34c6472abb4d1a44fd95bfd1841eec1e74e5e93b708471f30f6d8209aa1ed13cedf00ef0fdc31ca2378637002c3f6f1ab20e2e50ee07a4fca0"]}]}, 0x147c}, {&(0x7f00000015c0)={0x19c, 0x31, 0x8, 0x70bd25, 0x25dfdbfd, "", [@typed={0xa1, 0xa1, 0x0, 0x0, @binary="0a2c2ed5982db9f6bb946b4a99e5f747057a1c3381099f45a537111dd510812a02505c9c09303d52b61544a4c965595dbf26366479a4aa505975fcd6fb151a16e25fc3c157ca2d8894464bdb0b795ef5963cfb07e11a1412885404742c15707cc9ec53f2c133057ea4d3353a6c97c3a5340fe7e0df310ee65455c981692f1c43b84a8830e8d0ebd93c07b0b0981eb37787e36245cf8ac86440741fb07a"}, @typed={0xe5, 0x15, 0x0, 0x0, @binary="bfb4807034b97655f86490c05ce58757d027f8fb0bfee664505d4e0366b69c2871b2dfa6792d8e06b17961a65b6ddecac04bb77e8c40c893bfeda8887f1a7e3508d1d585e2f5fb806949806ad3646f5037f5f262ef959dde700196efc603f796da5db470f8628d7152827189e7c3201bd9e6c3f649440c54e952717f5e8e4a343317aa31f25ac3b7a63975e3fff131f1923e63472ede1f63c70ce26ea145993dad512bcc367131452e90ade253f6333ada32034c8d085b22bf5c1e765b846a2ec0968d557d4fc9949a01979859b2f592fc8304845925a7dec46369e933f2721e90"}]}, 0x19c}, {&(0x7f0000001780)={0x2f4, 0x29, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0xf6, 0x4f, 0x0, 0x0, @binary="1d521492dd999c5a1fac45e259ced46b35e39feb6516e52b9a5409a108b080b199a609f3b7ac09284ffd9588d28cfb6a7e9d97d5807f688c9a8efca504b3e1c55fc41eefc9df8bba51ee686c884849588ca87a6356ff0320e81a1f682cb4f30587d721d01230e8c4717ec2e1a39ad14f6cc7ee68f2eababc968360f87382576759fdc33b0ad61a011df44e5d9be52ce1b3c7ae5d709de7f31414e4c3515867267a9626bb69419e5f1bc6be67d90f8a9f847317fa93928377554165bebb00bb7b4b96a60e8080a02631a432d4ea10c73937c5e85ee2194cde433e08133a8c676ef58b2468689d1a9c5c50142f4ba61880081a"}, @typed={0x46, 0x37, 0x0, 0x0, @binary="ef691c4f3e2fe4ac9dd45a0b9d1cfe2c8ae9d83812a8833bfedd54c8ae249eec9e13bb2e1e606d5b8324f57a44b7316232c4bd6a3e906b6d1f885dec13001a1bf804"}, @nested={0xb6, 0x6b, 0x0, 0x1, [@nested={0x4, 0xe5}, @generic="c5520f9f1a8084a386623c64537d371d851fc8dc65b7667d9afea137993ed3241e4f8164929a24457ba8ba7e79a93f0ce013f1b75f382e82a5310556844b9d5f21c10b3664d7a6299ef20d7b57f4aa04aac749ef41842e071f1df6b3f0e28d4fa52af92b63854869613ea0e76dc9c7c0c44c0635ee93f6c8996944374660a68831c51b0259789a0d173d017c13ea25ada959d3ca15c020575bda99e2482d093368267fe1f2b20b6628b9112a6dfd"]}, @typed={0xea, 0x10e, 0x0, 0x0, @binary="43352e0c012f1982310f42fddff06de6a4e810463accb4ad3af0ce7607b959b85e4636c7af72c752b4f3362f0f4b9955e3af580481e1c36ec6cb79f002aad98692c081d94ecbb3f28e7312ec459a543064c40893277ad5fe1f6f099c4767ffa787d82636a07a760bc159354707c98697d45bf7aa4aece22f31f9c6fa11471807a6e41194f4b71624561d4c85bcc0a872b30ae8690b64c20d5109809ef52d64721313305eba4e7719a5ff195005bb256fa46ef240fc48982b73b05c4cf95c7ef02ac03347a36d8eec5632d26f8345543bae032416f2fdb62127f87db524f49027cfe9ff02c0fa"}]}, 0x2f4}, {&(0x7f0000001a80)={0x1c8, 0x15, 0x108, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xc0, 0x13f, 0x0, 0x1, [@typed={0xa7, 0xe2, 0x0, 0x0, @binary="586b91a315aacc8d91dcdf2f7ae1ed64aa3edcb16083586d52b2001a23b3d7e31bb720e756765aedcc1ef64df83ddc67ab2495c8d5530eb98db6b7c5677412db9e27fcb5c382cc7c536aeed1dda8d07ec473d77337a61f32480bab6507db33df69b7f7f5854c90366aea299531f75aa9c68cba40df8b21795cf70925e446b1d76bbc0349ab9b909932f83b1f05de9640fdbb879ffaf894c2bd74a48ee3bc71ee5917ca"}, @nested={0x4, 0x13a}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x35}]}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}}, @generic="94b81cca1b6e470a9e54a0aaf64ade3c412eb302eb82cdf3d85da759599711f667c3", @nested={0x87, 0x116, 0x0, 0x1, [@typed={0xc, 0x147, 0x0, 0x0, @u64=0x8}, @generic="3abc49f3f8be4f358aeacd99ac89f9cd4e0fcf294c1f658a1502af7a3c1f00c8836c73a164e052a5e0566d21c8024402dcb523919b07add4bf70c81a557837caec6fd3cea7accf6b61d07b170d110fb9b5dc87bf6a6c960c270e7144502a0d", @nested={0x4, 0xc8}, @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @generic="e96a5ee279aca20e9fc7dc1528fcdabb8120996e7a44fc8339d0930f642565cb63e0b895effd4d5cd86b96691a2371cd56fe7375d97ffa"]}, 0x1c8}, {&(0x7f0000001c80)={0x27c, 0x26, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x9a, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="43599ad1f1ab6f50be58caf6e94ce8bc90e9ac652f2537ac8d42d25a45e8f81285ff1646e90d0f1fd1bf255c758f58e6b2ccc8ce08b6ed3ab93d7baf4749ae9e325fbcaf7145ac4544bc4be348f5003aaf5adf2432579611f645468a8520f32088a72a37e41022abb1c364ef52b746d604d92f0606ad", @nested={0x1e2, 0xf4, 0x0, 0x1, [@generic="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", @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0xc8}, @generic, @typed={0xd3, 0xd1, 0x0, 0x0, @binary="41d609ce3868838841360a9ec48a50b0dcfb3c1bf3c5aea6e4cd77ef3dad6f4ad2bd49c6cbdeed221a7c0ccf7184ac691b97a5366652c8c4b6647f7deb750decd33bc3f9afc026fde347ace8f023a1252aaa80a727a2a4830e32bacef1815f124d25e2ae5743ddbd8d33b96603c5acfe5dcef00dc96038f5ed9390f0adb683913944d2961ec33d8ab9ec34325011d4979f15370aaaa5b1cfa37ad4196ce319b74064e869916141004d96b342f57818bb9166e661d01447d0e22ce69b3eb898e6a4d5a6c71bc99bc32dc16a22fb6e46"}]}, @nested={0x8, 0x8c, 0x0, 0x1, [@nested={0x4, 0x53}]}]}, 0x27c}, {&(0x7f0000001f00)={0xb8, 0x2c, 0x300, 0x70bd27, 0x25dfdbfc, "", [@nested={0x3c, 0xb2, 0x0, 0x1, [@nested={0x4, 0x18}, @typed={0x9, 0x22, 0x0, 0x0, @str='ext2\x00'}, @typed={0x9, 0xe9, 0x0, 0x0, @str='ext2\x00'}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x10}, @typed={0x8, 0x88, 0x0, 0x0, @pid}, @nested={0x4, 0xfb}, @typed={0x8, 0x118, 0x0, 0x0, @u32=0x8}]}, @generic="a2bce42ffe15374d58459c0532b43536ed8f2f908a1539574089b4c3b7f20d27f2f4b668d146b66dc500babd6dfcee5b4cc7d043cd6a8938c43eadc3b5b0520f681e651f96f0b226a1aca5ebf59af19115f92f95", @generic="9140e113c9", @typed={0x8, 0xbc, 0x0, 0x0, @fd}, @typed={0x8, 0x91, 0x0, 0x0, @pid=r0}]}, 0xb8}, {&(0x7f0000002040)={0x438, 0x1d, 0x800, 0x70bd28, 0x25dfdbfc, "", [@generic="cd0a1bb47e4084795ec3503295bd6d5c492a4ae84d49b4e04a3d85b8ed0cb68066d978f76e1d1bee73e62e1b92f7042714c918eab4d8b4fb4578d58eba924dca13d8835be1748b1dd9106e0c80ccea7d75d9f972ae1030377ffc5ae5e814151ba9cf4aeb1d10fa366405faf2d3cfdd7767d8a86e1e3600c8020f033b14b36f", @typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xb5, 0x21, 0x0, 0x0, @binary="858247cc5e70dff92b6d5977bdfe8d425ba14745af613dfeeeb1ea891d5cf33655fe71f9949c22d070f51f36c3d288b1370a410aa437f7ea09042948f857040e6b84fa5b16476cea409395f59bea9aed7dd519323423d4cb7f6a0710b13addfbadf40d17ebda5921467ee6a7e65972c957bd3c8c71b7302ee5e80d0a2c0ad46bcdf1fe412ccfff7f6f801d624e4b48a4e2e4c4ec78232b5fa276027379325691aca6bb884977f45a16a065ff25f1c23072"}, @generic="5e6e65968c1c885e2fe2be5f5ab1b99f89bbff2f8372fde17c27d749efd27f6ae760cb96de9d0ccd98b617643366fdf91c381bdd53a33be5b0348dd75210a6cd9d5d1a9e8da6fd441520d354465737fc85005f4c345c71a6fabb31fce51d39b64b0b7f10155bedfca37aa9fa8de2b593f234249e79b8ade7096fac3ffaae575315de97e813", @nested={0x118, 0x87, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @fd}, @generic="3d50fcb45abb818b9fa476c5d720196ebc1180003f476d94013f35ee2b", @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@remote}, @generic="6e9ddb6460aff813e29de78ed664ed8e971f25d63ef2fc75bf95dcc2e498fa641f5718848bdcd093b35649d7a499b6726a35ddf4e455a9cd9341fe7cf32af0de5dffbc31b6c922d9f5ba790c0947a8fb6e7fd4f984e7707eb462e3004f415eef9b585a47fab1709411f4ad7f304ee83fb2f561b1f06b0d3589b0c30c1033348532ea766e88ab0e73e8c18bf9ccc7f567673305fcb9321d7187c2a48b7ce8022d34edaf117a02e92bcb740b525169ab18b55bf54328d98d6c1dd21dbc494f384466db3271728e0a53c53fffa6e962c9fcd3a157551219c29fedaaf0df70a6a9e8d3288a96c7b9b2"]}, @nested={0x70, 0xb5, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x7e}, @typed={0x5d, 0x65, 0x0, 0x0, @binary="06fd214d21e1eaedab5979d8b3bbccdadc97633d6bf5f419bbce309ec11f953d17ae8f614b57ef8f730f93b1b4c39ccaaf1c97eaff3b0965e1200d43e7c93be2d3f745c3ab784e3617a77ade00f15cd333b9229747a7ecc864"}]}, @generic="26be9b68077ac5dc99c895c6b1155dcf66fb883a7eaf0bbae3a1500dfba5336ca3ca80ea547e8194f12332347f2b30ffeeae99ed7b4e676d1495b946ef170fb6c3818b6f86b866a534ee76d297cb15731c5160f40f5af505e1c4f6d0fe198c4e69e61354ed4099c581d400a4896f8a6999a9dcecc48de06033dfa89aab23a6af8c78862775ccdaba07532cbe20534a443ced70d36de621de6264b9c5bc48fc47f9e9401c86cbb9144baaddf1f6c6952c6bb9f26a1af3c7a876b729af6f27955e2203e1e1bbcb3a", @typed={0x8, 0xcb, 0x0, 0x0, @uid=r1}]}, 0x438}], 0x7, &(0x7f0000002740)=[@rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r12, r13, r14, r15]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, r18}}}], 0xc8, 0x4000000}, 0x20004001) mount(&(0x7f0000000080)=@filename='./cgroup/file0\x00', &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000000)='ext2\x00', 0x201000, 0x0) 1m27.66242527s ago: executing program 5 (id=3679): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) r1 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x0) fsmount(r1, 0x1, 0x85) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r5, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000), 0x4) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r7, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) process_vm_writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f0000000240)=""/30, 0x1e}], 0x5, &(0x7f0000000440)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 1m12.590676763s ago: executing program 37 (id=3679): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) r1 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x0) fsmount(r1, 0x1, 0x85) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r5, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000), 0x4) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r7, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) process_vm_writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f0000000240)=""/30, 0x1e}], 0x5, &(0x7f0000000440)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 4.146727007s ago: executing program 7 (id=4325): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x4000, &(0x7f0000000180), 0xb, 0x1bb}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 1.852632364s ago: executing program 8 (id=4365): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) 1.774827172s ago: executing program 8 (id=4366): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 1.707027453s ago: executing program 8 (id=4367): kexec_load(0xff0e, 0x0, 0x0, 0x0) 1.706875913s ago: executing program 8 (id=4368): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b", 0x12, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1.70674233s ago: executing program 8 (id=4369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f4, 0x0, 0x6}]}) 1.651362705s ago: executing program 8 (id=4370): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'rti800\x00', [0x4f27, 0x5, 0x3, 0x37, 0x400, 0xcc7, 0xfff, 0x0, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x4, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfff7fdfd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0xffffffff, 0x105, 0x8000000, 0xfffffff8]}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000004000080080002"], 0x1c}], 0x1}, 0x0) 1.559000535s ago: executing program 4 (id=4372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 865.673408ms ago: executing program 7 (id=4381): r0 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/124) 843.165751ms ago: executing program 7 (id=4382): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x44) 774.870938ms ago: executing program 4 (id=4384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 737.402127ms ago: executing program 4 (id=4386): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 540.304212ms ago: executing program 7 (id=4391): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 443.096395ms ago: executing program 4 (id=4393): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 442.740445ms ago: executing program 4 (id=4395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"0cd179745c15df8c0fbd9d0b7fb142ecc9d64c7743abba6ba8896841d1e1048c7a621d271d004c68fa8c1d404d6cba9f84af15ce2b429b3e09ce63eccba965967106324fee45bcd3fe5c79d7b43144a4cf565c6abafe9384b445506dce404514b815adf4de14b906ad8f631c6f863c38ebc1fa13b8cf95d712073c8a819aafcaa28b43328312fbadb7d75b91208d894c1be5427467d8b2f28dea5644cea175c2d4cb7a15c25e0e1cd5a632b9dfaf1f09ce9cdc60cebfd14ad1d8de11c794614741007d79bd0cac54110e13d7dc3a51b94c388e2021bf0ba6f78b7fe69f81d3c9702dae4f14299b8156f0db0d4c2110dafe3ee516bfd2eda049104d678f77d55b88bfcd8a33bf69c68168831af1bf040d44d1ac51ebd6633ba630f0a1de0fb3868d7b3e25d9f98ae9e16e86d36b51aafd8ce28313b5e5a00eb970e7fdb5c390fdc29f38e873f295dc06ae8142268113c549c2b8a7e089c2131add789dd254ea2340cfb096f4303f2ba353b4a5b3b697104ffa11f4c4d8ba468e8df4224ac19e643d57c26a6905d689749fbd3add6c0098a39ebe758266f86418eae06098835dc3ee6381c16eefb9d50c98973831cb79b7d9c900092a48799deb5a887f87cb98167d6455acf166fd095fef8bde0568baa5dd81de94e6db1ef2ee301be620ac334f0155fda8d42769fe22d00433887dfbb1595d494bd7de8f8589aad385e922252517a3d0d91e8d7eee80cd1d57c56286e4c94e3609e9092bfc9585f311fe69fb2d17d18742eeea10c008562bfee5df53ef712b297ac59fabc7d5ad6d792161294877bf13a484959773fa4d6d72e60558071df8caab5ff830efa58737b2d221a31f96c33715bdbf15d1d1b8e9f74f1440b3f98d46f341ae9ce7b50b948687b84212736d222ef51140b4d2accd428e056022135226edac0443e058d78c89e44302719fd6edadba3e39f7c092c29492dd272c194bce3cbf02746d1b5c05667877e031cc87bddf1de44e262c4e76f705c40383d778780e7c873e0f109b7a0c79b4325d3121b462a7e189d6ca49c23c74a9f94f3443ca64818619f6e97915d2d4fe3fcf7cd3730caae6fb652cbc64b234092bf3c1f3039e99efd84fc75edfe5eb27aac7e446c8f315965e3d0aa85cd04c50234766a6f1a802fa90084b883cca7fb9a8c41c207a3ea3602001b8b1bbb99a323c27875dd5d3777236e08347b5fceabc60e1c7ea83fd6ac9bfb15829a22971d72fe8f1431522ec20fabc01c159c707029bce2f38b220edcb977e553bdf00d831b5cef4f681d814951ffa25baaa82051e0223c24b3b9ae042e04a8ed919b30af7084c34577dcd367d5254d4383094e97c0068fcc9e2c26cff2e17c1cf02b91c0f872f2cde7c81b7d82bddb32171c0b8a32841db99e2e1145210b2aeced55878794dd6fbef9736c8a046a2c1aaaa5abfd16de8"}) 377.333045ms ago: executing program 7 (id=4398): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) 298.82434ms ago: executing program 7 (id=4400): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 267.758613ms ago: executing program 9 (id=4401): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) 224.362964ms ago: executing program 9 (id=4402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x6558, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x84, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x2e) 134.988359ms ago: executing program 4 (id=4403): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b04, 0x0) 134.777563ms ago: executing program 9 (id=4404): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2$9p(&(0x7f0000000400), 0x80800) syz_clone(0x21e40000, 0x0, 0x0, 0x0, 0x0, 0x0) 125.756208ms ago: executing program 9 (id=4405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000020000040"]) 92.410806ms ago: executing program 9 (id=4406): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @remote}, {0x6, @local}, 0x48, {0x2, 0x4e22, @empty}, 'tunl0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e21, @remote}, {0x306, @multicast}, 0x18, {0x2, 0x4e20, @local}, 'veth1_to_bridge\x00'}) 0s ago: executing program 9 (id=4407): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 493.028685][T20869] /dev/rnullb0: Can't open blockdev [ 493.034324][T20869] /dev/rnullb0: Can't open blockdev [ 493.040720][T20869] /dev/rnullb0: Can't open blockdev [ 493.046189][T20869] /dev/rnullb0: Can't open blockdev [ 493.051796][T20869] /dev/rnullb0: Can't open blockdev [ 493.057425][T20869] /dev/rnullb0: Can't open blockdev [ 493.062953][T20869] /dev/rnullb0: Can't open blockdev [ 493.069331][T20869] /dev/rnullb0: Can't open blockdev [ 493.075736][T20869] /dev/rnullb0: Can't open blockdev [ 493.081539][T20869] /dev/rnullb0: Can't open blockdev [ 493.088088][T20869] /dev/rnullb0: Can't open blockdev [ 493.266036][T20888] overlayfs: failed to get inode (-116) [ 493.272405][T20888] overlayfs: failed to get inode (-116) [ 494.379645][T20906] /dev/rnullb0: Can't open blockdev [ 502.001494][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.010450][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.918558][ T124] block nbd0: Connection timed out, retrying (0/2 alive) [ 503.925657][ T124] block nbd0: Connection timed out, retrying (0/2 alive) [ 503.933100][ T124] block nbd0: Connection timed out, retrying (0/2 alive) [ 503.945954][ T124] block nbd0: Connection timed out, retrying (0/2 alive) [ 503.953163][ T11] block nbd0: Dead connection, failed to find a fallback [ 503.960375][ T11] block nbd0: shutting down sockets [ 503.965563][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.974656][ T11] buffer_io_error: 40 callbacks suppressed [ 503.974669][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 503.988618][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.998135][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 504.006205][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.015492][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 504.023403][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.033076][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 504.041001][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.050175][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 504.057964][ T5854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.067262][ T5854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 504.075178][ T5854] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.084893][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 504.092285][ T5854] Buffer I/O error on dev nbd0, logical block 2, async page read [ 504.101092][ T5854] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.110233][ T5854] Buffer I/O error on dev nbd0, logical block 3, async page read [ 504.118788][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.127828][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 504.136179][ T5854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.145305][ T5854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 504.154112][ T5854] ldm_validate_partition_table(): Disk read failed. [ 504.161570][ T5854] Dev nbd0: unable to read RDB block 0 [ 504.167726][ T5854] nbd0: unable to read partition table [ 504.176338][ T5854] ldm_validate_partition_table(): Disk read failed. [ 504.183754][ T5854] Dev nbd0: unable to read RDB block 0 [ 504.190880][ T5854] nbd0: unable to read partition table [ 521.913016][T20957] tipc: Enabled bearer , priority 0 [ 521.927102][T20963] fuse: Bad value for 'rootmode' [ 521.964283][T20957] syzkaller0: entered promiscuous mode [ 521.970563][T20957] syzkaller0: entered allmulticast mode [ 521.982782][T20957] tipc: Resetting bearer [ 522.001895][T20969] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 522.014434][T20969] /dev/rnullb0: Can't open blockdev [ 522.156107][T20983] /dev/rnullb0: Can't open blockdev [ 522.163209][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 522.170882][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 522.180714][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 522.189283][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 522.197624][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 522.237690][T20980] wlan1 speed is unknown, defaulting to 1000 [ 522.782685][T20956] tipc: Resetting bearer [ 522.943898][ T985] tipc: Node number set to 4279369729 [ 523.224357][T20956] tipc: Disabling bearer [ 523.255625][T20980] chnl_net:caif_netlink_parms(): no params data found [ 523.360636][T21137] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 523.375022][T21137] /dev/rnullb0: Can't open blockdev [ 523.398068][T20980] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.405317][T20980] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.413353][T20980] bridge_slave_0: entered allmulticast mode [ 523.420285][T20980] bridge_slave_0: entered promiscuous mode [ 523.429412][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.437466][T20980] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.448523][T20980] bridge_slave_1: entered allmulticast mode [ 523.456285][T20980] bridge_slave_1: entered promiscuous mode [ 523.488959][T20980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.489620][T21178] binder: BINDER_SET_CONTEXT_MGR already set [ 523.507548][T21178] binder: 21167:21178 ioctl 4018620d 200000000040 returned -16 [ 523.518196][T20980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.561735][T20980] team0: Port device team_slave_0 added [ 523.569821][T20980] team0: Port device team_slave_1 added [ 523.608493][T20980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.615790][T20980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.638840][T21227] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 523.642550][T20980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.654360][T21252] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 523.662388][T20980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.675216][T20980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.702106][T20980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.744431][T20980] hsr_slave_0: entered promiscuous mode [ 523.756499][T20980] hsr_slave_1: entered promiscuous mode [ 523.768736][T20980] debugfs: 'hsr0' already exists in 'hsr' [ 523.776803][T20980] Cannot create hsr debugfs directory [ 523.920880][T20980] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 523.933184][T20980] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 523.944146][T20980] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 523.954561][T20980] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 523.981620][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.988808][T20980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.996271][T20980] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.003494][T20980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.056518][T20980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.073779][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.084047][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.113682][T20980] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.130150][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.137320][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.155550][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.162781][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.241788][ T5863] Bluetooth: hci6: command tx timeout [ 524.359250][T20980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.556607][T20980] veth0_vlan: entered promiscuous mode [ 524.568208][T20980] veth1_vlan: entered promiscuous mode [ 524.605224][T20980] veth0_macvtap: entered promiscuous mode [ 524.616194][T20980] veth1_macvtap: entered promiscuous mode [ 524.637306][T20980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.651047][T20980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.663389][T14935] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.673346][T14935] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.684384][T14935] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.693699][T14935] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.735966][T14931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.749645][T14931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.769465][T14938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.777754][T14938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.965577][T21417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.974335][T21417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.983425][T21417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.996268][T21417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.321595][ T5863] Bluetooth: hci6: command tx timeout [ 526.573822][T21429] /dev/rnullb0: Can't open blockdev [ 527.831276][T21458] comedi comedi0: comedi_config --init_data is deprecated [ 528.238321][T21493] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 528.402015][ T5863] Bluetooth: hci6: command tx timeout [ 528.683190][T21514] /dev/rnullb0: Can't open blockdev [ 528.699560][T21517] nbd: must specify an index to disconnect [ 528.810730][T21522] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 528.820855][T21522] Â: renamed from pim6reg1 [ 529.067262][T21536] /dev/rnullb0: Can't open blockdev [ 529.127651][T21542] /dev/rnullb0: Can't open blockdev [ 529.225250][T21548] /dev/rnullb0: Can't open blockdev [ 529.637848][T21552] /dev/rnullb0: Can't open blockdev [ 530.010353][T21559] /dev/rnullb0: Can't open blockdev [ 530.103810][T21565] /dev/rnullb0: Can't open blockdev [ 530.484696][ T5873] Bluetooth: hci6: command tx timeout [ 532.248382][T21608] /dev/rnullb0: Can't open blockdev [ 532.276449][T21610] fuse: Bad value for 'rootmode' [ 532.283327][T21610] /dev/rnullb0: Can't open blockdev [ 532.572108][ T5873] Bluetooth: hci6: command 0x0405 tx timeout [ 532.734509][ T6295] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 532.752225][ T6295] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 532.782904][ T6295] usb 6-1: USB disconnect, device number 21 [ 533.115451][T21647] netlink: 'syz.4.3423': attribute type 64 has an invalid length. [ 533.133524][T21647] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3423'. [ 533.156905][T14935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.176525][T21654] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 533.187742][T21647] /dev/rnullb0: Can't open blockdev [ 533.238511][T14935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.294196][T14935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.430852][T14935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.620835][T14935] bridge_slave_1: left allmulticast mode [ 533.645744][T14935] bridge_slave_1: left promiscuous mode [ 533.672270][T14935] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.721552][T14935] bridge_slave_0: left allmulticast mode [ 533.731400][T14935] bridge_slave_0: left promiscuous mode [ 533.749291][T14935] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.938185][T14935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.957390][T14935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.967296][T14935] bond0 (unregistering): Released all slaves [ 533.994685][ T985] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 534.176118][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.196375][ T985] usb 6-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 534.223888][ T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.259825][ T985] usb 6-1: config 0 descriptor?? [ 534.480155][T21738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.496300][T21738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.522499][T21704] netlink: 'syz.5.3433': attribute type 27 has an invalid length. [ 534.598635][ T985] usbhid 6-1:0.0: can't add hid device: -71 [ 534.629656][ T985] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 534.701342][T21754] /dev/rnullb0: Can't open blockdev [ 534.848968][ T985] usb 6-1: USB disconnect, device number 22 [ 534.976656][T14935] hsr_slave_0: left promiscuous mode [ 534.992179][ T5863] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 535.012249][T14935] hsr_slave_1: left promiscuous mode [ 535.052945][T14935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.070161][T14935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.078346][T14935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.083037][T21775] /dev/rnullb0: Can't open blockdev [ 535.103433][T14935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.117256][T14935] veth1_macvtap: left promiscuous mode [ 535.130195][T14935] veth0_macvtap: left promiscuous mode [ 535.136445][T14935] veth1_vlan: left promiscuous mode [ 535.141793][T14935] veth0_vlan: left promiscuous mode [ 535.258199][T21788] netlink: 'syz.8.3444': attribute type 3 has an invalid length. [ 535.268672][T21788] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3444'. [ 535.303417][T14935] team0 (unregistering): Port device team_slave_1 removed [ 535.316273][T14935] team0 (unregistering): Port device team_slave_0 removed [ 535.343104][ T985] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 535.496105][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.509995][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.525033][ T985] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 535.534884][ T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.550214][ T985] usb 6-1: config 0 descriptor?? [ 535.971121][ T985] logitech-djreceiver 0003:046D:C71F.0015: item fetching failed at offset 5/7 [ 535.983298][ T985] logitech-djreceiver 0003:046D:C71F.0015: logi_dj_probe: parse failed [ 535.991745][ T985] logitech-djreceiver 0003:046D:C71F.0015: probe with driver logitech-djreceiver failed with error -22 [ 536.166284][ T5891] usb 6-1: USB disconnect, device number 23 [ 536.421539][T21860] afs: Unknown parameter 'smackfshat' [ 536.457157][T21865] netlink: 'syz.7.3448': attribute type 29 has an invalid length. [ 536.466643][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3448'. [ 536.525126][T21869] netlink: 'syz.7.3449': attribute type 21 has an invalid length. [ 536.533245][T21869] netlink: 'syz.7.3449': attribute type 6 has an invalid length. [ 536.541045][T21869] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3449'. [ 536.553570][T21869] netlink: 'syz.7.3449': attribute type 21 has an invalid length. [ 536.561528][T21869] netlink: 'syz.7.3449': attribute type 6 has an invalid length. [ 536.570513][T21869] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3449'. [ 536.608442][T21874] /dev/rnullb0: Can't open blockdev [ 536.639902][T21877] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 536.650426][T21877] /dev/rnullb0: Can't open blockdev [ 537.050756][T21886] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 538.581329][T14936] bridge_slave_1: left allmulticast mode [ 538.591922][T14936] bridge_slave_1: left promiscuous mode [ 538.598060][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.618378][T14936] bridge_slave_0: left allmulticast mode [ 538.629439][T14936] bridge_slave_0: left promiscuous mode [ 538.638968][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.798374][ T5863] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 538.809504][ T5863] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 538.882371][T21918] /dev/rnullb0: Can't open blockdev [ 538.920790][T21921] binder: 21920:21921 unknown command 0 [ 538.926633][T21921] binder: 21920:21921 ioctl c0306201 200000000080 returned -22 [ 539.199086][T14936] hsr_slave_0: left promiscuous mode [ 539.205114][T14936] hsr_slave_1: left promiscuous mode [ 539.211073][T14936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.220607][T14936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.229751][T14936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.239250][T14936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.250672][T14936] veth1_macvtap: left promiscuous mode [ 539.276876][T14936] veth0_macvtap: left promiscuous mode [ 539.282493][T14936] veth1_vlan: left promiscuous mode [ 539.303052][T14936] veth0_vlan: left promiscuous mode [ 539.477742][T14936] team0 (unregistering): Port device team_slave_1 removed [ 539.505086][T14936] team0 (unregistering): Port device team_slave_0 removed [ 539.685649][T21960] syzkaller1: entered promiscuous mode [ 539.691213][T21960] syzkaller1: entered allmulticast mode [ 540.667494][T21972] binder: 21971:21972 unknown command 0 [ 540.673379][T21972] binder: 21971:21972 ioctl c0306201 200000000080 returned -22 [ 540.703306][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3472'. [ 540.993943][ T6295] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 541.154706][ T6295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.164965][ T6295] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 541.175028][ T6295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.185321][ T6295] usb 6-1: config 0 descriptor?? [ 541.192191][ T6295] pwc: Askey VC010 type 2 USB webcam detected. [ 541.594634][ T6295] pwc: recv_control_msg error -32 req 02 val 2b00 [ 541.601653][ T6295] pwc: recv_control_msg error -32 req 02 val 2700 [ 541.734827][T21987] /dev/rnullb0: Can't open blockdev [ 541.910599][T22001] fuse: Bad value for 'group_id' [ 541.915771][T22001] fuse: Bad value for 'group_id' [ 541.927140][T22001] fuse: Unknown parameter '&d' [ 541.932832][T22001] fuse: Bad value for 'fd' [ 542.326606][ T6295] pwc: recv_control_msg error -71 req 04 val 1000 [ 542.363006][ T6295] pwc: recv_control_msg error -71 req 04 val 1300 [ 542.384408][ T6295] pwc: recv_control_msg error -71 req 04 val 1400 [ 542.404042][ T6295] pwc: recv_control_msg error -71 req 02 val 2000 [ 542.424897][ T6295] pwc: recv_control_msg error -71 req 02 val 2100 [ 542.437330][ T6295] pwc: recv_control_msg error -71 req 04 val 1500 [ 542.450171][ T6295] pwc: recv_control_msg error -71 req 02 val 2500 [ 542.465349][ T6295] pwc: recv_control_msg error -71 req 02 val 2400 [ 542.483511][ T6295] pwc: recv_control_msg error -71 req 02 val 2600 [ 542.503500][ T6295] pwc: recv_control_msg error -71 req 02 val 2900 [ 542.514079][ T6295] pwc: recv_control_msg error -71 req 02 val 2800 [ 542.531699][ T6295] pwc: recv_control_msg error -71 req 04 val 1100 [ 542.539329][ T6295] pwc: recv_control_msg error -71 req 04 val 1200 [ 542.567686][ T6295] pwc: Registered as video103. [ 542.587480][ T6295] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 542.597719][T22043] binder: 22042:22043 unknown command 0 [ 542.613050][T22043] binder: 22042:22043 ioctl c0306201 200000000080 returned -22 [ 542.633434][ T6295] usb 6-1: USB disconnect, device number 24 [ 542.716907][T22061] /dev/rnullb0: Can't open blockdev [ 542.761551][T22066] /dev/rnullb0: Can't open blockdev [ 542.902812][T22076] syz0: rxe_newlink: already configured on wlan1 [ 542.919321][T22076] /dev/rnullb0: Can't open blockdev [ 542.934804][T22079] /dev/rnullb0: Can't open blockdev [ 543.033265][T22087] binder: 22086:22087 unknown command 0 [ 543.038906][T22087] binder: 22086:22087 ioctl c0306201 200000000080 returned -22 [ 543.443071][ T6295] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 543.613083][ T6295] usb 6-1: Using ep0 maxpacket: 16 [ 543.635124][ T6295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 543.647737][ T6295] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 543.657686][ T6295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.666341][ T6295] usb 6-1: Product: syz [ 543.670523][ T6295] usb 6-1: Manufacturer: syz [ 543.675460][ T6295] usb 6-1: SerialNumber: syz [ 543.685050][ T6295] usb 6-1: config 0 descriptor?? [ 543.693430][ T6295] hub 6-1:0.0: bad descriptor, ignoring hub [ 543.699379][ T6295] hub 6-1:0.0: probe with driver hub failed with error -5 [ 543.708700][ T6295] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 544.002048][ T6295] usb 6-1: USB disconnect, device number 25 [ 544.586259][T22150] binder: 22149:22150 ioctl c0306201 200000000080 returned -14 [ 544.594648][T22150] binder: 22149:22150 ioctl 80045503 200000000080 returned -22 [ 545.167393][T22190] /dev/rnullb0: Can't open blockdev [ 545.200911][T22192] /dev/rnullb0: Can't open blockdev [ 545.242464][T22194] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 545.249297][ T10] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 545.251378][T22194] block nbd4: Attempted send on invalid socket [ 545.263826][T22194] blk_print_req_error: 138 callbacks suppressed [ 545.263842][T22194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.361999][T22202] No control pipe specified [ 545.405622][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 545.413922][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 545.422717][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.436101][ T10] usb 6-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 545.446176][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.462117][ T10] usb 6-1: Product: syz [ 545.472906][ T10] usb 6-1: Manufacturer: syz [ 545.477845][ T10] usb 6-1: SerialNumber: syz [ 545.730776][T22176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.740329][T22176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.827802][T22229] tmpfs: Bad value for 'mpol' [ 545.836788][T22229] /dev/rnullb0: Can't open blockdev [ 545.902764][T22232] tmpfs: Unknown parameter 'ÿã?1œžL’u¥' [ 546.370239][ T10] pwc: Visionite VCS-UC300 USB webcam detected. [ 546.397526][ T10] pwc: Failed to set LED on/off time (-71) [ 546.425584][ T10] pwc: send_video_command error -71 [ 546.431112][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 546.448632][ T10] Philips webcam 6-1:1.0: probe with driver Philips webcam failed with error -71 [ 546.491206][ T10] usb 6-1: USB disconnect, device number 26 [ 547.096939][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.110795][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.118858][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.130909][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.140385][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.178263][T22296] wlan1 speed is unknown, defaulting to 1000 [ 547.203422][ T5891] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 547.366120][ T5891] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 547.386061][ T5891] usb 6-1: config 0 has no interface number 0 [ 547.410696][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 547.427882][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.438962][ T5891] usb 6-1: Product: syz [ 547.444130][ T5891] usb 6-1: Manufacturer: syz [ 547.457350][ T5891] usb 6-1: SerialNumber: syz [ 547.476590][ T5891] usb 6-1: config 0 descriptor?? [ 547.539832][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.674819][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.691416][T22288] /dev/rnullb0: Can't open blockdev [ 547.709614][T22288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.745148][T22288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.785465][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.800106][ T5891] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 547.811056][ T5891] usb 6-1: No valid video chain found. [ 547.824501][ T5891] usb 6-1: USB disconnect, device number 27 [ 547.871952][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.108253][T22296] chnl_net:caif_netlink_parms(): no params data found [ 548.120325][ T49] bridge_slave_1: left allmulticast mode [ 548.127240][ T49] bridge_slave_1: left promiscuous mode [ 548.132998][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.156122][ T49] bridge_slave_0: left promiscuous mode [ 548.161858][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.170738][T22486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.412320][ T49] tipc: Left network mode [ 548.430562][T22511] PKCS7: Unknown OID: [4] 0.0 [ 548.445350][T22511] PKCS7: Only support pkcs7_signedData type [ 548.475571][T14936] smc: removing ib device syz0 [ 548.483789][T22511] /dev/rnullb0: Can't open blockdev [ 548.491184][T20955] wlan1 speed is unknown, defaulting to 1000 [ 548.495435][T22495] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3540'. [ 548.497415][T22296] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.513507][T20955] syz0: Port: 1 Link DOWN [ 548.521526][T22296] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.528837][T22296] bridge_slave_0: entered allmulticast mode [ 548.535943][T22296] bridge_slave_0: entered promiscuous mode [ 548.542932][ T985] wlan1 speed is unknown, defaulting to 1000 [ 548.544527][T22296] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.569342][T22296] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.579953][T22538] netlink: 5404 bytes leftover after parsing attributes in process `syz.5.3540'. [ 548.599582][T22538] netlink: 5404 bytes leftover after parsing attributes in process `syz.5.3540'. [ 548.613892][T22296] bridge_slave_1: entered allmulticast mode [ 548.627234][T22296] bridge_slave_1: entered promiscuous mode [ 548.664891][T22538] tipc: Enabling of bearer rejected, failed to enable media [ 548.783117][T22296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.816325][T22296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.936833][T20955] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 548.962553][T22296] team0: Port device team_slave_0 added [ 548.971053][T22296] team0: Port device team_slave_1 added [ 549.052195][T22296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.063323][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.096639][T22296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.108697][T22296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.119479][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.149600][T22296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.158684][T20955] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 549.181475][T20955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.193017][T20955] usb 6-1: Product: syz [ 549.203944][T20955] usb 6-1: Manufacturer: syz [ 549.208587][T20955] usb 6-1: SerialNumber: syz [ 549.219878][ T5863] Bluetooth: hci2: command tx timeout [ 549.272951][T20955] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 549.277935][T22296] hsr_slave_0: entered promiscuous mode [ 549.290466][T22296] hsr_slave_1: entered promiscuous mode [ 549.299857][T22296] debugfs: 'hsr0' already exists in 'hsr' [ 549.310872][T22296] Cannot create hsr debugfs directory [ 549.318258][ T5891] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 549.851058][ T49] hsr_slave_0: left promiscuous mode [ 549.857880][ T49] hsr_slave_1: left promiscuous mode [ 549.863902][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.871371][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.881604][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.889282][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.900977][ T49] veth1_macvtap: left promiscuous mode [ 549.906679][ T49] veth0_macvtap: left promiscuous mode [ 549.912270][ T49] veth1_vlan: left promiscuous mode [ 549.917638][ T49] veth0_vlan: left promiscuous mode [ 550.019072][ T49] pim6reg (unregistering): left allmulticast mode [ 550.077540][T14928] smc: removing ib device syz1 [ 550.261796][ T49] team0 (unregistering): Port device team_slave_1 removed [ 550.311309][ T49] team0 (unregistering): Port device team_slave_0 removed [ 550.411710][ T5891] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 550.426904][ T5891] ath9k_htc: Failed to initialize the device [ 550.480370][ T5891] usb 6-1: ath9k_htc: USB layer deinitialized [ 550.765926][T22296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 550.782568][T22296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 550.816389][T22296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 550.844322][T22296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 551.070335][T22296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.123153][T22296] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.142009][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.149196][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.165145][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.172289][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.191809][ T49] IPVS: stop unused estimator thread 0... [ 551.267078][T22829] netlink: 'syz.7.3546': attribute type 8 has an invalid length. [ 551.294386][ T5863] Bluetooth: hci2: command tx timeout [ 551.368063][ T5908] usb 6-1: USB disconnect, device number 28 [ 551.427473][T22296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.481712][T22848] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 551.742978][T22296] veth0_vlan: entered promiscuous mode [ 551.767477][T22296] veth1_vlan: entered promiscuous mode [ 551.785257][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3554'. [ 551.799314][T22296] veth0_macvtap: entered promiscuous mode [ 551.809235][T22296] veth1_macvtap: entered promiscuous mode [ 551.854567][T22296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.876549][T22296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.909426][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.928777][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.954006][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.980231][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.053030][T14928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.088171][T14928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.108605][T22899] binder: BINDER_SET_CONTEXT_MGR already set [ 552.109874][T14928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.125095][T22899] binder: 22898:22899 ioctl 4018620d 200000000040 returned -16 [ 552.125151][T14928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.164023][T14931] Trying to write to read-only block-device rnullb0 [ 552.254665][T22907] /dev/rnullb0: Can't open blockdev [ 552.377408][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'. [ 552.387857][T22923] openvswitch: netlink: Message has 16 unknown bytes. [ 552.444959][T22926] binder: BINDER_SET_CONTEXT_MGR already set [ 552.450993][T22926] binder: 22924:22926 ioctl 4018620d 200000000040 returned -16 [ 552.487397][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 552.646662][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.658436][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 552.669649][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 552.682377][ T9] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 552.691488][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.699665][ T9] usb 6-1: Product: syz [ 552.703857][ T9] usb 6-1: Manufacturer: syz [ 552.708481][ T9] usb 6-1: SerialNumber: syz [ 552.714363][ T9] usb 6-1: config 0 descriptor?? [ 552.720084][T22912] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 552.930163][ T9] powermate: unknown product id 0240 [ 552.935843][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 552.947082][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input43 [ 553.297136][T22943] /dev/rnullb0: Can't open blockdev [ 553.364093][ T5863] Bluetooth: hci2: command tx timeout [ 555.257801][ C0] powermate: config urb returned -71 [ 555.258095][T20955] usb 6-1: USB disconnect, device number 29 [ 555.263151][ C0] powermate: usb_submit_urb(config) failed [ 555.269262][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 555.308034][T22981] binder: 22976:22981 ioctl c0306201 0 returned -14 [ 555.444074][ T5863] Bluetooth: hci2: command tx timeout [ 555.867146][T23017] binder: 23014:23017 ioctl c0306201 0 returned -14 [ 555.904416][T23020] ext2: Unknown parameter '{)({' [ 555.913426][T23020] netlink: 'syz.7.3584': attribute type 21 has an invalid length. [ 555.924167][T23020] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3584'. [ 555.933900][T23020] netlink: 'syz.7.3584': attribute type 4 has an invalid length. [ 555.943948][T23020] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3584'. [ 556.008889][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3584'. [ 556.021153][T23020] /dev/rnullb0: Can't open blockdev [ 556.328771][T23053] binder: 23052:23053 ioctl c0306201 0 returned -14 [ 558.142157][T23093] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 558.152126][T23093] SQUASHFS error: Failed to read block 0x0: -5 [ 558.159539][T23093] unable to read squashfs_super_block [ 559.321958][T23124] dlm: no locking on control device [ 559.360634][T23127] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3608'. [ 559.410241][T23130] /dev/rnullb0: Can't open blockdev [ 559.470539][T23136] /dev/rnullb0: Can't open blockdev [ 560.044355][ T5908] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 560.182120][T23187] /dev/rnullb0: Can't open blockdev [ 560.188839][T23188] /dev/rnullb0: Can't open blockdev [ 560.213883][T23190] netlink: 'syz.4.3623': attribute type 12 has an invalid length. [ 560.239269][ T5908] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 560.248251][ T5908] usb 6-1: config 0 has no interface number 0 [ 560.257064][T23193] netlink: 'syz.7.3624': attribute type 1 has an invalid length. [ 560.264410][T23190] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3623'. [ 560.273951][ T5908] usb 6-1: config 0 interface 29 has no altsetting 0 [ 560.273986][T23194] netlink: 'syz.4.3623': attribute type 27 has an invalid length. [ 560.286545][ T5908] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 560.298937][T23193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3624'. [ 560.305548][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.334383][ T5908] usb 6-1: Product: syz [ 560.340186][ T5908] usb 6-1: Manufacturer: syz [ 560.354409][ T5908] usb 6-1: SerialNumber: syz [ 560.367489][ T5908] usb 6-1: config 0 descriptor?? [ 560.388152][T23194] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.395842][T23194] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.529233][T23194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.543601][T23194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.684614][T14938] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.687442][ T5908] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 560.702623][T14938] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.714066][T14938] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.725661][T14938] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.888096][T23172] /dev/rnullb0: Can't open blockdev [ 560.896585][ T5908] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 560.926335][ T5908] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 560.955357][T23216] netlink: 'syz.7.3628': attribute type 29 has an invalid length. [ 560.972714][T23216] syzkaller1: entered promiscuous mode [ 560.978768][T23216] syzkaller1: entered allmulticast mode [ 560.979070][ T5908] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 561.000790][T23216] netlink: 'syz.7.3628': attribute type 29 has an invalid length. [ 561.011529][ T5908] usb 6-1: USB disconnect, device number 30 [ 561.196924][T23231] fuse: Bad value for 'rootmode' [ 561.559339][T23234] binder: BINDER_SET_CONTEXT_MGR already set [ 561.575740][T23234] binder: 23233:23234 ioctl 4018620d 200000000040 returned -16 [ 562.696458][T23230] kexec: Could not allocate control_code_buffer [ 563.315112][ T5908] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 563.447315][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.461527][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.464573][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 563.490552][T23284] /dev/rnullb0: Can't open blockdev [ 563.499190][ T5908] usb 6-1: unable to get BOS descriptor or descriptor too short [ 563.510231][ T5908] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 563.519622][ T5908] usb 6-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 563.544720][ T5908] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 563.554028][ T5908] usb 6-1: config 1 has no interface number 1 [ 563.571360][ T5908] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 198, changing to 7 [ 563.587565][ T5908] usb 6-1: string descriptor 0 read error: -22 [ 563.593948][ T5908] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.608536][T23287] hpfs: Bad magic ... probably not HPFS [ 563.614185][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.637759][ T5908] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 563.659381][ T5908] usb 6-1: found format II with max.bitrate = 0, frame size=5 [ 563.679539][ T5908] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 563.872204][T23266] /dev/rnullb0: Can't open blockdev [ 563.996481][ T5908] usb 6-1: USB disconnect, device number 31 [ 564.015352][T23313] /dev/rnullb0: Can't open blockdev [ 564.279673][T23340] netlink: 'syz.4.3650': attribute type 11 has an invalid length. [ 564.287791][T23340] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3650'. [ 564.369497][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3651'. [ 564.391910][T23355] /dev/rnullb0: Can't open blockdev [ 564.527358][T23368] binder: 23367:23368 unknown command 0 [ 564.532947][T23368] binder: 23367:23368 ioctl c0306201 200000000080 returned -22 [ 564.749612][T23390] /dev/rnullb0: Can't open blockdev [ 565.114816][T20955] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 565.284811][T20955] usb 6-1: Using ep0 maxpacket: 32 [ 565.291613][T20955] usb 6-1: config 4 has an invalid interface number: 8 but max is 0 [ 565.303567][T20955] usb 6-1: config 4 has no interface number 0 [ 565.312505][T20955] usb 6-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 565.322643][T20955] usb 6-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 565.334472][T20955] usb 6-1: config 4 interface 8 has no altsetting 0 [ 565.345971][T20955] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 565.355409][T20955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.363417][T20955] usb 6-1: Product: syz [ 565.369368][T20955] usb 6-1: Manufacturer: syz [ 565.374082][T20955] usb 6-1: SerialNumber: syz [ 565.712328][T20955] opticon 6-1:4.8: opticon converter detected [ 565.723390][T20955] usb 6-1: opticon converter now attached to ttyUSB0 [ 565.738952][T20955] usb 6-1: USB disconnect, device number 32 [ 565.758903][T20955] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 565.776357][T20955] opticon 6-1:4.8: device disconnected [ 566.266133][T23479] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 566.273458][T23479] /dev/rnullb0: Can't open blockdev [ 566.305236][T23482] /dev/rnullb0: Can't open blockdev [ 566.459173][T23494] binder: 23493:23494 unknown command 0 [ 566.465473][T23494] binder: 23493:23494 ioctl c0306201 200000000080 returned -22 [ 566.928095][T23528] binder: 23527:23528 unknown command 0 [ 566.933692][T23528] binder: 23527:23528 ioctl c0306201 200000000080 returned -22 [ 567.398437][T23542] block nbd8: Attempted send on invalid socket [ 567.404649][T23542] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 567.414698][T23542] exFAT-fs (nbd8): unable to read boot sector [ 567.421028][T23542] exFAT-fs (nbd8): failed to read boot sector [ 567.427350][T23542] exFAT-fs (nbd8): failed to recognize exfat type [ 567.686118][ T30] audit: type=1326 audit(1756553340.610:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23554 comm="syz.7.3682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d7078ebe9 code=0x0 [ 568.542233][T23579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 568.902053][T23585] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3689'. [ 570.887529][T23610] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 570.895443][T23612] /dev/rnullb0: Can't open blockdev [ 570.940677][T23615] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3695'. [ 571.662295][T23648] /dev/rnullb0: Can't open blockdev [ 571.729596][T23653] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3702'. [ 571.791861][T23662] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3703'. [ 572.105332][T23678] /dev/rnullb0: Can't open blockdev [ 574.044796][T23713] /dev/rnullb0: Can't open blockdev [ 574.601531][T23715] syz.8.3714 (23715): drop_caches: 2 [ 574.749469][T23721] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 574.758401][T23721] /dev/rnullb0: Can't open blockdev [ 575.514116][T23747] /dev/sg0: Can't lookup blockdev [ 575.523004][T23747] /dev/sg0: Can't lookup blockdev [ 575.617303][T23752] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 575.629690][T23750] can: request_module (can-proto-4) failed. [ 575.934069][T23774] XFS (nullb0): Invalid superblock magic number [ 578.455766][T23801] tipc: Enabling of bearer rejected, failed to enable media [ 578.764001][T23804] smc: net device bond0 applied user defined pnetid SYZ0 [ 578.866429][ T5891] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 578.902104][ T5891] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 579.044021][T23811] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 579.052255][T23811] /dev/rnullb0: Can't open blockdev [ 579.611875][T23851] wlan1 speed is unknown, defaulting to 1000 [ 579.620500][T23851] wlan1 speed is unknown, defaulting to 1000 [ 579.628471][T23851] wlan1 speed is unknown, defaulting to 1000 [ 579.696571][T23857] /dev/rnullb0: Can't open blockdev [ 579.765287][T23851] infiniband syz0: set down [ 579.770049][ T5891] wlan1 speed is unknown, defaulting to 1000 [ 579.776458][T23851] infiniband syz0: added wlan1 [ 579.824157][T23860] /dev/rnullb0: Can't open blockdev [ 579.836371][T23851] RDS/IB: syz0: added [ 579.840428][T23851] smc: adding ib device syz0 with port count 1 [ 579.868162][T23851] smc: ib device syz0 port 1 has pnetid [ 579.874405][ T5928] wlan1 speed is unknown, defaulting to 1000 [ 579.881368][T23851] wlan1 speed is unknown, defaulting to 1000 [ 579.992332][T23851] wlan1 speed is unknown, defaulting to 1000 [ 580.209347][T23851] wlan1 speed is unknown, defaulting to 1000 [ 580.275239][T23870] /dev/rnullb0: Can't open blockdev [ 580.418833][T23851] wlan1 speed is unknown, defaulting to 1000 [ 580.537814][T23870] nbd: must specify at least one socket [ 580.654755][T23851] wlan1 speed is unknown, defaulting to 1000 [ 580.872322][T23851] wlan1 speed is unknown, defaulting to 1000 [ 580.886491][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 581.015030][T23851] wlan1 speed is unknown, defaulting to 1000 [ 581.645386][T23897] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.998538][T23906] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3754'. [ 582.231474][T23914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 582.424485][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 582.434199][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 582.442497][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 582.450875][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 582.458658][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.491074][T23915] wlan1 speed is unknown, defaulting to 1000 [ 582.745035][T23915] chnl_net:caif_netlink_parms(): no params data found [ 582.876493][T23915] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.883885][T23915] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.892250][T23915] bridge_slave_0: entered allmulticast mode [ 582.899492][T23915] bridge_slave_0: entered promiscuous mode [ 582.907913][T23915] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.915087][T23915] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.922908][T23915] bridge_slave_1: entered allmulticast mode [ 582.930284][T23915] bridge_slave_1: entered promiscuous mode [ 582.963455][T23915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.976722][T23915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.007170][T23915] team0: Port device team_slave_0 added [ 583.015149][T23915] team0: Port device team_slave_1 added [ 583.047326][T23915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.054332][T23915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.081163][T23915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.094218][T23915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.101539][T23915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.128091][T23915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.164501][T23915] hsr_slave_0: entered promiscuous mode [ 583.170848][T23915] hsr_slave_1: entered promiscuous mode [ 583.177337][T23915] debugfs: 'hsr0' already exists in 'hsr' [ 583.183074][T23915] Cannot create hsr debugfs directory [ 583.684261][T23915] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 583.700522][T23915] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 583.712988][T23915] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 583.723650][T23915] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 583.804564][T23915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.818917][T23915] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.830441][T14928] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.837588][T14928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.849317][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.856456][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.974709][T23915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.110336][T23915] veth0_vlan: entered promiscuous mode [ 584.120631][T23915] veth1_vlan: entered promiscuous mode [ 584.141081][T23915] veth0_macvtap: entered promiscuous mode [ 584.151569][T23915] veth1_macvtap: entered promiscuous mode [ 584.164251][T23915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.178455][T23915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.190988][T14938] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.200340][T14938] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.212868][T14938] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.221965][T14938] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.261801][T14928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.274197][T14928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.293129][T14928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.302046][T14928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.350600][T24312] netlink: 'syz.9.3756': attribute type 31 has an invalid length. [ 584.361617][T24312] netlink: 'syz.9.3756': attribute type 1 has an invalid length. [ 584.373048][T24312] bridge0: port 1(bridge_slave_0) entered learning state [ 584.485852][ T5863] Bluetooth: hci4: command tx timeout [ 584.510791][ T30] audit: type=1326 audit(1756553357.429:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.9.3766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dac18ebe9 code=0x0 [ 585.675919][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 585.827298][ T9] usb 10-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 585.838673][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.851766][ T9] usb 10-1: config 0 descriptor?? [ 586.063109][ T9] usb 10-1: can't set first interface for hiFace device. [ 586.070217][ T9] snd-usb-hiface 10-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 586.080669][ T9] usb 10-1: USB disconnect, device number 2 [ 586.576007][ T5863] Bluetooth: hci4: command tx timeout [ 586.588522][T24367] /dev/rnullb0: Can't open blockdev [ 587.046054][ T5891] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 587.207328][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.218373][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.228309][ T5891] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 587.238002][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.248241][ T5891] usb 10-1: config 0 descriptor?? [ 587.861744][ T5891] pyra 0003:1E7D:2CF6.0017: item fetching failed at offset 3/7 [ 587.870394][ T5891] pyra 0003:1E7D:2CF6.0017: parse failed [ 587.876166][ T5891] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -22 [ 588.163928][ T5891] usb 10-1: USB disconnect, device number 3 [ 588.656058][ T5863] Bluetooth: hci4: command tx timeout [ 589.017073][T24435] /dev/rnullb0: Can't open blockdev [ 589.355949][T24459] sctp: [Deprecated]: syz.4.3790 (pid 24459) Use of int in max_burst socket option deprecated. [ 589.355949][T24459] Use struct sctp_assoc_value instead [ 589.372492][T24460] sctp: [Deprecated]: syz.4.3790 (pid 24460) Use of int in max_burst socket option deprecated. [ 589.372492][T24460] Use struct sctp_assoc_value instead [ 589.545993][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 589.697580][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 589.707919][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 589.719677][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.735305][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 589.746813][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.754913][ T9] usb 10-1: Product: syz [ 589.760847][ T9] usb 10-1: Manufacturer: syz [ 589.765544][ T9] usb 10-1: SerialNumber: syz [ 589.779936][ T9] hub 10-1:1.0: bad descriptor, ignoring hub [ 589.788579][ T9] hub 10-1:1.0: probe with driver hub failed with error -5 [ 589.979070][ T9] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 590.586118][T24448] usb 10-1: reset high-speed USB device number 4 using dummy_hcd [ 590.726238][ T5863] Bluetooth: hci4: command tx timeout [ 590.746779][T24448] usb 10-1: device firmware changed [ 590.752611][ T9] usb 10-1: USB disconnect, device number 4 [ 590.762621][ T9] usblp0: removed [ 590.906140][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 590.997890][T24520] FAULT_INJECTION: forcing a failure. [ 590.997890][T24520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.012358][T24520] CPU: 1 UID: 0 PID: 24520 Comm: syz.8.3797 Not tainted syzkaller #0 PREEMPT(full) [ 591.012385][T24520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.012397][T24520] Call Trace: [ 591.012404][T24520] [ 591.012412][T24520] dump_stack_lvl+0x189/0x250 [ 591.012441][T24520] ? __pfx____ratelimit+0x10/0x10 [ 591.012461][T24520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.012482][T24520] ? __pfx__printk+0x10/0x10 [ 591.012506][T24520] ? rcu_is_watching+0x15/0xb0 [ 591.012524][T24520] should_fail_ex+0x414/0x560 [ 591.012547][T24520] _copy_to_user+0x31/0xb0 [ 591.012566][T24520] simple_read_from_buffer+0xe1/0x170 [ 591.012587][T24520] proc_fail_nth_read+0x1b3/0x220 [ 591.012610][T24520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.012632][T24520] ? rw_verify_area+0x2a6/0x4d0 [ 591.012648][T24520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.012670][T24520] vfs_read+0x200/0xa30 [ 591.012684][T24520] ? fdget_pos+0x247/0x320 [ 591.012705][T24520] ? __pfx___mutex_lock+0x10/0x10 [ 591.012726][T24520] ? __pfx_vfs_read+0x10/0x10 [ 591.012745][T24520] ? __fget_files+0x3a0/0x420 [ 591.012762][T24520] ? __fget_files+0x2a/0x420 [ 591.012783][T24520] ksys_read+0x145/0x250 [ 591.012800][T24520] ? __pfx_ksys_read+0x10/0x10 [ 591.012817][T24520] ? rcu_is_watching+0x15/0xb0 [ 591.012836][T24520] do_syscall_64+0xfa/0xfa0 [ 591.012857][T24520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.012874][T24520] ? clear_bhb_loop+0x60/0xb0 [ 591.012892][T24520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.012909][T24520] RIP: 0033:0x7f8b6458d5fc [ 591.012924][T24520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 591.012939][T24520] RSP: 002b:00007f8b627ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.012959][T24520] RAX: ffffffffffffffda RBX: 00007f8b647c5fa0 RCX: 00007f8b6458d5fc [ 591.012971][T24520] RDX: 000000000000000f RSI: 00007f8b627ee0a0 RDI: 0000000000000004 [ 591.012983][T24520] RBP: 00007f8b627ee090 R08: 0000000000000000 R09: 0000000000000000 [ 591.012994][T24520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.013005][T24520] R13: 00007f8b647c6038 R14: 00007f8b647c5fa0 R15: 00007ffd0e06e8f8 [ 591.013024][T24520] [ 591.246215][ T9] usb 10-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.261132][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 591.269831][ T9] usb 10-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.40 [ 591.279581][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.287728][ T9] usb 10-1: Product: syz [ 591.292000][ T9] usb 10-1: Manufacturer: syz [ 591.296753][ T9] usb 10-1: SerialNumber: syz [ 591.506727][T24448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.515446][T24448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.127195][T24528] /dev/rnullb0: Can't open blockdev [ 592.202199][T24532] mkiss: ax0: crc mode is auto. [ 592.239470][T24532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.637665][ T9] usbhid 10-1:1.0: can't add hid device: -71 [ 592.643771][ T9] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 592.649977][T24569] /dev/rnullb0: Can't open blockdev [ 592.670197][ T9] usb 10-1: USB disconnect, device number 5 [ 592.752534][T24582] /dev/rnullb0: Can't open blockdev [ 592.864271][T24594] FAULT_INJECTION: forcing a failure. [ 592.864271][T24594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.879985][T24594] CPU: 1 UID: 0 PID: 24594 Comm: syz.4.3810 Not tainted syzkaller #0 PREEMPT(full) [ 592.880011][T24594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.880022][T24594] Call Trace: [ 592.880030][T24594] [ 592.880037][T24594] dump_stack_lvl+0x189/0x250 [ 592.880065][T24594] ? __pfx____ratelimit+0x10/0x10 [ 592.880086][T24594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.880113][T24594] ? __pfx__printk+0x10/0x10 [ 592.880132][T24594] ? __might_fault+0xb0/0x130 [ 592.880158][T24594] ? rcu_is_watching+0x15/0xb0 [ 592.880178][T24594] should_fail_ex+0x414/0x560 [ 592.880202][T24594] _copy_from_user+0x2d/0xb0 [ 592.880220][T24594] ___sys_sendmsg+0x158/0x2a0 [ 592.880244][T24594] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.880279][T24594] ? __fget_files+0x2a/0x420 [ 592.880297][T24594] ? __fget_files+0x3a0/0x420 [ 592.880319][T24594] __x64_sys_sendmsg+0x19b/0x260 [ 592.880342][T24594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.880367][T24594] ? __pfx_ksys_write+0x10/0x10 [ 592.880385][T24594] ? rcu_is_watching+0x15/0xb0 [ 592.880403][T24594] do_syscall_64+0xfa/0xfa0 [ 592.880424][T24594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.880441][T24594] ? clear_bhb_loop+0x60/0xb0 [ 592.880459][T24594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.880475][T24594] RIP: 0033:0x7f77e818ebe9 [ 592.880490][T24594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.880505][T24594] RSP: 002b:00007f77e8ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.880524][T24594] RAX: ffffffffffffffda RBX: 00007f77e83c5fa0 RCX: 00007f77e818ebe9 [ 592.880537][T24594] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 592.880548][T24594] RBP: 00007f77e8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 592.880559][T24594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.880570][T24594] R13: 00007f77e83c6038 R14: 00007f77e83c5fa0 R15: 00007ffe378d3f58 [ 592.880590][T24594] [ 593.284008][T24618] /dev/rnullb0: Can't open blockdev [ 593.331622][T24622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 593.340596][T24622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 593.399228][T24627] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3818'. [ 593.554282][T24641] /dev/rnullb0: Can't open blockdev [ 593.658540][T24651] FAULT_INJECTION: forcing a failure. [ 593.658540][T24651] name failslab, interval 1, probability 0, space 0, times 0 [ 593.674485][T24651] CPU: 0 UID: 0 PID: 24651 Comm: syz.9.3822 Not tainted syzkaller #0 PREEMPT(full) [ 593.674510][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.674521][T24651] Call Trace: [ 593.674528][T24651] [ 593.674535][T24651] dump_stack_lvl+0x189/0x250 [ 593.674563][T24651] ? __pfx____ratelimit+0x10/0x10 [ 593.674584][T24651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.674607][T24651] ? __pfx__printk+0x10/0x10 [ 593.674630][T24651] ? fs_reclaim_acquire+0x7d/0x100 [ 593.674647][T24651] ? rcu_is_watching+0x15/0xb0 [ 593.674666][T24651] ? __pfx___might_resched+0x10/0x10 [ 593.674682][T24651] ? lock_acquire+0x5f/0x360 [ 593.674699][T24651] should_fail_ex+0x414/0x560 [ 593.674723][T24651] should_failslab+0xa8/0x100 [ 593.674740][T24651] kmem_cache_alloc_node_noprof+0x76/0x390 [ 593.674763][T24651] ? __alloc_skb+0x112/0x2d0 [ 593.674785][T24651] __alloc_skb+0x112/0x2d0 [ 593.674806][T24651] netlink_sendmsg+0x5c6/0xb30 [ 593.674831][T24651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.674852][T24651] ? aa_sock_msg_perm+0xf1/0x1d0 [ 593.674872][T24651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.674891][T24651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.674910][T24651] __sock_sendmsg+0x21c/0x270 [ 593.674928][T24651] ____sys_sendmsg+0x505/0x830 [ 593.674953][T24651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.674977][T24651] ? import_iovec+0x74/0xa0 [ 593.674997][T24651] ___sys_sendmsg+0x21f/0x2a0 [ 593.675044][T24651] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.675079][T24651] ? __fget_files+0x2a/0x420 [ 593.675097][T24651] ? __fget_files+0x3a0/0x420 [ 593.675119][T24651] __x64_sys_sendmsg+0x19b/0x260 [ 593.675142][T24651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.675167][T24651] ? __pfx_ksys_write+0x10/0x10 [ 593.675186][T24651] ? rcu_is_watching+0x15/0xb0 [ 593.675204][T24651] do_syscall_64+0xfa/0xfa0 [ 593.675224][T24651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.675242][T24651] ? clear_bhb_loop+0x60/0xb0 [ 593.675260][T24651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.675276][T24651] RIP: 0033:0x7f0dac18ebe9 [ 593.675289][T24651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.675301][T24651] RSP: 002b:00007f0dad0e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.675320][T24651] RAX: ffffffffffffffda RBX: 00007f0dac3c5fa0 RCX: 00007f0dac18ebe9 [ 593.675333][T24651] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 593.675348][T24651] RBP: 00007f0dad0e0090 R08: 0000000000000000 R09: 0000000000000000 [ 593.675359][T24651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.675370][T24651] R13: 00007f0dac3c6038 R14: 00007f0dac3c5fa0 R15: 00007ffdd5de5708 [ 593.675389][T24651] [ 594.032395][T24665] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3824'. [ 594.051181][T24671] binder: 24670:24671 ioctl c0306201 2000000002c0 returned -14 [ 594.098237][T24673] /dev/rnullb0: Can't open blockdev [ 594.418261][T24699] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 594.424808][T24699] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 594.434497][T24699] vhci_hcd vhci_hcd.0: Device attached [ 594.485166][T24700] usbip_core: unknown command [ 594.492090][T24700] vhci_hcd: unknown pdu 0 [ 594.496927][T24700] usbip_core: unknown command [ 594.503405][ T49] vhci_hcd: stop threads [ 594.508504][ T49] vhci_hcd: release socket [ 594.512935][ T49] vhci_hcd: disconnect device [ 595.042939][T24740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3840'. [ 595.058247][T24740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3840'. [ 595.157777][T24752] program syz.4.3844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.167988][T24752] /dev/rnullb0: Can't open blockdev [ 595.194442][T24754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3845'. [ 595.224422][T24756] FAULT_INJECTION: forcing a failure. [ 595.224422][T24756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.238190][T24756] CPU: 0 UID: 0 PID: 24756 Comm: syz.4.3846 Not tainted syzkaller #0 PREEMPT(full) [ 595.238214][T24756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.238223][T24756] Call Trace: [ 595.238231][T24756] [ 595.238238][T24756] dump_stack_lvl+0x189/0x250 [ 595.238265][T24756] ? __pfx____ratelimit+0x10/0x10 [ 595.238286][T24756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.238307][T24756] ? __pfx__printk+0x10/0x10 [ 595.238325][T24756] ? __might_fault+0xb0/0x130 [ 595.238350][T24756] ? rcu_is_watching+0x15/0xb0 [ 595.238367][T24756] should_fail_ex+0x414/0x560 [ 595.238389][T24756] _copy_from_iter+0x1de/0x1790 [ 595.238408][T24756] ? rcu_is_watching+0x15/0xb0 [ 595.238425][T24756] ? kmem_cache_alloc_node_noprof+0x203/0x390 [ 595.238448][T24756] ? __pfx__copy_from_iter+0x10/0x10 [ 595.238464][T24756] ? __build_skb_around+0x262/0x3f0 [ 595.238485][T24756] ? netlink_sendmsg+0x642/0xb30 [ 595.238504][T24756] ? skb_put+0x11b/0x210 [ 595.238524][T24756] netlink_sendmsg+0x6b2/0xb30 [ 595.238545][T24756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.238564][T24756] ? aa_sock_msg_perm+0xf1/0x1d0 [ 595.238585][T24756] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.238602][T24756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.238615][T24756] __sock_sendmsg+0x21c/0x270 [ 595.238627][T24756] ____sys_sendmsg+0x505/0x830 [ 595.238641][T24756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.238656][T24756] ? import_iovec+0x74/0xa0 [ 595.238667][T24756] ___sys_sendmsg+0x21f/0x2a0 [ 595.238681][T24756] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.238701][T24756] ? __fget_files+0x2a/0x420 [ 595.238712][T24756] ? __fget_files+0x3a0/0x420 [ 595.238725][T24756] __x64_sys_sendmsg+0x19b/0x260 [ 595.238738][T24756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.238753][T24756] ? __pfx_ksys_write+0x10/0x10 [ 595.238764][T24756] ? rcu_is_watching+0x15/0xb0 [ 595.238778][T24756] do_syscall_64+0xfa/0xfa0 [ 595.238791][T24756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.238801][T24756] ? clear_bhb_loop+0x60/0xb0 [ 595.238812][T24756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.238820][T24756] RIP: 0033:0x7f77e818ebe9 [ 595.238830][T24756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.238838][T24756] RSP: 002b:00007f77e8ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.238850][T24756] RAX: ffffffffffffffda RBX: 00007f77e83c5fa0 RCX: 00007f77e818ebe9 [ 595.238857][T24756] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 595.238863][T24756] RBP: 00007f77e8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 595.238869][T24756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.238875][T24756] R13: 00007f77e83c6038 R14: 00007f77e83c5fa0 R15: 00007ffe378d3f58 [ 595.238886][T24756] [ 595.895597][T24791] FAULT_INJECTION: forcing a failure. [ 595.895597][T24791] name failslab, interval 1, probability 0, space 0, times 0 [ 595.909284][T24791] CPU: 1 UID: 0 PID: 24791 Comm: syz.9.3855 Not tainted syzkaller #0 PREEMPT(full) [ 595.909311][T24791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.909322][T24791] Call Trace: [ 595.909329][T24791] [ 595.909336][T24791] dump_stack_lvl+0x189/0x250 [ 595.909364][T24791] ? __pfx____ratelimit+0x10/0x10 [ 595.909384][T24791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.909406][T24791] ? __pfx__printk+0x10/0x10 [ 595.909429][T24791] ? __pfx___might_resched+0x10/0x10 [ 595.909445][T24791] ? lock_acquire+0x5f/0x360 [ 595.909463][T24791] should_fail_ex+0x414/0x560 [ 595.909486][T24791] should_failslab+0xa8/0x100 [ 595.909504][T24791] kmem_cache_alloc_node_noprof+0x76/0x390 [ 595.909526][T24791] ? __alloc_skb+0x112/0x2d0 [ 595.909547][T24791] __alloc_skb+0x112/0x2d0 [ 595.909569][T24791] netlink_ack+0x146/0xa50 [ 595.909587][T24791] ? __up_read+0x280/0x680 [ 595.909607][T24791] ? __pfx___up_read+0x10/0x10 [ 595.909630][T24791] rdma_nl_rcv+0x3c8/0x980 [ 595.909656][T24791] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 595.909678][T24791] ? net_generic+0x1e/0x240 [ 595.909693][T24791] ? rcu_is_watching+0x15/0xb0 [ 595.909721][T24791] netlink_unicast+0x82f/0x9e0 [ 595.909742][T24791] ? __pfx_netlink_unicast+0x10/0x10 [ 595.909761][T24791] ? netlink_sendmsg+0x642/0xb30 [ 595.909781][T24791] ? skb_put+0x11b/0x210 [ 595.909802][T24791] netlink_sendmsg+0x805/0xb30 [ 595.909825][T24791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.909847][T24791] ? aa_sock_msg_perm+0xf1/0x1d0 [ 595.909870][T24791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.909889][T24791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.909909][T24791] __sock_sendmsg+0x21c/0x270 [ 595.909929][T24791] ____sys_sendmsg+0x505/0x830 [ 595.909952][T24791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.909977][T24791] ? import_iovec+0x74/0xa0 [ 595.909996][T24791] ___sys_sendmsg+0x21f/0x2a0 [ 595.910019][T24791] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.910054][T24791] ? __fget_files+0x2a/0x420 [ 595.910069][T24791] ? __fget_files+0x3a0/0x420 [ 595.910088][T24791] __x64_sys_sendmsg+0x19b/0x260 [ 595.910109][T24791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.910137][T24791] ? __pfx_ksys_write+0x10/0x10 [ 595.910148][T24791] ? rcu_is_watching+0x15/0xb0 [ 595.910158][T24791] do_syscall_64+0xfa/0xfa0 [ 595.910171][T24791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.910180][T24791] ? clear_bhb_loop+0x60/0xb0 [ 595.910190][T24791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.910200][T24791] RIP: 0033:0x7f0dac18ebe9 [ 595.910210][T24791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.910218][T24791] RSP: 002b:00007f0dad0e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.910230][T24791] RAX: ffffffffffffffda RBX: 00007f0dac3c5fa0 RCX: 00007f0dac18ebe9 [ 595.910238][T24791] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 595.910244][T24791] RBP: 00007f0dad0e0090 R08: 0000000000000000 R09: 0000000000000000 [ 595.910251][T24791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.910256][T24791] R13: 00007f0dac3c6038 R14: 00007f0dac3c5fa0 R15: 00007ffdd5de5708 [ 595.910267][T24791] [ 596.626760][ T985] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 596.779970][ T985] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.790347][ T985] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 596.802175][ T985] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 596.813341][ T985] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 596.824485][ T985] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 596.834299][ T985] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.849959][ T985] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 596.859190][ T985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.867420][ T985] usb 10-1: Product: syz [ 596.871736][ T985] usb 10-1: Manufacturer: syz [ 596.876482][ T985] usb 10-1: SerialNumber: syz [ 596.882539][ T985] usb 10-1: config 0 descriptor?? [ 596.888317][T24797] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 596.897020][ T985] ati_remote 10-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 597.098796][T24797] /dev/rnullb0: Can't open blockdev [ 597.104661][ T5891] usb 10-1: USB disconnect, device number 6 [ 597.745412][T24827] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 597.765125][T24828] /dev/rnullb0: Can't open blockdev [ 597.799021][T24833] /dev/rnullb0: Can't open blockdev [ 597.839062][T24836] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 597.852382][T24836] /dev/rnullb0: Can't open blockdev [ 597.860588][T24836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3862'. [ 598.585193][T24859] /dev/rnullb0: Can't open blockdev [ 598.592166][T24859] /dev/rnullb0: Can't open blockdev [ 598.910552][T24888] /dev/dlm_plock: Can't lookup blockdev [ 598.928653][T24891] /dev/rnullb0: Can't open blockdev [ 599.058946][T24902] /dev/rnullb0: Can't open blockdev [ 599.083141][T24904] FAULT_INJECTION: forcing a failure. [ 599.083141][T24904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.096548][T24904] CPU: 0 UID: 0 PID: 24904 Comm: syz.4.3881 Not tainted syzkaller #0 PREEMPT(full) [ 599.096581][T24904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.096592][T24904] Call Trace: [ 599.096599][T24904] [ 599.096607][T24904] dump_stack_lvl+0x189/0x250 [ 599.096634][T24904] ? __pfx____ratelimit+0x10/0x10 [ 599.096655][T24904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.096676][T24904] ? __pfx__printk+0x10/0x10 [ 599.096696][T24904] ? __might_fault+0xb0/0x130 [ 599.096721][T24904] ? rcu_is_watching+0x15/0xb0 [ 599.096741][T24904] should_fail_ex+0x414/0x560 [ 599.096765][T24904] _copy_from_user+0x2d/0xb0 [ 599.096784][T24904] kstrtouint_from_user+0xc4/0x170 [ 599.096806][T24904] ? __might_fault+0xb0/0x130 [ 599.096826][T24904] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 599.096851][T24904] ? vfs_write+0x211/0xb30 [ 599.096866][T24904] ? rcu_is_watching+0x15/0xb0 [ 599.096885][T24904] proc_fail_nth_write+0x88/0x200 [ 599.096906][T24904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.096926][T24904] ? security_file_permission+0x75/0x290 [ 599.096944][T24904] ? preempt_count_add+0x91/0x1a0 [ 599.096961][T24904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.096983][T24904] vfs_write+0x27b/0xb30 [ 599.097002][T24904] ? __pfx_vfs_write+0x10/0x10 [ 599.097021][T24904] ? __fget_files+0x3a0/0x420 [ 599.097039][T24904] ? __fget_files+0x2a/0x420 [ 599.097061][T24904] ksys_write+0x145/0x250 [ 599.097077][T24904] ? __pfx_ksys_write+0x10/0x10 [ 599.097095][T24904] ? rcu_is_watching+0x15/0xb0 [ 599.097121][T24904] do_syscall_64+0xfa/0xfa0 [ 599.097141][T24904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.097157][T24904] ? clear_bhb_loop+0x60/0xb0 [ 599.097175][T24904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.097191][T24904] RIP: 0033:0x7f77e818d69f [ 599.097207][T24904] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 599.097221][T24904] RSP: 002b:00007f77e8ff7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 599.097238][T24904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77e818d69f [ 599.097249][T24904] RDX: 0000000000000001 RSI: 00007f77e8ff70a0 RDI: 0000000000000004 [ 599.097258][T24904] RBP: 00007f77e8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 599.097268][T24904] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 599.097276][T24904] R13: 00007f77e83c6038 R14: 00007f77e83c5fa0 R15: 00007ffe378d3f58 [ 599.097293][T24904] [ 599.307108][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.317033][ T985] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 599.380006][T24906] block nbd4: Attempted send on invalid socket [ 599.386186][T24906] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.395911][T24906] block nbd4: Attempted send on invalid socket [ 599.402136][T24906] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.411444][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 599.421198][T24906] block nbd4: Attempted send on invalid socket [ 599.428090][T24906] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.451449][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 599.461624][T24906] block nbd4: Attempted send on invalid socket [ 599.469959][T24906] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.480072][T24906] block nbd4: Attempted send on invalid socket [ 599.486455][T24906] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.495758][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 599.505750][T24906] block nbd4: Attempted send on invalid socket [ 599.511990][T24906] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.521491][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 599.532312][ T985] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.544098][ T985] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.547885][T24906] block nbd4: Attempted send on invalid socket [ 599.554032][ T985] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 599.569343][ T985] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.578165][T24906] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.588157][ T985] usb 10-1: config 0 descriptor?? [ 599.604480][T24906] block nbd4: Attempted send on invalid socket [ 599.610883][T24906] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.620596][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 599.630502][T24906] block nbd4: Attempted send on invalid socket [ 599.636804][T24906] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.647176][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 599.657164][T24906] block nbd4: Attempted send on invalid socket [ 599.663421][T24906] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.672945][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 599.682771][T24906] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 599.711015][T24906] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 599.870027][T24919] /dev/rnullb0: Can't open blockdev [ 599.913568][T24921] netlink: 192 bytes leftover after parsing attributes in process `syz.8.3885'. [ 599.929427][T24921] /dev/rnullb0: Can't open blockdev [ 600.005376][ T985] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 600.023669][ T985] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 600.042855][ T985] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 600.053335][ T985] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 600.063664][ T985] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 600.087174][ T985] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 600.094766][ T985] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 600.108664][ T985] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 600.196734][ T985] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 600.801932][T24877] cp2112 0003:10C4:EA90.0018: Error starting transaction: -38 [ 600.812884][ T985] cp2112 0003:10C4:EA90.0018: error reading lock byte: -71 [ 600.826218][ T985] usb 10-1: USB disconnect, device number 7 [ 601.351523][T24989] overlay: filesystem on ./bus not supported as upperdir [ 601.359302][T24989] overlay: ./file1 is not a directory [ 601.746583][ T43] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 601.909370][ T43] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 601.917664][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 601.929135][ T43] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.941211][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 601.952635][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 601.964623][ T43] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 601.972291][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 601.983097][ T43] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.994881][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.006792][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.020301][ T43] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 602.027947][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 602.038756][ T43] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.050683][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.061994][ T43] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.075378][ T43] usb 10-1: string descriptor 0 read error: -22 [ 602.081710][ T43] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 602.090913][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.106807][ T43] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 602.363923][ T9] usb 10-1: USB disconnect, device number 8 [ 603.360505][T25048] /dev/rnullb0: Can't open blockdev [ 603.562120][T25071] binder: 25070:25071 unknown command 0 [ 603.571565][T25071] binder: 25070:25071 ioctl c0306201 200000000080 returned -22 [ 603.587700][ T43] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 603.634458][T25077] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3909'. [ 603.769911][ T43] usb 10-1: config 0 has an invalid interface number: 6 but max is 0 [ 603.778411][ T43] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.789898][ T43] usb 10-1: config 0 has no interface number 0 [ 603.796174][ T43] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 603.807795][ T43] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.820025][ T43] usb 10-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 603.829664][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.838156][ T43] usb 10-1: Product: syz [ 603.842641][ T43] usb 10-1: Manufacturer: syz [ 603.848638][ T43] usb 10-1: SerialNumber: syz [ 603.856203][ T43] usb 10-1: config 0 descriptor?? [ 603.864726][T25094] netlink: 'syz.4.3913': attribute type 10 has an invalid length. [ 603.865311][T25043] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 603.886474][ T43] vmk80xx 10-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 603.897861][ T43] vmk80xx 10-1:0.6: probe with driver vmk80xx failed with error -22 [ 604.094470][T20955] usb 10-1: USB disconnect, device number 9 [ 604.642039][T25117] /dev/rnullb0: Can't open blockdev [ 604.713487][T25122] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3917'. [ 604.725814][T25122] /dev/rnullb0: Can't open blockdev [ 604.763132][T25125] binder: 25124:25125 unknown command 0 [ 604.771294][T25125] binder: 25124:25125 ioctl c0306201 200000000080 returned -22 [ 605.076678][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 605.206780][ T9] usb 10-1: device descriptor read/64, error -71 [ 605.446631][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 605.576533][ T9] usb 10-1: device descriptor read/64, error -71 [ 605.689968][ T9] usb usb10-port1: attempt power cycle [ 606.026711][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 606.047017][ T9] usb 10-1: device descriptor read/8, error -71 [ 606.273835][T25145] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 606.280764][T25145] /dev/rnullb0: Can't open blockdev [ 606.306595][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 606.306933][T25148] comedi comedi3: comedi_config --init_data is deprecated [ 606.324785][T25148] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 606.332185][T25148] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 606.339021][T25148] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 606.339537][ T9] usb 10-1: device descriptor read/8, error -71 [ 606.345493][T25148] comedi comedi3: 8255: I/O port conflict (0x5495239c,4) [ 606.359561][T25148] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 606.366070][T25148] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 606.373063][T25148] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 606.379913][T25148] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 606.386911][T25148] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 606.393370][T25148] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 606.400226][T25148] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 606.407183][T25148] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 606.458347][ T9] usb usb10-port1: unable to enumerate USB device [ 606.651811][T25158] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 606.992397][T25176] binder: 25175:25176 unknown command 0 [ 606.999167][T25176] binder: 25175:25176 ioctl c0306201 200000000080 returned -22 [ 607.715920][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.725254][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.735144][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.744221][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.753356][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.762534][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.772061][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.781184][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.790283][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 607.800068][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3931'. [ 608.516611][T25213] ntfs3(nullb0): Primary boot signature is not NTFS. [ 608.523543][T25213] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 608.544198][T25216] binder: 25215:25216 unknown command 0 [ 608.550707][T25216] binder: 25215:25216 ioctl c0306201 200000000080 returned -22 [ 608.584379][T25219] /dev/rnullb0: Can't open blockdev [ 608.595079][T25221] /dev/rnullb0: Can't open blockdev [ 608.906746][ T985] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 609.036958][ T985] usb 10-1: device descriptor read/64, error -71 [ 609.276716][ T985] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 609.406861][ T985] usb 10-1: device descriptor read/64, error -71 [ 609.517393][ T985] usb usb10-port1: attempt power cycle [ 609.857602][ T985] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 609.881171][ T985] usb 10-1: device descriptor read/8, error -71 [ 610.136811][ T985] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 610.157278][ T985] usb 10-1: device descriptor read/8, error -71 [ 610.267192][ T985] usb usb10-port1: unable to enumerate USB device [ 610.895393][T25270] binder: 25269:25270 unknown command 0 [ 610.901181][T25270] binder: 25269:25270 ioctl c0306201 200000000080 returned -22 [ 611.016081][T25291] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 611.023736][T25291] /dev/rnullb0: Can't open blockdev [ 611.701847][T25319] binder: 25318:25319 unknown command 0 [ 611.708825][T25319] binder: 25318:25319 ioctl c0306201 200000000080 returned -22 [ 612.137167][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 612.289141][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.300315][ T9] usb 10-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 612.309550][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.319125][ T9] usb 10-1: config 0 descriptor?? [ 612.547585][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 612.565265][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 612.584704][ T9] usb 10-1: USB disconnect, device number 18 [ 612.598124][T25368] binder: 25367:25368 unknown command 0 [ 612.603715][T25368] binder: 25367:25368 ioctl c0306201 200000000080 returned -22 [ 613.346460][T25397] program syz.9.3975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.434556][T25411] binder: 25410:25411 unknown command 0 [ 613.440727][T25411] binder: 25410:25411 ioctl c0306201 200000000080 returned -22 [ 613.703879][T20980] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 613.717933][T20980] CPU: 1 UID: 0 PID: 20980 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 613.717959][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.717971][T20980] Call Trace: [ 613.717978][T20980] [ 613.717986][T20980] dump_stack_lvl+0x189/0x250 [ 613.718015][T20980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.718037][T20980] ? __pfx__printk+0x10/0x10 [ 613.718061][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.718080][T20980] dump_header+0xd3/0x480 [ 613.718097][T20980] oom_kill_process+0x387/0x920 [ 613.718118][T20980] out_of_memory+0xf09/0x12a0 [ 613.718138][T20980] ? mem_cgroup_iter+0x3b/0x460 [ 613.718158][T20980] ? __pfx_out_of_memory+0x10/0x10 [ 613.718179][T20980] mem_cgroup_out_of_memory+0x145/0x240 [ 613.718197][T20980] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 613.718217][T20980] ? _raw_spin_unlock+0x28/0x50 [ 613.718236][T20980] ? memcg1_oom_prepare+0x37f/0x450 [ 613.718258][T20980] try_charge_memcg+0xdff/0x1290 [ 613.718280][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.718302][T20980] ? __pfx_try_charge_memcg+0x10/0x10 [ 613.718324][T20980] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 613.718341][T20980] ? xa_load+0x60/0x210 [ 613.718362][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.718381][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.718404][T20980] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 613.718427][T20980] charge_memcg+0x9f/0x180 [ 613.718448][T20980] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 613.718471][T20980] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 613.718494][T20980] __read_swap_cache_async+0x28c/0x510 [ 613.718517][T20980] swap_cluster_readahead+0x4cf/0x5f0 [ 613.718539][T20980] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 613.718560][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.718577][T20980] ? filemap_get_entry+0xad/0x2f0 [ 613.718595][T20980] ? get_vma_policy+0x27c/0x3c0 [ 613.718619][T20980] swapin_readahead+0x17d/0xb50 [ 613.718637][T20980] ? __pfx_filemap_get_entry+0x10/0x10 [ 613.718657][T20980] ? get_swap_device_info+0x1c/0x2b0 [ 613.718675][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.718692][T20980] ? __pfx_swapin_readahead+0x10/0x10 [ 613.718713][T20980] ? __filemap_get_folio+0x9a6/0xaf0 [ 613.718733][T20980] ? swap_cache_get_folio+0xae/0x3b0 [ 613.718753][T20980] do_swap_page+0x525/0x5ac0 [ 613.718774][T20980] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 613.718797][T20980] ? ___pte_offset_map+0x29/0x250 [ 613.718819][T20980] ? lock_acquire+0x5f/0x360 [ 613.718834][T20980] ? do_swap_page+0x184/0x5ac0 [ 613.718854][T20980] ? __pfx_do_swap_page+0x10/0x10 [ 613.718874][T20980] ? __pfx_default_wake_function+0x10/0x10 [ 613.718891][T20980] ? ___pte_offset_map+0x45/0x250 [ 613.718911][T20980] ? ___pte_offset_map+0x1cf/0x250 [ 613.718932][T20980] ? pte_offset_map_rw_nolock+0xea/0x160 [ 613.718954][T20980] __handle_mm_fault+0xe55/0x5400 [ 613.718982][T20980] ? __pfx___handle_mm_fault+0x10/0x10 [ 613.719003][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.719024][T20980] ? lock_vma_under_rcu+0x3cb/0x450 [ 613.719041][T20980] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 613.719059][T20980] handle_mm_fault+0x40a/0x8e0 [ 613.719085][T20980] do_user_addr_fault+0xa81/0x1390 [ 613.719105][T20980] ? rcu_is_watching+0x15/0xb0 [ 613.719123][T20980] ? trace_page_fault_user+0x84/0x1e0 [ 613.719140][T20980] exc_page_fault+0x82/0x100 [ 613.719162][T20980] asm_exc_page_fault+0x26/0x30 [ 613.719178][T20980] RIP: 0033:0x7f8b645c14a8 [ 613.719195][T20980] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 613.719210][T20980] RSP: 002b:00007ffd0e06ec10 EFLAGS: 00010293 [ 613.719227][T20980] RAX: 0000000000000000 RBX: 0000000000000129 RCX: 00007f8b645c14a5 [ 613.719240][T20980] RDX: 00007ffd0e06ec50 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.719252][T20980] RBP: 00007ffd0e06ecbc R08: 0000000000000000 R09: 0000000000000000 [ 613.719263][T20980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 613.719274][T20980] R13: 00000000000927c0 R14: 0000000000095620 R15: 00007ffd0e06ed10 [ 613.719293][T20980] [ 613.719300][T20980] memory: usage 307200kB, limit 307200kB, failcnt 4133 [ 614.128699][T20980] memory+swap: usage 306864kB, limit 9007199254740988kB, failcnt 0 [ 614.140493][T20980] kmem: usage 1512kB, limit 9007199254740988kB, failcnt 0 [ 614.148997][T20980] Memory cgroup stats for /syz8: [ 614.149141][T20980] cache 312004608 [ 614.162054][T20980] rss 102400 [ 614.165272][T20980] rss_huge 0 [ 614.169141][T25431] /dev/rnullb0: Can't open blockdev [ 614.174407][T20980] shmem 312004608 [ 614.178427][T20980] mapped_file 0 [ 614.181886][T20980] dirty 0 [ 614.184818][T20980] writeback 0 [ 614.191513][T20980] workingset_refault_anon 137 [ 614.196507][T20980] workingset_refault_file 0 [ 614.201545][T20980] swap 368640 [ 614.205348][T20980] swapcached 110592 [ 614.209499][T20980] pgpgin 300700 [ 614.212960][T20980] pgpgout 225005 [ 614.216501][T20980] pgfault 72825 [ 614.220378][T20980] pgmajfault 178 [ 614.223927][T20980] inactive_anon 312012800 [ 614.232101][T20980] active_anon 118784 [ 614.236125][T20980] inactive_file 0 [ 614.242198][T20980] active_file 0 [ 614.245694][T20980] unevictable 0 [ 614.250279][T20980] hierarchical_memory_limit 314572800 [ 614.255660][T20980] hierarchical_memsw_limit 9223372036854771712 [ 614.264325][T20980] total_cache 312004608 [ 614.268617][T20980] total_rss 102400 [ 614.272773][T20980] total_rss_huge 0 [ 614.276667][T20980] total_shmem 312004608 [ 614.282887][T20980] total_mapped_file 0 [ 614.287319][T20980] total_dirty 0 [ 614.291816][T20980] total_writeback 0 [ 614.295660][T20980] total_workingset_refault_anon 137 [ 614.303193][T20980] total_workingset_refault_file 0 [ 614.308636][T20980] total_swap 368640 [ 614.312601][T20980] total_swapcached 110592 [ 614.318844][T20980] total_pgpgin 300700 [ 614.322961][T20980] total_pgpgout 225005 [ 614.327563][T20980] total_pgfault 72825 [ 614.331652][T20980] total_pgmajfault 178 [ 614.335844][T20980] total_inactive_anon 312012800 [ 614.346407][T20980] total_active_anon 118784 [ 614.351214][T20980] total_inactive_file 0 [ 614.355438][T20980] total_active_file 0 [ 614.357618][T20955] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 614.359830][T20980] total_unevictable 0 [ 614.374033][T20980] anon_cost 0 [ 614.377587][T20980] file_cost 0 [ 614.380899][T20980] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3966,pid=25360,uid=0 [ 614.399002][T20980] Memory cgroup out of memory: Killed process 25360 (syz.8.3966) total-vm:101876kB, anon-rss:1116kB, file-rss:23076kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 614.506824][T20955] usb 10-1: device descriptor read/64, error -71 [ 614.746973][T20955] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 614.886903][T20955] usb 10-1: device descriptor read/64, error -71 [ 614.997585][T20955] usb usb10-port1: attempt power cycle [ 615.347075][T20955] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 615.379107][T20955] usb 10-1: device descriptor read/8, error -71 [ 615.540689][T25464] binder: 25462:25464 unknown command 0 [ 615.556519][T25464] binder: 25462:25464 ioctl c0306201 200000000080 returned -22 [ 615.633769][T25470] binder: BINDER_SET_CONTEXT_MGR already set [ 615.639999][T20955] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 615.649665][T25470] binder: 25469:25470 ioctl 40046207 0 returned -16 [ 615.679774][T20955] usb 10-1: device descriptor read/8, error -71 [ 615.790582][T20955] usb usb10-port1: unable to enumerate USB device [ 615.815268][T25483] fuse: Bad value for 'max_read' [ 615.902309][T25490] 9p: Bad value for 'rfdno' [ 616.002278][T25499] binder: 25497:25499 ioctl c0306201 200000000080 returned -14 [ 616.019622][T25499] binder: 25497:25499 ioctl c018937c 200000000140 returned -22 [ 616.031890][T25499] /dev/rnullb0: Can't open blockdev [ 616.083461][ T5863] Bluetooth: unknown link type 190 [ 616.089049][ T5863] Bluetooth: hci2: connection err: -111 [ 616.655119][T25516] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.992652][T25538] netlink: 'syz.9.4001': attribute type 10 has an invalid length. [ 617.000999][T25538] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.008494][T25538] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.374471][T25561] binder: 25560:25561 unknown command 0 [ 617.381939][T25561] binder: 25560:25561 ioctl c0306201 200000000080 returned -22 [ 617.394348][T25561] binder_alloc: 25560: binder_alloc_buf, no vma [ 617.545074][T25579] binder: 25578:25579 unknown command 0 [ 617.556314][T25579] binder: 25578:25579 ioctl c0306201 200000000080 returned -22 [ 617.656526][T25595] binder: 25594:25595 unknown command 0 [ 617.662524][T25595] binder: 25594:25595 ioctl c0306201 200000000080 returned -22 [ 617.677551][T25595] binder_alloc: 25594: binder_alloc_buf, no vma [ 617.719161][T25598] netlink: 'syz.4.4020': attribute type 2 has an invalid length. [ 617.727423][T25598] netlink: 'syz.4.4020': attribute type 8 has an invalid length. [ 617.735164][T25598] __nla_validate_parse: 27 callbacks suppressed [ 617.735178][T25598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4020'. [ 617.753966][T25598] /dev/rnullb0: Can't open blockdev [ 617.878929][T25624] MTD: Attempt to mount non-MTD device "/dev/nbd7" [ 617.886826][T25624] cramfs: wrong magic [ 617.888796][T25626] binder: 25625:25626 unknown command 0 [ 617.915814][T25626] binder: 25625:25626 ioctl c0306201 200000000080 returned -22 [ 618.000736][T25635] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 618.007967][T25635] /dev/rnullb0: Can't open blockdev [ 618.054488][T25637] binder: 25636:25637 unknown command 0 [ 618.071165][T25637] binder: 25636:25637 ioctl c0306201 200000000080 returned -22 [ 618.088010][T25637] FAULT_INJECTION: forcing a failure. [ 618.088010][T25637] name failslab, interval 1, probability 0, space 0, times 0 [ 618.102061][T25637] CPU: 1 UID: 0 PID: 25637 Comm: syz.4.4029 Not tainted syzkaller #0 PREEMPT(full) [ 618.102086][T25637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.102097][T25637] Call Trace: [ 618.102104][T25637] [ 618.102112][T25637] dump_stack_lvl+0x189/0x250 [ 618.102138][T25637] ? __pfx____ratelimit+0x10/0x10 [ 618.102157][T25637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.102177][T25637] ? __pfx__printk+0x10/0x10 [ 618.102199][T25637] ? __pfx___might_resched+0x10/0x10 [ 618.102217][T25637] ? lock_acquire+0x5f/0x360 [ 618.102233][T25637] should_fail_ex+0x414/0x560 [ 618.102256][T25637] should_failslab+0xa8/0x100 [ 618.102273][T25637] __kmalloc_cache_noprof+0x70/0x3a0 [ 618.102295][T25637] ? binder_transaction+0x69c/0x6450 [ 618.102319][T25637] binder_transaction+0x69c/0x6450 [ 618.102342][T25637] ? ima_match_policy+0x20c3/0x2150 [ 618.102359][T25637] ? __kasan_slab_free+0x5b/0x80 [ 618.102384][T25637] ? lock_acquire+0x5f/0x360 [ 618.102397][T25637] ? ima_match_policy+0x10b/0x2150 [ 618.102415][T25637] ? __pfx_binder_transaction+0x10/0x10 [ 618.102434][T25637] ? down_write+0x162/0x1f0 [ 618.102451][T25637] ? rcu_is_watching+0x15/0xb0 [ 618.102472][T25637] ? __might_fault+0xb0/0x130 [ 618.102492][T25637] ? rcu_is_watching+0x15/0xb0 [ 618.102510][T25637] ? lock_acquire+0x5f/0x360 [ 618.102526][T25637] ? rcu_is_watching+0x15/0xb0 [ 618.102544][T25637] ? lock_release+0x4b/0x3e0 [ 618.102558][T25637] ? __might_fault+0xb0/0x130 [ 618.102577][T25637] ? __might_fault+0xcc/0x130 [ 618.102599][T25637] binder_ioctl_write_read+0xd6a/0xa040 [ 618.102626][T25637] ? is_bpf_text_address+0x26/0x2b0 [ 618.102644][T25637] ? kernel_text_address+0xa5/0xe0 [ 618.102667][T25637] ? unwind_get_return_address+0x4d/0x90 [ 618.102690][T25637] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 618.102712][T25637] ? stack_trace_save+0x9c/0xe0 [ 618.102729][T25637] ? __pfx_stack_trace_save+0x10/0x10 [ 618.102747][T25637] ? stack_depot_save_flags+0x40/0x860 [ 618.102771][T25637] ? kasan_save_track+0x4f/0x80 [ 618.102790][T25637] ? kasan_save_track+0x3e/0x80 [ 618.102809][T25637] ? __kasan_save_free_info+0x46/0x50 [ 618.102826][T25637] ? __kasan_slab_free+0x5b/0x80 [ 618.102846][T25637] ? kfree+0x18e/0x440 [ 618.102864][T25637] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 618.102882][T25637] ? security_file_ioctl+0xcb/0x2d0 [ 618.102898][T25637] ? __se_sys_ioctl+0x47/0x170 [ 618.102919][T25637] ? do_syscall_64+0xfa/0xfa0 [ 618.102938][T25637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.102960][T25637] ? __pfx_binder_debug+0x10/0x10 [ 618.102979][T25637] ? do_raw_spin_lock+0x121/0x290 [ 618.103000][T25637] ? rcu_is_watching+0x15/0xb0 [ 618.103022][T25637] ? _raw_spin_unlock+0x28/0x50 [ 618.103047][T25637] ? binder_get_thread+0x178/0x6d0 [ 618.103067][T25637] binder_ioctl+0x3e0/0x19c0 [ 618.103087][T25637] ? lock_release+0x4b/0x3e0 [ 618.103102][T25637] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 618.103117][T25637] ? kfree+0x18e/0x440 [ 618.103138][T25637] ? do_vfs_ioctl+0xbe8/0x1430 [ 618.103152][T25637] ? __pfx_binder_ioctl+0x10/0x10 [ 618.103172][T25637] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 618.103197][T25637] ? lock_release+0x4b/0x3e0 [ 618.103211][T25637] ? vfs_write+0x956/0xb30 [ 618.103229][T25637] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 618.103260][T25637] ? __fget_files+0x3a0/0x420 [ 618.103277][T25637] ? __fget_files+0x2a/0x420 [ 618.103296][T25637] ? bpf_lsm_file_ioctl+0x9/0x20 [ 618.103317][T25637] ? __pfx_binder_ioctl+0x10/0x10 [ 618.103336][T25637] __se_sys_ioctl+0xf9/0x170 [ 618.103359][T25637] do_syscall_64+0xfa/0xfa0 [ 618.103379][T25637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.103395][T25637] ? clear_bhb_loop+0x60/0xb0 [ 618.103413][T25637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.103429][T25637] RIP: 0033:0x7f77e818ebe9 [ 618.103445][T25637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.103460][T25637] RSP: 002b:00007f77e8ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.103478][T25637] RAX: ffffffffffffffda RBX: 00007f77e83c5fa0 RCX: 00007f77e818ebe9 [ 618.103492][T25637] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 618.103503][T25637] RBP: 00007f77e8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 618.103514][T25637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.103525][T25637] R13: 00007f77e83c6038 R14: 00007f77e83c5fa0 R15: 00007ffe378d3f58 [ 618.103545][T25637] [ 618.870031][T25661] Dead loop on virtual device ip6_vti0, fix it urgently! [ 618.880291][T25656] /dev/rnullb0: Can't open blockdev [ 618.906244][T25663] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.4038'. [ 618.954216][T25668] binder: 25664:25668 unknown command 0 [ 618.959936][T25668] binder: 25664:25668 ioctl c0306201 200000000080 returned -22 [ 619.051597][T25676] binder: 25674:25676 unknown command 0 [ 619.075623][T25676] binder: 25674:25676 ioctl c0306201 200000000080 returned -22 [ 619.088932][T25676] FAULT_INJECTION: forcing a failure. [ 619.088932][T25676] name failslab, interval 1, probability 0, space 0, times 0 [ 619.128376][T25676] CPU: 1 UID: 0 PID: 25676 Comm: syz.7.4040 Not tainted syzkaller #0 PREEMPT(full) [ 619.128402][T25676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.128413][T25676] Call Trace: [ 619.128421][T25676] [ 619.128428][T25676] dump_stack_lvl+0x189/0x250 [ 619.128468][T25676] ? __pfx____ratelimit+0x10/0x10 [ 619.128488][T25676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.128509][T25676] ? __pfx__printk+0x10/0x10 [ 619.128529][T25676] ? binder_debug+0x13f/0x1b0 [ 619.128551][T25676] ? __pfx___might_resched+0x10/0x10 [ 619.128569][T25676] ? lock_acquire+0x5f/0x360 [ 619.128586][T25676] should_fail_ex+0x414/0x560 [ 619.128609][T25676] should_failslab+0xa8/0x100 [ 619.128626][T25676] __kmalloc_cache_noprof+0x70/0x3a0 [ 619.128649][T25676] ? binder_transaction+0x1e44/0x6450 [ 619.128672][T25676] binder_transaction+0x1e44/0x6450 [ 619.128696][T25676] ? __kasan_slab_free+0x5b/0x80 [ 619.128723][T25676] ? lock_acquire+0x5f/0x360 [ 619.128738][T25676] ? ima_match_policy+0x10b/0x2150 [ 619.128758][T25676] ? __pfx_binder_transaction+0x10/0x10 [ 619.128778][T25676] ? down_write+0x162/0x1f0 [ 619.128795][T25676] ? rcu_is_watching+0x15/0xb0 [ 619.128817][T25676] ? __might_fault+0xb0/0x130 [ 619.128838][T25676] ? rcu_is_watching+0x15/0xb0 [ 619.128855][T25676] ? lock_acquire+0x5f/0x360 [ 619.128872][T25676] ? rcu_is_watching+0x15/0xb0 [ 619.128889][T25676] ? lock_release+0x4b/0x3e0 [ 619.128911][T25676] ? __might_fault+0xb0/0x130 [ 619.128931][T25676] ? __might_fault+0xcc/0x130 [ 619.128955][T25676] binder_ioctl_write_read+0xd6a/0xa040 [ 619.128982][T25676] ? is_bpf_text_address+0x26/0x2b0 [ 619.128999][T25676] ? kernel_text_address+0xa5/0xe0 [ 619.129022][T25676] ? unwind_get_return_address+0x4d/0x90 [ 619.129047][T25676] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 619.129068][T25676] ? stack_trace_save+0x9c/0xe0 [ 619.129087][T25676] ? __pfx_stack_trace_save+0x10/0x10 [ 619.129107][T25676] ? stack_depot_save_flags+0x40/0x860 [ 619.129131][T25676] ? kasan_save_track+0x4f/0x80 [ 619.129149][T25676] ? kasan_save_track+0x3e/0x80 [ 619.129168][T25676] ? __kasan_save_free_info+0x46/0x50 [ 619.129186][T25676] ? __kasan_slab_free+0x5b/0x80 [ 619.129206][T25676] ? kfree+0x18e/0x440 [ 619.129224][T25676] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 619.129241][T25676] ? security_file_ioctl+0xcb/0x2d0 [ 619.129257][T25676] ? __se_sys_ioctl+0x47/0x170 [ 619.129279][T25676] ? do_syscall_64+0xfa/0xfa0 [ 619.129297][T25676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.129320][T25676] ? __pfx_binder_debug+0x10/0x10 [ 619.129339][T25676] ? do_raw_spin_lock+0x121/0x290 [ 619.129360][T25676] ? rcu_is_watching+0x15/0xb0 [ 619.129381][T25676] ? _raw_spin_unlock+0x28/0x50 [ 619.129398][T25676] ? binder_get_thread+0x178/0x6d0 [ 619.129420][T25676] binder_ioctl+0x3e0/0x19c0 [ 619.129440][T25676] ? lock_release+0x4b/0x3e0 [ 619.129455][T25676] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 619.129471][T25676] ? kfree+0x18e/0x440 [ 619.129492][T25676] ? do_vfs_ioctl+0xbe8/0x1430 [ 619.129506][T25676] ? __pfx_binder_ioctl+0x10/0x10 [ 619.129526][T25676] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 619.129550][T25676] ? lock_release+0x4b/0x3e0 [ 619.129564][T25676] ? vfs_write+0x956/0xb30 [ 619.129582][T25676] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 619.129613][T25676] ? __fget_files+0x3a0/0x420 [ 619.129631][T25676] ? __fget_files+0x2a/0x420 [ 619.129649][T25676] ? bpf_lsm_file_ioctl+0x9/0x20 [ 619.129670][T25676] ? __pfx_binder_ioctl+0x10/0x10 [ 619.129690][T25676] __se_sys_ioctl+0xf9/0x170 [ 619.129712][T25676] do_syscall_64+0xfa/0xfa0 [ 619.129732][T25676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.129748][T25676] ? clear_bhb_loop+0x60/0xb0 [ 619.129765][T25676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.129781][T25676] RIP: 0033:0x7f1d7078ebe9 [ 619.129796][T25676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.129811][T25676] RSP: 002b:00007f1d71666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.129830][T25676] RAX: ffffffffffffffda RBX: 00007f1d709c5fa0 RCX: 00007f1d7078ebe9 [ 619.129843][T25676] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 619.129854][T25676] RBP: 00007f1d71666090 R08: 0000000000000000 R09: 0000000000000000 [ 619.129866][T25676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.129876][T25676] R13: 00007f1d709c6038 R14: 00007f1d709c5fa0 R15: 00007fff5b7f8f48 [ 619.129895][T25676] [ 619.684599][T25701] binder: 25700:25701 unknown command 0 [ 619.690373][T25701] binder: 25700:25701 ioctl c0306201 200000000080 returned -22 [ 619.702662][T25699] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4048'. [ 619.780312][ T5863] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 620.519077][T25732] tmpfs: Bad value for 'mpol' [ 620.589763][ T982] IPVS: starting estimator thread 0... [ 620.590055][T25733] /dev/rnullb0: Can't open blockdev [ 620.627820][T25736] binder: 25735:25736 unknown command 0 [ 620.633713][T25736] binder: 25735:25736 ioctl c0306201 200000000080 returned -22 [ 620.681556][T25740] binder: 25739:25740 unknown command 0 [ 620.687380][T25740] binder: 25739:25740 ioctl c0306201 200000000080 returned -22 [ 620.695039][T25734] IPVS: using max 50 ests per chain, 120000 per kthread [ 620.792476][T25746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4062'. [ 621.589969][T25770] /dev/rnullb0: Can't open blockdev [ 621.684837][T25780] netlink: 'syz.7.4072': attribute type 1 has an invalid length. [ 621.776078][T25785] binder: 25783:25785 unknown command 0 [ 621.781760][T25785] binder: 25783:25785 ioctl c0306201 200000000080 returned -22 [ 621.857534][T25793] 9p: Bad value for 'rfdno' [ 621.907243][T25797] overlayfs: failed to clone upperpath [ 622.678655][T25835] /dev/rnullb0: Can't lookup blockdev [ 622.758433][T25839] sctp: [Deprecated]: syz.9.4088 (pid 25839) Use of int in max_burst socket option. [ 622.758433][T25839] Use struct sctp_assoc_value instead [ 622.990617][T25857] /dev/rnullb0: Can't open blockdev [ 623.948205][T25872] /dev/rnullb0: Can't lookup blockdev [ 623.986333][T25874] MTD: Couldn't look up '/dev/rnullb0': -15 [ 624.051274][ T30] audit: type=1804 audit(1756553396.555:1227): pid=25878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4099" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 624.085976][T25817] binder: 25816:25817 ioctl c0306201 200000000640 returned -22 [ 624.103205][T25880] binder: 25816:25880 ioctl c0306201 200000000640 returned -22 [ 624.246766][T25890] sp0: Synchronizing with TNC [ 624.305861][T25886] infiniband syz1: set active [ 624.311854][T25886] infiniband syz1: added syz_tun [ 624.317370][T25886] syz1: rxe_create_cq: returned err = -12 [ 624.327814][T25886] infiniband syz1: Couldn't create ib_mad CQ [ 624.334242][T25886] infiniband syz1: Couldn't open port 1 [ 624.355428][T25886] RDS/IB: syz1: added [ 624.359734][T25886] smc: adding ib device syz1 with port count 1 [ 624.366494][T25886] smc: ib device syz1 port 1 has pnetid [ 624.376112][T25903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 625.383319][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.389854][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.422159][T14931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.491760][T14931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.565342][T14931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.631285][T14931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.796645][T25931] overlayfs: failed to resolve './file0': -2 [ 625.809922][T14931] bridge_slave_1: left allmulticast mode [ 625.826514][T14931] bridge_slave_1: left promiscuous mode [ 625.833489][T14931] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.847468][T14931] bridge_slave_0: left allmulticast mode [ 625.859877][T14931] bridge_slave_0: left promiscuous mode [ 625.887255][T14931] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.642704][T14931] hsr_slave_0: left promiscuous mode [ 626.649321][T14931] hsr_slave_1: left promiscuous mode [ 626.660217][T14931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.677221][T14931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.694576][T14931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.702057][T14931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.723202][T14931] veth1_macvtap: left promiscuous mode [ 626.734218][T14931] veth0_macvtap: left promiscuous mode [ 626.741525][T14931] veth1_vlan: left promiscuous mode [ 626.747997][T14931] veth0_vlan: left promiscuous mode [ 627.030423][T14931] team0 (unregistering): Port device team_slave_1 removed [ 627.050995][T14931] team0 (unregistering): Port device team_slave_0 removed [ 627.159483][T14931] vcan0 (unregistering): left allmulticast mode [ 627.170513][T25986] syzkaller1: entered promiscuous mode [ 627.184964][T25986] syzkaller1: entered allmulticast mode [ 627.191722][T25996] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 627.217887][T25996] syzkaller1: Linktype set failed because interface is up [ 628.073075][ T30] audit: type=1804 audit(1756553400.313:1228): pid=26066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4122" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 628.244304][T26076] /dev/rnullb0: Can't open blockdev [ 628.251412][T26076] /dev/rnullb0: Can't open blockdev [ 628.264020][T26078] /dev/rnullb0: Can't lookup blockdev [ 629.319714][T26132] 9pnet_fd: p9_fd_create_unix (26132): problem connecting socket: ./file0: -111 [ 629.395626][T26139] /dev/rnullb0: Can't open blockdev [ 629.407195][T26140] /dev/rnullb0: Can't open blockdev [ 629.569575][T26158] netlink: 'syz.8.4143': attribute type 21 has an invalid length. [ 629.584208][T26158] netlink: 'syz.8.4143': attribute type 22 has an invalid length. [ 629.595191][T26158] netlink: 'syz.8.4143': attribute type 23 has an invalid length. [ 629.603424][T26158] netlink: 'syz.8.4143': attribute type 25 has an invalid length. [ 629.611247][T26158] netlink: 'syz.8.4143': attribute type 26 has an invalid length. [ 629.619447][T26158] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4143'. [ 629.722227][T26163] orangefs_devreq_write_iter: failed to copy head. [ 629.729335][T26163] /dev/rnullb0: Can't open blockdev [ 631.413754][ T30] audit: type=1804 audit(1756553403.446:1229): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4156" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 633.891135][T26266] /dev/rnullb0: Can't lookup blockdev [ 633.939331][T26272] input: syz1 as /devices/virtual/input/input45 [ 633.983378][T26276] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4177'. [ 634.003861][T26276] hsr_slave_1 (unregistering): left promiscuous mode [ 634.087340][ T30] audit: type=1804 audit(1756553405.942:1230): pid=26288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4178" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 635.197186][T26331] /dev/rnullb0: Can't lookup blockdev [ 635.327963][ T30] audit: type=1804 audit(1756553407.111:1231): pid=26344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4194" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 636.757720][ T985] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 636.775664][ T985] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 637.483587][T26409] netlink: 'syz.8.4209': attribute type 21 has an invalid length. [ 637.491787][T26409] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4209'. [ 637.503016][T26409] netlink: 'syz.8.4209': attribute type 4 has an invalid length. [ 637.512335][T26409] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4209'. [ 637.795105][T26441] /dev/rnullb0: Can't open blockdev [ 639.328215][T26500] /dev/rnullb0: Can't open blockdev [ 639.792745][T26531] netlink: 'syz.9.4235': attribute type 1 has an invalid length. [ 639.800960][T26531] netlink: 'syz.9.4235': attribute type 1 has an invalid length. [ 639.824792][ T30] audit: type=1804 audit(1756553411.309:1232): pid=26531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4235" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 639.994404][T26550] /dev/rnullb0: Can't lookup blockdev [ 641.874517][T26624] Invalid/unusable pipe [ 642.249473][T26663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.260732][T26663] /dev/rnullb0: Can't open blockdev [ 642.989614][ T30] audit: type=1326 audit(1756553414.263:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.9.4270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dac18ebe9 code=0x0 [ 645.163778][T26736] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4281'. [ 645.176337][T26736] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 645.183245][T26736] /dev/rnullb0: Can't open blockdev [ 645.545258][T26754] netlink: 'syz.9.4284': attribute type 4 has an invalid length. [ 645.592265][ T30] audit: type=1804 audit(1756553416.704:1234): pid=26756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4285" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 646.226652][T26777] comedi comedi1: pcl812: I/O port conflict (0x4f27,16) [ 646.405116][T26771] MTD: Couldn't look up '/dev/rnullb0': -15 [ 646.494770][T26784] /dev/rnullb0: Can't open blockdev [ 646.536823][T26790] i2c i2c-0: Invalid block write size 34 [ 646.547696][T26790] sctp: [Deprecated]: syz.7.4293 (pid 26790) Use of int in maxseg socket option. [ 646.547696][T26790] Use struct sctp_assoc_value instead [ 646.965517][ T5863] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 646.987248][T26805] /dev/rnullb0: Can't lookup blockdev [ 647.206689][T26814] wireguard: wg1: Could not create IPv4 socket [ 647.214675][T26814] overlay: ./file0 is not a directory [ 647.255965][T26817] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 647.639873][T26827] orangefs_mount: mount request failed with -4 [ 647.780357][ T30] audit: type=1804 audit(1756553418.742:1235): pid=26846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4308" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 647.786320][T26846] MTD: Couldn't look up '/dev/rnullb0': -15 [ 649.330618][ T30] audit: type=1804 audit(1756553420.201:1236): pid=26863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4314" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 649.506744][ T5873] Bluetooth: hci6: command 0x0406 tx timeout [ 649.585471][T26870] /dev/rnullb0: Can't lookup blockdev [ 650.456572][T26891] /dev/rnullb0: Can't open blockdev [ 650.764222][T26912] /dev/rnullb0: Can't lookup blockdev [ 650.772590][T26917] /dev/rnullb0: Can't lookup blockdev [ 650.811209][ T30] audit: type=1804 audit(1756553421.585:1237): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4331" name="rnullb0" dev="tmpfs" ino=477 res=1 errno=0 [ 650.939604][T26929] /dev/rnullb0: Can't open blockdev [ 651.265133][T26954] /dev/rnullb0: Can't lookup blockdev [ 651.326739][T26957] /dev/rnullb0: Can't lookup blockdev [ 651.517988][T26970] /dev/rnullb0: Can't lookup blockdev [ 651.654080][T20955] IPVS: starting estimator thread 0... [ 651.774046][T26981] IPVS: using max 51 ests per chain, 122400 per kthread [ 651.870952][T26984] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4349'. [ 652.035662][T26996] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4353'. [ 652.047056][T26997] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4353'. [ 652.047901][T26996] gretap0: entered promiscuous mode [ 652.064850][T26997] 0ªî{X¹¦: renamed from gretap0 [ 652.071711][T26997] 0ªî{X¹¦: left promiscuous mode [ 652.078490][T26997] 0ªî{X¹¦: entered allmulticast mode [ 652.085648][T26997] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 652.140407][ T30] audit: type=1326 audit(1756553422.828:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.4.4354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77e818ebe9 code=0x0 [ 652.162337][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.199678][T27002] /dev/rnullb0: Can't open blockdev [ 652.538638][T27004] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 653.551826][T27065] overlayfs: failed to clone upperpath [ 654.112555][T27105] tipc: Enabling of bearer rejected, failed to enable media [ 654.243137][ T30] audit: type=1804 audit(1756553424.782:1239): pid=27108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4391" name="/newroot/276/file1" dev="fuse" ino=1 res=1 errno=0 [ 654.263780][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.378601][T27121] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 654.408738][T27121] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3632396020 (3632396020 ns) > initial count (548550703 ns). Using initial count to start timer. [ 654.634032][T27158] ------------[ cut here ]------------ [ 654.639631][T27158] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 654.646591][T27158] shift exponent 32 is too large for 32-bit type 'int' [ 654.654997][T27158] CPU: 1 UID: 0 PID: 27158 Comm: syz.9.4407 Not tainted syzkaller #0 PREEMPT(full) [ 654.655024][T27158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.655037][T27158] Call Trace: [ 654.655046][T27158] [ 654.655054][T27158] dump_stack_lvl+0x189/0x250 [ 654.655087][T27158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.655113][T27158] ? __pfx__printk+0x10/0x10 [ 654.655141][T27158] ubsan_epilogue+0xa/0x40 [ 654.655161][T27158] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 654.655188][T27158] ? __pfx_v9fs_set_super+0x10/0x10 [ 654.655210][T27158] v9fs_get_tree+0x957/0xa90 [ 654.655233][T27158] ? __pfx_v9fs_get_tree+0x10/0x10 [ 654.655257][T27158] vfs_get_tree+0x8f/0x2b0 [ 654.655288][T27158] do_new_mount+0x2a2/0xa30 [ 654.655309][T27158] ? ns_capable+0x8a/0xf0 [ 654.655329][T27158] ? __pfx_do_new_mount+0x10/0x10 [ 654.655348][T27158] ? path_mount+0x61c/0xfe0 [ 654.655367][T27158] ? user_path_at+0x44/0x60 [ 654.655392][T27158] __se_sys_mount+0x317/0x410 [ 654.655415][T27158] ? __pfx___se_sys_mount+0x10/0x10 [ 654.655437][T27158] ? rcu_is_watching+0x15/0xb0 [ 654.655457][T27158] ? __x64_sys_mount+0x20/0xc0 [ 654.655478][T27158] do_syscall_64+0xfa/0xfa0 [ 654.655501][T27158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.655518][T27158] ? clear_bhb_loop+0x60/0xb0 [ 654.655536][T27158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.655553][T27158] RIP: 0033:0x7f0dac18ebe9 [ 654.655571][T27158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.655587][T27158] RSP: 002b:00007f0dad0e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 654.655608][T27158] RAX: ffffffffffffffda RBX: 00007f0dac3c5fa0 RCX: 00007f0dac18ebe9 [ 654.655624][T27158] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 654.655637][T27158] RBP: 00007f0dac211e19 R08: 0000200000000000 R09: 0000000000000000 [ 654.655651][T27158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.655664][T27158] R13: 00007f0dac3c6038 R14: 00007f0dac3c5fa0 R15: 00007ffdd5de5708 [ 654.655684][T27158] [ 654.655691][T27158] ---[ end trace ]--- [ 654.875756][T27158] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 654.882969][T27158] CPU: 1 UID: 0 PID: 27158 Comm: syz.9.4407 Not tainted syzkaller #0 PREEMPT(full) [ 654.892345][T27158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.902410][T27158] Call Trace: [ 654.905703][T27158] [ 654.908646][T27158] dump_stack_lvl+0x99/0x250 [ 654.913258][T27158] ? __asan_memcpy+0x40/0x70 [ 654.917866][T27158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.923103][T27158] ? __pfx__printk+0x10/0x10 [ 654.927712][T27158] vpanic+0x281/0x750 [ 654.931718][T27158] ? __pfx_vpanic+0x10/0x10 [ 654.936248][T27158] panic+0xb9/0xc0 [ 654.939981][T27158] ? __pfx_panic+0x10/0x10 [ 654.944408][T27158] ? __pfx__printk+0x10/0x10 [ 654.949091][T27158] check_panic_on_warn+0x89/0xb0 [ 654.954069][T27158] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 654.960506][T27158] ? __pfx_v9fs_set_super+0x10/0x10 [ 654.965722][T27158] v9fs_get_tree+0x957/0xa90 [ 654.970333][T27158] ? __pfx_v9fs_get_tree+0x10/0x10 [ 654.975475][T27158] vfs_get_tree+0x8f/0x2b0 [ 654.979905][T27158] do_new_mount+0x2a2/0xa30 [ 654.984425][T27158] ? ns_capable+0x8a/0xf0 [ 654.988753][T27158] ? __pfx_do_new_mount+0x10/0x10 [ 654.993805][T27158] ? path_mount+0x61c/0xfe0 [ 654.998296][T27158] ? user_path_at+0x44/0x60 [ 655.002803][T27158] __se_sys_mount+0x317/0x410 [ 655.007492][T27158] ? __pfx___se_sys_mount+0x10/0x10 [ 655.012691][T27158] ? rcu_is_watching+0x15/0xb0 [ 655.017504][T27158] ? __x64_sys_mount+0x20/0xc0 [ 655.022272][T27158] do_syscall_64+0xfa/0xfa0 [ 655.026789][T27158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.032849][T27158] ? clear_bhb_loop+0x60/0xb0 [ 655.037518][T27158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.043398][T27158] RIP: 0033:0x7f0dac18ebe9 [ 655.047801][T27158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.067399][T27158] RSP: 002b:00007f0dad0e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 655.075803][T27158] RAX: ffffffffffffffda RBX: 00007f0dac3c5fa0 RCX: 00007f0dac18ebe9 [ 655.083766][T27158] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 655.091722][T27158] RBP: 00007f0dac211e19 R08: 0000200000000000 R09: 0000000000000000 [ 655.099680][T27158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.107635][T27158] R13: 00007f0dac3c6038 R14: 00007f0dac3c5fa0 R15: 00007ffdd5de5708 [ 655.115597][T27158] [ 655.118752][T27158] Kernel Offset: disabled [ 655.123063][T27158] Rebooting in 86400 seconds..