last executing test programs: 25m53.777909495s ago: executing program 32 (id=525): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 18m39.390755367s ago: executing program 33 (id=4926): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x40, 0x1, 0x2, "7f2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0)={0x0, 0x1a, 0x2, "aa5f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000000c0)={0x40, 0xf, 0x4, "184f6555"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m10.128741153s ago: executing program 3 (id=6515): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 16m9.852301591s ago: executing program 3 (id=6518): quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x3}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x900) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 16m9.606061253s ago: executing program 3 (id=6519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) 16m9.524902984s ago: executing program 3 (id=6520): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0xffffff81, 0x2a000b02, 0xffff, 0x0, 0x6}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) ioctl$FIBMAP(r2, 0x401070ca, 0x0) 16m9.35576647s ago: executing program 3 (id=6523): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 16m9.226140829s ago: executing program 3 (id=6525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m54.086890345s ago: executing program 34 (id=6525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m53.660226991s ago: executing program 6 (id=7293): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x4880) socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0841}, 0x0) 14m53.538900759s ago: executing program 6 (id=7295): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 14m53.426221497s ago: executing program 6 (id=7298): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x7e) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 14m53.232959243s ago: executing program 6 (id=7302): mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50) rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0x7, 0x1, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x0, 0x0, r3, 0x5, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x7fff, {0x81, 0xf6, 0x0, {0x6, 0xffffffffffffffff, 0x9, 0xffffffffffffff81, 0x200000010001, 0x3, 0x837d, 0x7, 0x6, 0x8000, 0x8, r2, r3, 0x800, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 14m52.282120233s ago: executing program 6 (id=7321): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 14m52.072365376s ago: executing program 6 (id=7325): userfaultfd(0x801) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000010c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @broadcast, 'macvtap0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 14m36.999136791s ago: executing program 35 (id=7325): userfaultfd(0x801) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000010c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @broadcast, 'macvtap0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 4m41.910004477s ago: executing program 2 (id=15975): mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x10000fe) 4m41.806853699s ago: executing program 2 (id=15977): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a80200001800500040003000000140003"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m41.774633356s ago: executing program 2 (id=15980): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='minix\x00', 0x80084, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xda89, 0x8000) 4m41.647686437s ago: executing program 2 (id=15981): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001fc0)={0x4d0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x429, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x12}, {0xc}, {0xc, 0x1}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0xa9, "d5a4d8297fbb8c8028ba2426756193db09436af3f391e9f8fb57810d3b71d9ae99301a8de0d3e711b4427a346d4a60ffcf7cb078cdbe2b2f2b685075b465f009a64dc2314feb46d32d6297160bb4c33660855abac6a3f721001d14f2ebe8cb924c0324bce143b348195b390aaacc68ba9f94e18aea4eddc69af2cac48020347429fe058daf5ff505cdae3d25fd9ef4fbd934a34be741d9c3499e5176116e20e5aa7f09bace36812885"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xd5, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fae5491a669cffba6dab60dfb7"}, {0xdd, 0x6a, "f48e7192a754ab5f2dcdd09e083dbf93438466070cec5f40d1fbff00074eee0ac62178866a45c6b02174638bdbc4c7aa9390e672864aec7b4c2f2e0703619300256db29560a5736fd0196f32315a643cd23b0ef29943c1b6e512251ec8f5f97714b9cd3fabe4633465c9"}, {0xdd, 0x9e, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5e7b876d32cbf3300f4b0cb417b1a23519e1c7a2fbc98bd5989e92537928970ec7c1c1e96146e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb5c0754", 0xd6}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000024c0)={{0x8}, 0x100, './file0\x00'}) r1 = socket$inet(0x2, 0x2, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, r2, {0x2}}, 0x18) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044941, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0xd, &(0x7f0000000180)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000340)=ANY=[], 0x18}, 0x2000c8d0) 4m41.594037766s ago: executing program 2 (id=15982): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000080)=""/21, &(0x7f0000000240)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x93771000) 4m40.615867874s ago: executing program 2 (id=15990): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x6102, 0x420101) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3b9f02c356073027, 0xb98247375def854d}}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x7, 0x4, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0x0, 0x3, 0x0, 0x0, @rand_addr=0x64010101, @remote}}}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010067bd7000fedbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009003900000006000200000008000b007369700008000800000000000600040001150000"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000006900)='\x00', 0x18, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) set_mempolicy(0x3, &(0x7f00000002c0)=0x8000005, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) 4m40.366528799s ago: executing program 36 (id=15990): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x6102, 0x420101) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3b9f02c356073027, 0xb98247375def854d}}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x7, 0x4, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0x0, 0x3, 0x0, 0x0, @rand_addr=0x64010101, @remote}}}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010067bd7000fedbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009003900000006000200000008000b007369700008000800000000000600040001150000"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000006900)='\x00', 0x18, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) set_mempolicy(0x3, &(0x7f00000002c0)=0x8000005, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) 2m26.625024126s ago: executing program 5 (id=17446): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 2m26.556587749s ago: executing program 5 (id=17447): unshare(0x8000480) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8a0602) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 2m26.482557342s ago: executing program 5 (id=17449): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 2m26.402588225s ago: executing program 5 (id=17450): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xffffffff00000000, 0x0) pread64(r0, &(0x7f0000000040)=""/120, 0x78, 0x4) 2m26.325944854s ago: executing program 5 (id=17452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 2m26.195961876s ago: executing program 5 (id=17454): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 2m22.236178213s ago: executing program 0 (id=17489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) 2m22.098056582s ago: executing program 0 (id=17491): r0 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000000)=""/149, 0xaa) 2m21.870035486s ago: executing program 0 (id=17493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x489, 0x0, 0x7f00000016}]}) 2m21.656017649s ago: executing program 0 (id=17495): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x2004c0d0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2m21.58028485s ago: executing program 0 (id=17496): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m21.481169919s ago: executing program 0 (id=17497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505000000440f22c066b93002000066b80400000066ba008000000f30", 0x41}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m15.134509648s ago: executing program 8 (id=17514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x7c}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m14.951845463s ago: executing program 8 (id=17515): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e05, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x6, 0x1, 0x5}, 0x9c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000580)=@int=0x7ff, 0x4) 2m14.804177497s ago: executing program 8 (id=17516): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) 2m12.096131985s ago: executing program 8 (id=17525): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8684c88a8", 0x12, 0x0, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x8, 0x6, @link_local}, 0x14) 2m10.95201059s ago: executing program 37 (id=17454): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 2m8.972536744s ago: executing program 8 (id=17520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x8, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x4, 0xa8, 0x4d, 0xfe, 0x2f, 0x0, 0x40, 0x8, 0x2, 0x9, 0x80, 0xbb, '\x00', 0x4, 0x403}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 2m7.366840881s ago: executing program 8 (id=17529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 2m6.104079083s ago: executing program 38 (id=17497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505000000440f22c066b93002000066b80400000066ba008000000f30", 0x41}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m51.750257658s ago: executing program 39 (id=17529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 17.009661949s ago: executing program 7 (id=17662): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0), 0xe80) 16.683636722s ago: executing program 9 (id=17663): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x2, 0x0, 0x0, &(0x7f00000007c0)="b59b68e6e9c29d412f6d2494303a18975686", 0x12, 0xffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000480)='}', 0x1, 0x7ff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000340)="fe", 0x1, 0xd372}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, 0x0, 0xc2, 0xffffffff}) 15.663918012s ago: executing program 1 (id=17664): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) pwrite64(r1, &(0x7f00000000c0)='iE', 0x2, 0x3fff) fcntl$addseals(r1, 0x409, 0x6) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1}) 15.621502836s ago: executing program 4 (id=17665): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x53d, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000480)=0x5) 13.904896813s ago: executing program 7 (id=17666): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001180)='R4', 0x2}], 0x1}}], 0x3, 0x40090) 13.508065971s ago: executing program 9 (id=17667): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.572835541s ago: executing program 1 (id=17668): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) 12.491931388s ago: executing program 4 (id=17669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bac904fc3c65f1a259e8f0dea5"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x68}}, 0x0) 10.755984312s ago: executing program 7 (id=17670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) 10.401573336s ago: executing program 9 (id=17671): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)="08ccb2323913a7b444b5e761c881308d06203096a4e635fc92bf0b2f01558e501fa92b20b9cdcfcda53df15ce6871ce5015deb0e49394f2ceb52ba69c73d98f0aaf0b07616cf8e190dc304989b6e4168c2aa0b9cd6127c145c9bb150a680346b2dec48edcadae0269caf8fba687385a8743b05df277bd45900dfe57fe374545eb99c1f711ac9b0badc2a7c8167b01492fefaeb52e2fe605bee39d896b524e1c8e213009781b9c09449027f5f772ae1ea38d199e9c5c357e7cc8be96a9b210d917288dedb3f45f8d8156870128d7d6738bff1f410f82ba82a9864bbe0a660e7d9b26bf7543783001477752efb4bd54dc14ef7776f59549ac0a493345107ec60492d609ea56aa5e3110bb3460eef42737acc3021d59cadd3433cc7d1263bd85e24072e0469bab544f9fcdf679f2c474f41fe", 0x131}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000700)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000740)="3d9ec04f4ab352fcb4f20a7390220feff61dc338", 0x14}, {&(0x7f0000000780)="8570b8d980e2e5a54c73e09b404f7af6c47ea6cfa522c43951c813713a27d50ed3edae6424171ca9437101b0dbfec4b9bd544171bb4519d42b76b2ae3a6ae864437451f82f6c4d4edd580c75476b0f25c221fed073c4c2ead6c710683e76eb7b4b28aae708726727e77d8f438951dd46168bc85c67b699f3e9edfe54735733973d75c7bba2206ad105c102b24b947b809539ea3516e3398710ecfe644c7151a066bdbf742af77ac3b734b06850d7049ac419a75af881871e5030c4184765d27939284355d01f8efcf25a878561ce0b56d8927b19", 0xd4}, {&(0x7f0000000880)="72e539aed1d285b725d079cb43763f5fcbfba715a65f893378", 0x19}, {&(0x7f00000008c0)="3f26f38e915b3aed9cf68f73b04dd5e315ca143c5a17a4416a6ee553584310cc49cf759eb23940f942c5f3832d76a0da", 0x30}], 0x4, 0x0, 0x0, 0x4000000}, 0x4000050) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 9.423809442s ago: executing program 1 (id=17672): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542", 0x5b}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc81302531", 0xb5}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d962", 0xca}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f2", 0x9a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="3af5df09729c0dad9e050ab7691842d7d6d9173cd72bb9b8a156f7924f50eeb536fc29376a021f6804dcf16d4b821dbccfe9992371133d2089132c01a18d96c6df3abaaed308811b0fdc043529aee9c1cdf28b72abeddcf6a58579", 0x5b}, {&(0x7f0000000680)="08ce454517ca124225c41ab87e94f80f1a901164f50f2467332973df3f70a604bcd21cd340fd", 0x26}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d023ea8f11964db8dba", 0xd}, {&(0x7f0000001a80)="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", 0x1f8}], 0x2}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.31968883s ago: executing program 4 (id=17673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001180)='R4', 0x2}], 0x1}}], 0x3, 0x40090) sendto$inet(r0, &(0x7f00000002c0)="92", 0x189, 0x10008095, 0x0, 0x0) 7.708426516s ago: executing program 7 (id=17674): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0), 0xe80) 7.304666646s ago: executing program 9 (id=17675): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x2, 0x0, 0x0, &(0x7f00000007c0)="b59b68e6e9c29d412f6d2494303a18975686", 0x12, 0xffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000480)='}', 0x1, 0x7ff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000340)="fe", 0x1, 0xd372}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, 0x0, 0xc2, 0xffffffff}) 6.279936749s ago: executing program 1 (id=17676): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) pwrite64(r1, &(0x7f00000000c0)='iE', 0x2, 0x3fff) fcntl$addseals(r1, 0x409, 0x6) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1}) 6.253815584s ago: executing program 4 (id=17677): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x53d, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000480)=0x5) 4.616602836s ago: executing program 7 (id=17678): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f574ce4ac91827528289acb0089c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe90455d28993254ab9fa2c5d561ee0000000000000000000ce572ae0de0745310890497fd77693dff252cd2d3ca44d653adb996df2d4657df02890a35dc7dca300162746af9f2e03e2ea4cb0ac9689db83d6b0b923ddd63724bc8de54e76d67a16ccf6a6e80b55db62db33092f95ece822b728612a43ec79780fd217a580abcf20011c47885ddbdd82efd3dd8f815fbc7db3c6b21a513d73d6712b4c7e9cfe8306a5c", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001180)='R4', 0x2}], 0x1}}], 0x3, 0x40090) 4.131984398s ago: executing program 9 (id=17679): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3.201048158s ago: executing program 1 (id=17680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/113, 0x71}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 3.14742336s ago: executing program 4 (id=17681): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.492071167s ago: executing program 7 (id=17682): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) 1.035188203s ago: executing program 9 (id=17683): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005c000000000000000f00e035200000000f22e0"], 0x5c}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000000c0)={0x0, 0x11b000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000080071"]) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000050000000000000000f080f0866ba2100b8db000000ef450f22c2"], 0x296}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 93.123321ms ago: executing program 1 (id=17684): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)="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", 0x131}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000700)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000740)="3d9ec04f4ab352fcb4f20a7390220feff61dc338", 0x14}, {&(0x7f0000000780)="8570b8d980e2e5a54c73e09b404f7af6c47ea6cfa522c43951c813713a27d50ed3edae6424171ca9437101b0dbfec4b9bd544171bb4519d42b76b2ae3a6ae864437451f82f6c4d4edd580c75476b0f25c221fed073c4c2ead6c710683e76eb7b4b28aae708726727e77d8f438951dd46168bc85c67b699f3e9edfe54735733973d75c7bba2206ad105c102b24b947b809539ea3516e3398710ecfe644c7151a066bdbf742af77ac3b734b06850d7049ac419a75af881871e5030c4184765d27939284355d01f8efcf25a878561ce0b56d8927b19", 0xd4}, {&(0x7f0000000880)="72e539aed1d285b725d079cb43763f5fcbfba715a65f893378", 0x19}, {&(0x7f00000008c0)="3f26f38e915b3aed9cf68f73b04dd5e315ca143c5a17a4416a6ee553584310cc49cf759eb23940f942c5f3832d76a0da", 0x30}], 0x4, 0x0, 0x0, 0x4000000}, 0x4000050) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 0s ago: executing program 4 (id=17685): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001180)='R4', 0x2}], 0x1}}], 0x3, 0x40090) sendto$inet(r0, &(0x7f00000002c0)="92", 0x189, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 292.097968][ T8843] overlayfs: failed to clone upperpath [ 1292.414291][ T8859] overlayfs: failed to clone upperpath [ 1292.866848][ T8885] overlayfs: failed to clone upperpath [ 1293.134933][ T8894] overlayfs: failed to clone upperpath [ 1293.142695][ T8897] overlayfs: failed to clone upperpath [ 1293.611715][ T8920] overlayfs: failed to clone upperpath [ 1295.806758][ T8994] Unknown status report in ack skb [ 1295.902474][ T8999] overlayfs: failed to clone upperpath [ 1295.926340][ T9001] overlayfs: failed to clone upperpath [ 1296.045806][ T9005] overlayfs: failed to clone upperpath [ 1296.204157][ T9014] overlayfs: failed to clone upperpath [ 1296.559050][ T9032] overlayfs: failed to clone upperpath [ 1296.701056][ T9038] overlayfs: failed to clone upperpath [ 1298.119820][ T9086] overlayfs: failed to clone upperpath [ 1298.496280][ T30] audit: type=1326 audit(1753809344.547:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.14395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7fb8e9a9 code=0x0 [ 1298.807833][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14397'. [ 1298.817217][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14397'. [ 1298.826834][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14397'. [ 1298.835961][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14397'. [ 1299.438960][ T9134] overlayfs: failed to clone upperpath [ 1299.930916][ T9165] overlayfs: failed to clone upperpath [ 1300.123868][ T9175] overlayfs: failed to clone upperpath [ 1300.510517][ T9195] overlayfs: failed to clone upperpath [ 1301.282877][ T9229] overlayfs: failed to clone upperpath [ 1301.903824][ T9266] overlayfs: failed to clone upperpath [ 1302.675389][ T9304] overlayfs: failed to clone upperpath [ 1302.751390][ T9306] overlayfs: failed to clone upperpath [ 1303.248938][ T9323] overlayfs: failed to clone upperpath [ 1303.330535][ T9326] overlayfs: failed to clone upperpath [ 1303.645512][ T9344] overlayfs: failed to clone upperpath [ 1304.414138][ T9369] syzkaller0 speed is unknown, defaulting to 1000 [ 1305.322145][ T9392] syzkaller0 speed is unknown, defaulting to 1000 [ 1305.456268][ T30] audit: type=1800 audit(1753809351.507:459): pid=9412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.14524" name="nullb0" dev="tmpfs" ino=4267 res=0 errno=0 [ 1305.603148][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.102786][ T9441] overlayfs: failed to clone upperpath [ 1306.755635][ T9458] syzkaller0 speed is unknown, defaulting to 1000 [ 1308.249841][ T9488] overlayfs: failed to clone upperpath [ 1312.840186][ T9659] overlayfs: failed to clone upperpath [ 1313.640703][ T9680] overlayfs: failed to clone upperpath [ 1313.956838][ T9691] overlayfs: failed to clone upperpath [ 1314.229504][ T9697] overlayfs: failed to clone upperpath [ 1314.738907][ T9706] overlayfs: failed to clone upperpath [ 1316.138972][ T9744] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1316.165275][ T9745] overlayfs: failed to clone upperpath [ 1316.711252][ T9780] overlayfs: failed to clone upperpath [ 1317.064854][ T9800] overlayfs: failed to clone upperpath [ 1317.094880][ T9802] overlayfs: failed to clone upperpath [ 1317.437009][ T9817] overlayfs: failed to clone upperpath [ 1317.867813][ T9825] overlayfs: failed to clone upperpath [ 1317.911297][ T9829] overlayfs: failed to clone upperpath [ 1317.953927][ T9831] overlayfs: failed to clone upperpath [ 1319.138673][ T9870] overlayfs: failed to clone upperpath [ 1319.684712][ T9879] overlayfs: failed to clone upperpath [ 1319.933250][ T9887] tipc: Enabling of bearer rejected, already enabled [ 1320.127539][ T9895] overlayfs: failed to clone upperpath [ 1320.304209][ T9908] overlayfs: failed to clone upperpath [ 1322.949361][T10002] overlayfs: failed to clone upperpath [ 1323.374421][T10024] overlayfs: failed to clone upperpath [ 1323.617131][ T30] audit: type=1326 audit(1753809369.677:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.14800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8844f8e9a9 code=0x0 [ 1324.124419][ C0] Unknown status report in ack skb [ 1324.151735][T10053] overlayfs: failed to clone upperpath [ 1324.437978][T10068] overlayfs: failed to clone upperpath [ 1325.619645][T10113] overlayfs: failed to clone upperpath [ 1325.910124][T10126] overlayfs: failed to clone upperpath [ 1326.232306][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14845'. [ 1326.513769][T10155] overlayfs: failed to clone upperpath [ 1326.591127][T10161] tipc: Enabling of bearer rejected, already enabled [ 1326.651656][T10163] /dev/rnullb0: Can't lookup blockdev [ 1326.697834][T10165] overlayfs: failed to clone upperpath [ 1328.093966][T10229] overlayfs: failed to clone upperpath [ 1328.461619][T10241] overlayfs: failed to clone upperpath [ 1328.472449][T10243] overlayfs: failed to clone upperpath [ 1328.955565][T10263] overlayfs: failed to clone upperpath [ 1329.560454][T10299] overlayfs: failed to clone upperpath [ 1329.879420][T10316] overlayfs: failed to clone upperpath [ 1330.724449][T10332] overlayfs: failed to clone upperpath [ 1330.862694][T10341] overlayfs: failed to clone upperpath [ 1331.188892][T10361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.202285][T10361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.249934][T10363] overlayfs: failed to clone upperpath [ 1331.270417][T10361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.324831][T10367] overlayfs: failed to clone upperpath [ 1331.886494][T10382] overlayfs: failed to clone upperpath [ 1331.897716][T10382] overlayfs: failed to clone upperpath [ 1332.271572][T10398] overlayfs: failed to clone upperpath [ 1333.254835][T10420] syzkaller0 speed is unknown, defaulting to 1000 [ 1333.357217][T10430] overlayfs: failed to clone upperpath [ 1335.127461][T10506] overlayfs: failed to clone upperpath [ 1335.647764][T10527] overlayfs: failed to clone upperpath [ 1335.673270][T10529] overlayfs: failed to clone upperpath [ 1335.908244][T10538] overlayfs: failed to clone upperpath [ 1337.471373][T10584] overlayfs: failed to clone upperpath [ 1337.529417][T10586] overlayfs: failed to clone upperpath [ 1338.175510][T10604] overlayfs: failed to clone upperpath [ 1338.540707][T10622] overlayfs: failed to clone upperpath [ 1339.291555][T10638] netlink: 892 bytes leftover after parsing attributes in process `syz.2.15065'. [ 1339.370379][T10644] netlink: 892 bytes leftover after parsing attributes in process `syz.2.15065'. [ 1339.514091][T10649] overlayfs: failed to clone upperpath [ 1340.051863][T10662] overlayfs: failed to clone upperpath [ 1340.064126][T10662] overlayfs: failed to clone upperpath [ 1340.264779][T10672] overlayfs: failed to clone upperpath [ 1340.340557][T10674] overlayfs: failed to clone upperpath [ 1340.591029][T10680] overlayfs: failed to clone upperpath [ 1340.769928][T10687] overlayfs: failed to clone upperpath [ 1342.252438][T10727] overlayfs: failed to clone upperpath [ 1342.749825][T10746] fuse: Bad value for 'fd' [ 1342.954539][T10757] overlayfs: failed to clone upperpath [ 1343.591217][T10774] overlayfs: failed to clone upperpath [ 1344.871673][T10816] overlayfs: failed to clone upperpath [ 1345.713724][T10826] syzkaller0 speed is unknown, defaulting to 1000 [ 1347.870464][T10895] overlayfs: failed to clone upperpath [ 1348.473651][ T30] audit: type=1800 audit(1753809394.527:461): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15189" name="file1" dev="tmpfs" ino=9316 res=0 errno=0 [ 1348.655920][T10935] overlayfs: failed to clone upperpath [ 1349.118756][T10955] overlayfs: failed to clone upperpath [ 1349.655574][T10977] overlayfs: failed to clone upperpath [ 1349.778524][T10973] overlayfs: failed to clone lowerpath [ 1349.787134][T10973] overlayfs: failed to clone upperpath [ 1351.419451][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15229'. [ 1351.428955][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15229'. [ 1351.445225][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15229'. [ 1351.458663][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15229'. [ 1351.468576][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15229'. [ 1352.273484][T11058] overlayfs: failed to clone upperpath [ 1352.284567][T11056] overlayfs: failed to clone upperpath [ 1354.238903][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15276'. [ 1358.430061][ T30] audit: type=1326 audit(1753809404.487:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.5.15320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f100c98e9a9 code=0x0 [ 1360.664376][T11252] overlayfs: failed to clone upperpath [ 1361.099981][T11265] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1366.330018][T11376] netlink: 92 bytes leftover after parsing attributes in process `syz.7.15381'. [ 1366.341523][T11376] netlink: 'syz.7.15381': attribute type 21 has an invalid length. [ 1366.349994][T11376] netlink: 100 bytes leftover after parsing attributes in process `syz.7.15381'. [ 1366.363759][T11376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15381'. [ 1367.047026][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.377621][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15400'. [ 1368.389463][T11436] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15400'. [ 1368.399107][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15400'. [ 1368.544304][T11442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.065627][T11470] 9pnet_fd: Insufficient options for proto=fd [ 1369.072604][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15414'. [ 1369.087609][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15414'. [ 1369.100908][T11470] /dev/rnullb0: Can't lookup blockdev [ 1369.111594][T11470] 9pnet_fd: Insufficient options for proto=fd [ 1369.121703][T11471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15414'. [ 1369.122043][T11472] /dev/rnullb0: Can't lookup blockdev [ 1369.138695][T11471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15414'. [ 1371.765417][ T30] audit: type=1326 audit(1753809417.817:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.7.15436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31a7b8e9a9 code=0x0 [ 1372.704786][T11591] /dev/rnullb0: Can't lookup blockdev [ 1374.321135][T11630] /dev/rnullb0: Can't lookup blockdev [ 1375.013610][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15476'. [ 1375.028703][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15476'. [ 1375.330774][T11655] syzkaller0 speed is unknown, defaulting to 1000 [ 1376.520859][T11695] netlink: 'syz.5.15491': attribute type 5 has an invalid length. [ 1376.721773][T11704] /dev/rnullb0: Can't lookup blockdev [ 1377.998120][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15509'. [ 1378.023310][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15509'. [ 1378.328399][T11751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15515'. [ 1378.570645][T11765] /dev/rnullb0: Can't lookup blockdev [ 1379.042086][T11783] sctp: [Deprecated]: syz.2.15527 (pid 11783) Use of int in maxseg socket option. [ 1379.042086][T11783] Use struct sctp_assoc_value instead [ 1379.183120][T11784] 9pnet_fd: Insufficient options for proto=fd [ 1379.325069][T11784] netlink: 'syz.7.15526': attribute type 11 has an invalid length. [ 1379.432228][T11784] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.15526'. [ 1380.448738][T11776] Set syz1 is full, maxelem 65536 reached [ 1381.883647][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15542'. [ 1382.281419][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15551'. [ 1382.293256][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15551'. [ 1383.085161][T26205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.107601][T26205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.130806][T11878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.132722][T11874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.265497][T11885] netlink: 76 bytes leftover after parsing attributes in process `syz.5.15563'. [ 1384.518284][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15577'. [ 1384.784263][T11942] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1385.021230][T11952] openvswitch: netlink: Actions may not be safe on all matching packets [ 1385.052173][T11952] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:0 [ 1385.451321][T11970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.700548][T11983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.715940][T11983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.752962][T11987] PKCS7: Unknown OID: [4] 0.0 [ 1385.758752][T11987] PKCS7: Only support pkcs7_signedData type [ 1385.767336][T11987] netlink: 72 bytes leftover after parsing attributes in process `syz.5.15605'. [ 1386.207606][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15609'. [ 1386.470436][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15611'. [ 1386.483573][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15619'. [ 1387.015110][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15622'. [ 1387.117429][T12045] overlay: ./file0 is not a directory [ 1388.943579][T12077] netlink: 'syz.5.15636': attribute type 11 has an invalid length. [ 1389.445502][T12104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.301856][T12125] /dev/rnullb0: Can't lookup blockdev [ 1390.434560][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15658'. [ 1390.447550][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15658'. [ 1391.207786][ T30] audit: type=1326 audit(1753809437.237:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.2.15667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8844f8e9a9 code=0x0 [ 1391.400127][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15669'. [ 1392.350776][T12174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.922378][T12176] syzkaller0 speed is unknown, defaulting to 1000 [ 1393.206761][T12188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15676'. [ 1393.822257][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15678'. [ 1394.055406][T12197] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.250081][T12202] /dev/rnullb0: Can't lookup blockdev [ 1394.334518][T12197] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.473129][T12197] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.600461][T12197] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.755465][T12214] netlink: 'syz.0.15685': attribute type 39 has an invalid length. [ 1394.778989][T26205] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.783165][T12054] Set syz1 is full, maxelem 65536 reached [ 1394.913040][T26205] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.002009][T25627] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.042969][T25627] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.456674][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15692'. [ 1395.529022][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15694'. [ 1395.595265][T12242] No control pipe specified [ 1396.283457][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15702'. [ 1397.281615][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15712'. [ 1397.512636][T12313] overlayfs: failed to clone upperpath [ 1397.931592][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15721'. [ 1398.658714][T12353] /dev/rnullb0: Can't lookup blockdev [ 1398.733589][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15733'. [ 1398.885369][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15743'. [ 1399.769637][T12405] /dev/rnullb0: Can't lookup blockdev [ 1400.043442][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15753'. [ 1400.555648][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15763'. [ 1402.025713][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15783'. [ 1402.044935][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15783'. [ 1402.132759][ T30] audit: type=1326 audit(1753809448.187:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.0.15784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e7fb8e9a9 code=0x0 [ 1402.809710][T12520] netlink: 'syz.7.15787': attribute type 1 has an invalid length. [ 1403.155830][T12535] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ [ 1403.207740][T12538] netlink: zone id is out of range [ 1403.213019][T12538] netlink: zone id is out of range [ 1403.222918][T12538] netlink: zone id is out of range [ 1403.229062][T12538] netlink: zone id is out of range [ 1403.234559][T12538] netlink: zone id is out of range [ 1403.243994][T12538] netlink: zone id is out of range [ 1403.249638][T12538] netlink: zone id is out of range [ 1403.254892][T12538] netlink: zone id is out of range [ 1403.264397][T12538] netlink: zone id is out of range [ 1403.270602][T12538] netlink: zone id is out of range [ 1403.590867][T12551] netlink: 184 bytes leftover after parsing attributes in process `syz.7.15798'. [ 1404.125795][T12577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.338570][ T30] audit: type=1326 audit(1753809450.397:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.7.15810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31a7b8e9a9 code=0x0 [ 1405.616618][T12620] IPVS: set_ctl: invalid protocol: 92 172.30.0.6:20002 [ 1405.716627][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15828'. [ 1405.725779][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15828'. [ 1405.843434][T12628] could not allocate digest TFM handle sha512-ce [ 1406.561783][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15834'. [ 1407.350202][T12666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.355855][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15843'. [ 1407.373034][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15843'. [ 1409.232899][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15860'. [ 1409.242829][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15860'. [ 1409.434370][T12718] netlink: 116 bytes leftover after parsing attributes in process `syz.0.15864'. [ 1409.512431][T12718] bond0: (slave wlan1): Releasing backup interface [ 1409.553533][T12718] mac80211_hwsim hwsim16 wlan1 (unregistering): left promiscuous mode [ 1409.713383][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15870'. [ 1409.724334][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15870'. [ 1409.959071][T12742] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1409.982534][T26205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.995640][T26205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.018946][T12747] : renamed from dummy0 (while UP) [ 1411.165018][ T30] audit: type=1804 audit(1753809458.217:467): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.15892" name="rnullb0" dev="tmpfs" ino=8448 res=1 errno=0 [ 1412.707140][T26272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.725462][T26272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.744785][T12836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.754903][T12839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.381917][T12864] /dev/rnullb0: Can't lookup blockdev [ 1413.662484][T12877] netlink: 'syz.5.15923': attribute type 12 has an invalid length. [ 1415.993195][T12958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.441072][T12971] __nla_validate_parse: 2 callbacks suppressed [ 1416.441093][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15956'. [ 1416.676450][T12978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.751085][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15998'. [ 1419.765841][T13064] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1419.896988][T13073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1419.909200][T13073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1419.918697][T13073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1419.929425][T13073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1419.939463][T13073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1420.333240][T13072] syzkaller0 speed is unknown, defaulting to 1000 [ 1420.596155][T13072] chnl_net:caif_netlink_parms(): no params data found [ 1420.715167][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.724159][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.733372][T13072] bridge_slave_0: entered allmulticast mode [ 1420.741052][T13072] bridge_slave_0: entered promiscuous mode [ 1420.751137][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.760474][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.768074][T13072] bridge_slave_1: entered allmulticast mode [ 1420.776430][T13072] bridge_slave_1: entered promiscuous mode [ 1420.838589][T13072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.851633][T13072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.872392][T13114] overlayfs: failed to clone upperpath [ 1420.883767][T13112] overlayfs: failed to clone upperpath [ 1420.935161][T13072] team0: Port device team_slave_0 added [ 1420.944758][T13072] team0: Port device team_slave_1 added [ 1421.017477][T13072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.024707][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.054029][T13072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.075503][T13072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.083345][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.110854][T13072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.200881][T13072] hsr_slave_0: entered promiscuous mode [ 1421.208893][T13072] hsr_slave_1: entered promiscuous mode [ 1421.215507][T13072] debugfs: 'hsr0' already exists in 'hsr' [ 1421.222668][T13072] Cannot create hsr debugfs directory [ 1421.508684][T13134] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 1421.508684][T13134] C<+ [ 1421.550681][T13072] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1421.565148][T13072] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1421.595488][T13072] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1421.623924][T13072] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1421.925052][T13072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.953172][T13072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.968790][T25046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.976068][T25046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.997160][ T5166] Bluetooth: hci1: command tx timeout [ 1422.017196][T25046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.024449][T25046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.364440][T13072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.896314][T13180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.930703][T13180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.021235][T13072] veth0_vlan: entered promiscuous mode [ 1423.046205][T13072] veth1_vlan: entered promiscuous mode [ 1423.094877][T13072] veth0_macvtap: entered promiscuous mode [ 1423.122099][T13072] veth1_macvtap: entered promiscuous mode [ 1423.158200][T13072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.190326][T13072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.240567][T11391] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.263695][T11391] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.287449][T11391] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.311581][T11391] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.527896][T25046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.539945][T25046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.660864][T11391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.689924][T11391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.086729][ T5166] Bluetooth: hci1: command tx timeout [ 1424.176428][T13152] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1424.416296][T13152] usb 9-1: Using ep0 maxpacket: 16 [ 1424.426754][T13152] usb 9-1: config 0 has an invalid interface number: 148 but max is 0 [ 1424.440365][T13152] usb 9-1: config 0 has no interface number 0 [ 1424.450147][T13223] tipc: Enabling of bearer rejected, already enabled [ 1424.451984][T13152] usb 9-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid maxpacket 13725, setting to 64 [ 1424.471165][T13152] usb 9-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 1424.482778][T13152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.500359][T13152] usb 9-1: config 0 descriptor?? [ 1424.582905][T13078] udevd[13078]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.753201][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.790787][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.827545][T13208] netlink: 'syz.8.15991': attribute type 21 has an invalid length. [ 1425.199658][T25046] wlan1: Trigger new scan to find an IBSS to join [ 1425.415677][T13263] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 1426.156590][ T5166] Bluetooth: hci1: command tx timeout [ 1426.426553][T25046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.434707][T25046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.449563][T13298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.853751][ T30] audit: type=1326 audit(1753809473.907:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.7.16075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31a7b8e9a9 code=0x0 [ 1426.983165][T26189] usb 9-1: USB disconnect, device number 2 [ 1427.351999][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16083'. [ 1427.566089][T26189] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1427.726750][T26189] usb 9-1: Using ep0 maxpacket: 8 [ 1427.735668][T26189] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1427.747791][T26189] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1427.760895][T26189] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1427.775468][T26189] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1427.786830][T26189] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1427.801799][T26189] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1427.811433][T26189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.042631][T26189] usb 9-1: usb_control_msg returned -32 [ 1428.050136][T26189] usbtmc 9-1:16.0: can't read capabilities [ 1428.124124][T13342] sctp: [Deprecated]: syz.0.16092 (pid 13342) Use of int in maxseg socket option. [ 1428.124124][T13342] Use struct sctp_assoc_value instead [ 1428.227878][T13347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16095'. [ 1428.238847][ T5166] Bluetooth: hci1: command tx timeout [ 1428.404448][T13357] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16082'. [ 1428.484027][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.606978][T26184] usb 9-1: USB disconnect, device number 3 [ 1428.618704][ T30] audit: type=1326 audit(1753809475.677:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.5.16102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f100c98e9a9 code=0x0 [ 1429.188938][T13374] sctp: [Deprecated]: syz.8.16105 (pid 13374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1429.188938][T13374] Use struct sctp_sack_info instead [ 1429.518387][T13388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1429.759607][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16114'. [ 1430.036149][T26189] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1430.166154][T26189] usb 9-1: device descriptor read/64, error -71 [ 1430.166507][T11391] wlan1: Trigger new scan to find an IBSS to join [ 1430.417444][T26189] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1430.556170][T26189] usb 9-1: device descriptor read/64, error -71 [ 1430.676163][T26189] usb usb9-port1: attempt power cycle [ 1430.815697][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16125'. [ 1431.046130][T26189] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1431.081308][T11391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.081336][T26189] usb 9-1: device descriptor read/8, error -71 [ 1431.209882][T13442] netlink: 'syz.5.16132': attribute type 2 has an invalid length. [ 1431.336074][T26189] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1431.376688][T26189] usb 9-1: device descriptor read/8, error -71 [ 1431.486544][T26189] usb usb9-port1: unable to enumerate USB device [ 1431.968351][T13475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16143'. [ 1433.162159][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16158'. [ 1433.220037][T13522] sctp: [Deprecated]: syz.5.16159 (pid 13522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1433.220037][T13522] Use struct sctp_sack_info instead [ 1433.376250][T26189] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1433.411912][T13529] /dev/rnullb0: Can't lookup blockdev [ 1433.539933][T26189] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1433.568736][T26189] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1433.585532][T26189] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1433.604503][T26189] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 1433.623556][ T30] audit: type=1326 audit(1753809480.677:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.5.16168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f100c98e9a9 code=0x0 [ 1433.646431][T26189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 1433.654749][T26189] usb 9-1: SerialNumber: syz [ 1433.885341][T26189] yealink 9-1:36.0: invalid payload size 0, expected 16 [ 1433.899651][T26189] input: Yealink usb-p1k as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:36.0/input/input75 [ 1433.920676][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.928938][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.936150][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.943448][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.951579][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.959236][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.966494][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.973672][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1433.980491][ C1] yealink 9-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1433.995070][T26189] usb 9-1: USB disconnect, device number 8 [ 1434.075868][T13553] netlink: 348 bytes leftover after parsing attributes in process `syz.7.16172'. [ 1434.774767][T13568] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16178'. [ 1435.421054][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16180'. [ 1436.914234][T13598] netlink: 104 bytes leftover after parsing attributes in process `syz.5.16189'. [ 1436.931847][T13598] tmpfs: Bad value for 'nr_inodes' [ 1437.459932][T13607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.721267][T13623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.844083][T13656] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1439.441442][T13650] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1439.448929][T13650] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1439.482910][T13650] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1439.571778][T26184] IPVS: starting estimator thread 0... [ 1439.687072][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16222'. [ 1439.696612][T13681] IPVS: using max 28 ests per chain, 67200 per kthread [ 1440.726786][ T5166] Bluetooth: hci1: command 0x0c1a tx timeout [ 1441.615570][T13725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.697502][T13729] /dev/rnullb0: Can't lookup blockdev [ 1442.055033][T13735] ALSA: mixer_oss: invalid OSS volume '' [ 1442.806461][ T5166] Bluetooth: hci1: command 0x0c1a tx timeout [ 1442.973094][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16254'. [ 1443.227366][T13784] net_ratelimit: 345 callbacks suppressed [ 1443.227390][T13784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.456641][T13801] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.16270'. [ 1443.474042][T13801] netlink: zone id is out of range [ 1443.480423][T13801] netlink: zone id is out of range [ 1443.485702][T13801] netlink: zone id is out of range [ 1443.491945][T13801] netlink: get zone limit has 8 unknown bytes [ 1443.514328][T13804] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16271'. [ 1445.367021][ T5166] Bluetooth: hci1: command 0x0c1a tx timeout [ 1445.375341][T13788] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1445.400819][T26205] Bluetooth: hci4: Frame reassembly failed (-84) [ 1445.621803][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16296'. [ 1445.636265][T10033] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1445.799384][T13871] x_tables: unsorted entry at hook 2 [ 1445.806502][T10033] usb 9-1: Using ep0 maxpacket: 32 [ 1445.827603][T10033] usb 9-1: config 2 has an invalid interface number: 20 but max is 0 [ 1445.836836][T10033] usb 9-1: config 2 has no interface number 0 [ 1445.842993][T10033] usb 9-1: config 2 interface 20 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1445.854201][T10033] usb 9-1: config 2 interface 20 has no altsetting 0 [ 1445.863678][T10033] usb 9-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93 [ 1445.872982][T10033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.949809][T13873] tmpfs: Bad value for 'mpol' [ 1446.092292][T10033] usb 9-1: string descriptor 0 read error: -71 [ 1446.141702][T10033] usb 9-1: USB disconnect, device number 9 [ 1446.572562][T13890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1446.608757][T13890] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1447.264777][T13901] netlink: 'syz.5.16313': attribute type 64 has an invalid length. [ 1447.279444][T13901] netlink: 'syz.5.16313': attribute type 4 has an invalid length. [ 1447.296271][T13901] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16313'. [ 1447.372168][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16313'. [ 1447.436409][T13073] Bluetooth: hci4: command 0x1003 tx timeout [ 1447.436794][ T5166] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1447.611984][T13910] comedi comedi2: dmm32at: I/O port conflict (0x6,16) [ 1448.256663][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16318'. [ 1448.320194][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16318'. [ 1448.419906][T13928] /dev/rnullb0: Can't lookup blockdev [ 1448.566164][T10033] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1448.591398][T13934] /dev/rnullb0: Can't lookup blockdev [ 1448.730833][T10033] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1448.745023][T10033] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.757972][T10033] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1448.773974][T10033] usb 9-1: config 1 has no interface number 0 [ 1448.780931][T10033] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1448.792867][T10033] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1448.809497][T10033] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1448.819797][T10033] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.829643][T10033] usb 9-1: Product: syz [ 1448.834052][T10033] usb 9-1: Manufacturer: syz [ 1448.839283][T10033] usb 9-1: SerialNumber: syz [ 1448.858580][T10033] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1448.865827][T10033] cdc_ncm 9-1:1.1: bind() failure [ 1448.893572][ T30] audit: type=1326 audit(1753809495.947:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.7.16325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31a7b8e9a9 code=0x0 [ 1449.069558][T13912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.122787][T13912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.134712][T13912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.148211][T13912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.298413][ T5916] usb 9-1: USB disconnect, device number 10 [ 1449.324183][T13956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16330'. [ 1449.350398][T13956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16330'. [ 1449.822934][T13970] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1449.829823][T13970] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1449.842316][T13970] vhci_hcd vhci_hcd.0: Device attached [ 1449.850473][T13971] usbip_core: unknown command [ 1449.855281][T13971] vhci_hcd: unknown pdu 0 [ 1449.860584][T13971] usbip_core: unknown command [ 1449.879087][T26272] vhci_hcd: stop threads [ 1449.896644][T26272] vhci_hcd: release socket [ 1449.905147][T26272] vhci_hcd: disconnect device [ 1450.116100][ T5916] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1450.261083][T13981] /dev/rnullb0: Can't lookup blockdev [ 1450.276224][ T5916] usb 9-1: Using ep0 maxpacket: 32 [ 1450.284184][ T5916] usb 9-1: config 108 has an invalid interface number: 142 but max is 1 [ 1450.292745][ T5916] usb 9-1: config 108 has an invalid interface number: 161 but max is 1 [ 1450.306024][ T5916] usb 9-1: config 108 has no interface number 0 [ 1450.312332][ T5916] usb 9-1: config 108 has no interface number 1 [ 1450.336121][ T5916] usb 9-1: config 108 interface 142 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1450.349305][ T5916] usb 9-1: config 108 interface 142 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1450.360716][ T5916] usb 9-1: config 108 interface 142 altsetting 3 endpoint 0xB has an invalid bInterval 116, changing to 7 [ 1450.373907][ T5916] usb 9-1: config 108 interface 142 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1450.386248][ T5916] usb 9-1: config 108 interface 142 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1450.397448][ T5916] usb 9-1: config 108 interface 142 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1450.409402][ T5916] usb 9-1: config 108 interface 142 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1450.426255][ T5916] usb 9-1: config 108 interface 161 altsetting 252 has a duplicate endpoint with address 0x1, skipping [ 1450.436281][T13985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16342'. [ 1450.439142][ T5916] usb 9-1: config 108 interface 142 has no altsetting 0 [ 1450.457274][T13985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16342'. [ 1450.459370][ T5916] usb 9-1: config 108 interface 161 has no altsetting 0 [ 1450.478249][ T5916] usb 9-1: New USB device found, idVendor=1740, idProduct=9703, bcdDevice=68.54 [ 1450.499939][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.508443][ T5916] usb 9-1: Product: И [ 1450.512587][ T5916] usb 9-1: Manufacturer: ສ䖶᠚툜ᢹ憪໏怟峌ཇ졊ḋ娜࿅徳谇캕鑒値ᱍ꽋䡅䡄䫈嘙瀔떸Τ눁歷➸ᡏ㗛틚㙰䎳퓼蚃浱㉢鯇찁呚㴇죯児탰ꩥ뇵醓鋀쪬ጸ츌⬥폅팵쫥虄ㅝꏏ䔂䀍馼䬰횒 [ 1450.540974][ T5916] usb 9-1: SerialNumber: ᠁ [ 1450.558027][T13969] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1450.572979][T13969] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1450.832302][ T5916] usb 9-1: USB disconnect, device number 11 [ 1450.981402][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16352'. [ 1450.990781][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16352'. [ 1451.063048][T14014] netlink: 'syz.0.16354': attribute type 46 has an invalid length. [ 1451.457082][T14032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16363'. [ 1451.471431][T14032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16363'. [ 1452.132689][T14061] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1452.144295][T14061] overlayfs: failed to set xattr on upper [ 1452.153447][T14061] overlayfs: ...falling back to redirect_dir=nofollow. [ 1452.174147][T14061] overlayfs: ...falling back to index=off. [ 1452.181461][T14061] overlayfs: ...falling back to uuid=null. [ 1452.197054][T14061] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1452.944569][ T5166] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1453.165594][T14107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.291265][T14112] /dev/rnullb0: Can't lookup blockdev [ 1454.047031][T23477] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1454.206202][T23477] usb 9-1: Using ep0 maxpacket: 32 [ 1454.213737][T23477] usb 9-1: config index 0 descriptor too short (expected 124, got 36) [ 1454.222551][T23477] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1454.234414][T23477] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1454.246206][T23477] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1454.258824][T23477] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1454.270169][T23477] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1454.296607][T23477] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.311731][T23477] usb 9-1: config 0 descriptor?? [ 1454.562882][T23477] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1454.599164][T23477] usb 9-1: USB disconnect, device number 12 [ 1454.617343][T23477] usblp0: removed [ 1454.992652][T14165] netlink: 72 bytes leftover after parsing attributes in process `syz.5.16413'. [ 1455.426037][T23477] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1455.600912][T23477] usb 9-1: config index 0 descriptor too short (expected 1316, got 36) [ 1455.609612][T23477] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 1455.618271][T23477] usb 9-1: config 0 has an invalid descriptor of length 153, skipping remainder of the config [ 1455.629109][T23477] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1455.638195][T23477] usb 9-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1455.651681][T23477] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1455.658676][T23477] usb 9-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1455.668014][T23477] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.679171][T23477] usb 9-1: config 0 descriptor?? [ 1455.691642][T23477] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1455.944175][T23477] usb 9-1: USB disconnect, device number 13 [ 1456.023628][T14187] netlink: 'syz.8.16419': attribute type 11 has an invalid length. [ 1456.412538][T14202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.692020][T25627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.708848][T25627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.751027][T14256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.564183][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16449'. [ 1459.584063][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16449'. [ 1460.000195][T14281] overlayfs: empty lowerdir [ 1460.469929][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16461'. [ 1460.481987][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16461'. [ 1460.578926][T14292] netlink: 64 bytes leftover after parsing attributes in process `syz.5.16463'. [ 1460.598328][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16463'. [ 1461.056156][T14304] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16466'. [ 1461.340274][T14315] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002 [ 1461.358854][T14317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.831358][T14353] netlink: 'syz.5.16484': attribute type 4 has an invalid length. [ 1462.994038][T14357] netlink: 176 bytes leftover after parsing attributes in process `syz.8.16485'. [ 1463.294446][ T30] audit: type=1326 audit(1753809510.347:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.16488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7fb8e9a9 code=0x0 [ 1463.370566][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16489'. [ 1467.059556][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16514'. [ 1468.490127][T14464] /dev/rnullb0: Can't lookup blockdev [ 1469.280617][T14364] syz.7.16489: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1469.299611][T14364] CPU: 0 UID: 0 PID: 14364 Comm: syz.7.16489 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 1469.299642][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1469.299656][T14364] Call Trace: [ 1469.299665][T14364] [ 1469.299675][T14364] dump_stack_lvl+0x189/0x250 [ 1469.299715][T14364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1469.299746][T14364] ? __pfx__printk+0x10/0x10 [ 1469.299774][T14364] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1469.299798][T14364] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1469.299823][T14364] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1469.299848][T14364] warn_alloc+0x214/0x310 [ 1469.299873][T14364] ? __pfx_warn_alloc+0x10/0x10 [ 1469.299899][T14364] ? __get_vm_area_node+0x28f/0x300 [ 1469.299917][T14364] ? hash_netiface_create+0x358/0xfe0 [ 1469.299939][T14364] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1469.299980][T14364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1469.299997][T14364] ? hash_netiface_create+0x358/0xfe0 [ 1469.300017][T14364] ? __get_vm_area_node+0x28f/0x300 [ 1469.300035][T14364] ? hash_netiface_create+0x358/0xfe0 [ 1469.300054][T14364] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 1469.300073][T14364] ? hash_netiface_create+0x358/0xfe0 [ 1469.300090][T14364] ? do_syscall_64+0xfa/0x3b0 [ 1469.300136][T14364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1469.300160][T14364] ? rcu_is_watching+0x15/0xb0 [ 1469.300186][T14364] ? hash_netiface_create+0x358/0xfe0 [ 1469.300203][T14364] ? hash_netiface_create+0x358/0xfe0 [ 1469.300220][T14364] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1469.300239][T14364] ? hash_netiface_create+0x358/0xfe0 [ 1469.300257][T14364] ? hash_netiface_create+0x2fe/0xfe0 [ 1469.300278][T14364] hash_netiface_create+0x358/0xfe0 [ 1469.300304][T14364] ? __nla_parse+0x40/0x60 [ 1469.300327][T14364] ? __pfx_hash_netiface_create+0x10/0x10 [ 1469.300347][T14364] ip_set_create+0xa94/0x1940 [ 1469.300367][T14364] ? ip_set_create+0x4a2/0x1940 [ 1469.300394][T14364] ? __pfx_ip_set_create+0x10/0x10 [ 1469.300440][T14364] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1469.300463][T14364] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1469.300505][T14364] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1469.300549][T14364] ? __lock_acquire+0xab9/0xd20 [ 1469.300578][T14364] netlink_rcv_skb+0x205/0x470 [ 1469.300602][T14364] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1469.300624][T14364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1469.300656][T14364] ? bpf_lsm_capable+0x9/0x20 [ 1469.300674][T14364] ? security_capable+0x7e/0x2e0 [ 1469.300702][T14364] nfnetlink_rcv+0x26a/0x2520 [ 1469.300723][T14364] ? unwind_get_return_address+0x4d/0x90 [ 1469.300745][T14364] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1469.300769][T14364] ? arch_stack_walk+0xfc/0x150 [ 1469.300801][T14364] ? stack_trace_save+0x9c/0xe0 [ 1469.300826][T14364] ? stack_depot_save_flags+0x40/0x900 [ 1469.300850][T14364] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1469.300871][T14364] ? kasan_save_track+0x4f/0x80 [ 1469.300885][T14364] ? kasan_save_track+0x3e/0x80 [ 1469.300905][T14364] ? __lock_acquire+0xab9/0xd20 [ 1469.300940][T14364] ? __lock_acquire+0xab9/0xd20 [ 1469.300965][T14364] ? netlink_deliver_tap+0x2e/0x1b0 [ 1469.300994][T14364] ? netlink_deliver_tap+0x2e/0x1b0 [ 1469.301017][T14364] ? netlink_deliver_tap+0x2e/0x1b0 [ 1469.301045][T14364] netlink_unicast+0x759/0x8e0 [ 1469.301075][T14364] netlink_sendmsg+0x805/0xb30 [ 1469.301107][T14364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1469.301134][T14364] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1469.301159][T14364] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1469.301182][T14364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1469.301208][T14364] __sock_sendmsg+0x219/0x270 [ 1469.301232][T14364] ____sys_sendmsg+0x505/0x830 [ 1469.301253][T14364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1469.301277][T14364] ? import_iovec+0x74/0xa0 [ 1469.301297][T14364] ___sys_sendmsg+0x21f/0x2a0 [ 1469.301316][T14364] ? __pfx____sys_sendmsg+0x10/0x10 [ 1469.301361][T14364] ? __fget_files+0x2a/0x420 [ 1469.301384][T14364] ? __fget_files+0x3a0/0x420 [ 1469.301416][T14364] __x64_sys_sendmsg+0x19b/0x260 [ 1469.301435][T14364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1469.301467][T14364] ? do_syscall_64+0xbe/0x3b0 [ 1469.301515][T14364] do_syscall_64+0xfa/0x3b0 [ 1469.301538][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 1469.301560][T14364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.301575][T14364] ? clear_bhb_loop+0x60/0xb0 [ 1469.301595][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.301610][T14364] RIP: 0033:0x7f31a7b8e9a9 [ 1469.301626][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1469.301640][T14364] RSP: 002b:00007f31a896b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1469.301656][T14364] RAX: ffffffffffffffda RBX: 00007f31a7db5fa0 RCX: 00007f31a7b8e9a9 [ 1469.301668][T14364] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1469.301679][T14364] RBP: 00007f31a7c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1469.301688][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1469.301698][T14364] R13: 0000000000000000 R14: 00007f31a7db5fa0 R15: 00007ffc40c538a8 [ 1469.301721][T14364] [ 1469.301754][T14364] Mem-Info: [ 1469.838375][T14364] active_anon:55065 inactive_anon:22339 isolated_anon:0 [ 1469.838375][T14364] active_file:6799 inactive_file:52802 isolated_file:0 [ 1469.838375][T14364] unevictable:17115 dirty:44 writeback:0 [ 1469.838375][T14364] slab_reclaimable:12488 slab_unreclaimable:112579 [ 1469.838375][T14364] mapped:24752 shmem:67585 pagetables:2883 [ 1469.838375][T14364] sec_pagetables:0 bounce:0 [ 1469.838375][T14364] kernel_misc_reclaimable:0 [ 1469.838375][T14364] free:1166038 free_pcp:26844 free_cma:0 [ 1469.886249][T14364] Node 0 active_anon:220160kB inactive_anon:89356kB active_file:27196kB inactive_file:210860kB unevictable:66924kB isolated(anon):0kB isolated(file):0kB mapped:98868kB dirty:176kB writeback:0kB shmem:268804kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14400kB pagetables:11472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1469.919559][T14364] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1469.950318][T14364] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1469.984891][T14364] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 1469.992984][T14364] Node 0 DMA32 free:758056kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:220112kB inactive_anon:89356kB active_file:27196kB inactive_file:209776kB unevictable:66924kB writepending:176kB present:3129332kB managed:2556420kB mlocked:0kB bounce:0kB free_pcp:90708kB local_pcp:51012kB free_cma:0kB [ 1470.062676][T14364] lowmem_reserve[]: 0 0 1 1 1 [ 1470.081661][T14364] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.115760][T14364] lowmem_reserve[]: 0 0 0 0 0 [ 1470.120847][T14364] Node 1 Normal free:3890736kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:348kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17408kB local_pcp:4096kB free_cma:0kB [ 1470.162005][T14364] lowmem_reserve[]: 0 0 0 0 0 [ 1470.170988][T14364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1470.185098][T14364] Node 0 DMA32: 949*4kB (M) 417*8kB (M) 432*16kB (UM) 256*32kB (M) 125*64kB (M) 104*128kB (UM) 49*256kB (UME) 17*512kB (UM) 49*1024kB (UM) 34*2048kB (UME) 140*4096kB (UM) = 758044kB [ 1470.206968][T14364] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1470.279736][T14364] Node 1 Normal: 196*4kB (UE) 46*8kB (UME) 49*16kB (UE) 273*32kB (UME) 104*64kB (UME) 21*128kB (UME) 6*256kB (UME) 3*512kB (UM) 1*1024kB (M) 3*2048kB (ME) 943*4096kB (M) = 3892784kB [ 1470.303271][T14364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1470.313250][T14364] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1470.323321][T14364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1470.333604][T14364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1470.343291][T14364] 145855 total pagecache pages [ 1470.348579][T14364] 295 pages in swap cache [ 1470.352951][T14364] Free swap = 99148kB [ 1470.419617][T14364] Total swap = 124996kB [ 1470.423844][T14364] 2097051 pages RAM [ 1470.430614][T14364] 0 pages HighMem/MovableOnly [ 1470.435696][T14364] 426032 pages reserved [ 1470.477560][T14364] 0 pages cma reserved [ 1471.206325][T26184] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1471.366087][T26184] usb 9-1: device descriptor read/64, error -71 [ 1471.573369][T14515] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1471.616963][T26184] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1471.633402][T14517] openvswitch: netlink: Flow actions attr not present in new flow. [ 1471.646079][T14515] CIFS mount error: No usable UNC path provided in device string! [ 1471.646079][T14515] [ 1471.672593][T14515] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1471.756203][T26184] usb 9-1: device descriptor read/64, error -71 [ 1471.866308][T26184] usb usb9-port1: attempt power cycle [ 1471.887373][T14521] /dev/rnullb0: Can't lookup blockdev [ 1472.222461][T14540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.226471][T26184] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1472.256825][T26184] usb 9-1: device descriptor read/8, error -71 [ 1472.506178][T26184] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1472.526809][T26184] usb 9-1: device descriptor read/8, error -71 [ 1472.656731][T26184] usb usb9-port1: unable to enumerate USB device [ 1472.743687][T14546] netlink: 48 bytes leftover after parsing attributes in process `syz.7.16554'. [ 1472.975663][T14556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16557'. [ 1473.472568][T14566] /dev/rnullb0: Can't lookup blockdev [ 1474.109727][T14580] netlink: 108 bytes leftover after parsing attributes in process `syz.7.16567'. [ 1474.216102][ T30] audit: type=1326 audit(1753809521.267:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14590 comm="syz.5.16570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f100c98e9a9 code=0x0 [ 1475.126686][T14608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.800603][T26184] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1475.967048][T26184] usb 9-1: Using ep0 maxpacket: 8 [ 1475.978562][T26184] usb 9-1: config 127 has an invalid interface number: 171 but max is 1 [ 1475.992043][T26184] usb 9-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.003416][T26184] usb 9-1: config 127 has no interface number 1 [ 1476.021090][T14648] /dev/rnullb0: Can't lookup blockdev [ 1476.021102][T26184] usb 9-1: config 127 interface 171 has no altsetting 0 [ 1476.024533][T26184] usb 9-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1476.075826][T26184] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.101607][T26184] usb 9-1: Product: syz [ 1476.105842][T26184] usb 9-1: Manufacturer: syz [ 1476.111277][T26184] usb 9-1: SerialNumber: syz [ 1476.172168][T14652] /dev/rnullb0: Can't lookup blockdev [ 1476.352597][T26184] xr_serial 9-1:127.171: xr_serial converter detected [ 1476.389692][T26184] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1476.413170][T26184] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1476.453387][T26184] usb 9-1: USB disconnect, device number 18 [ 1476.465792][T26184] xr_serial 9-1:127.171: device disconnected [ 1476.689318][T14667] /dev/rnullb0: Can't lookup blockdev [ 1476.893856][T14678] /dev/rnullb0: Can't lookup blockdev [ 1477.944615][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16622'. [ 1477.955523][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16622'. [ 1478.543510][T14739] x_tables: duplicate underflow at hook 1 [ 1478.649300][T14744] omfs: Invalid superblock (0) [ 1478.859833][T14752] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1479.008595][T14764] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.16640'. [ 1479.582080][T14784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.052867][T14795] /dev/rnullb0: Can't lookup blockdev [ 1480.106218][ T5916] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1480.267617][ T5916] usb 9-1: Using ep0 maxpacket: 32 [ 1480.283605][ T5916] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1480.297759][ T5916] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 1480.331774][ T5916] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.365730][ T5916] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1480.366630][T14802] /dev/rnullb0: Can't lookup blockdev [ 1480.393663][ T5916] usb 9-1: config 128 has no interface number 0 [ 1480.394353][T14803] /dev/rnullb0: Can't lookup blockdev [ 1480.404669][ T5916] usb 9-1: config 128 interface 127 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 1480.423973][ T5916] usb 9-1: config 128 interface 127 has no altsetting 0 [ 1480.437027][ T5916] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1480.447468][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.455523][ T5916] usb 9-1: Product: syz [ 1480.466054][ T5916] usb 9-1: Manufacturer: syz [ 1480.471572][ T5916] usb 9-1: SerialNumber: syz [ 1480.730138][T14789] binder: BINDER_SET_CONTEXT_MGR already set [ 1480.746632][T14789] binder: 14788:14789 ioctl 4018620d 200000000040 returned -16 [ 1480.844386][ T5916] usb 9-1: USB disconnect, device number 19 [ 1480.899107][T14658] udevd[14658]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1481.087908][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16665'. [ 1481.112103][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16665'. [ 1481.144713][T14832] sit0: entered promiscuous mode [ 1481.200850][T14832] netlink: 'syz.7.16662': attribute type 1 has an invalid length. [ 1481.210295][T14832] netlink: 1 bytes leftover after parsing attributes in process `syz.7.16662'. [ 1481.570588][T14843] overlayfs: failed to clone lowerpath [ 1481.899020][ T30] audit: type=1326 audit(1753809528.957:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14846 comm="syz.0.16672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e7fb8e9a9 code=0x0 [ 1482.121761][T14851] /dev/nullb0: Can't lookup blockdev [ 1482.795842][ T30] audit: type=1804 audit(1753809529.847:475): pid=14869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.16679" name="rnullb0" dev="tmpfs" ino=7295 res=1 errno=0 [ 1483.128511][T14882] tmpfs: Bad value for 'nr_blocks' [ 1483.147888][T14889] FAULT_INJECTION: forcing a failure. [ 1483.147888][T14889] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1483.185750][T14889] CPU: 1 UID: 0 PID: 14889 Comm: syz.8.16688 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 1483.185782][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1483.185795][T14889] Call Trace: [ 1483.185803][T14889] [ 1483.185812][T14889] dump_stack_lvl+0x189/0x250 [ 1483.185846][T14889] ? __pfx____ratelimit+0x10/0x10 [ 1483.185878][T14889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.185905][T14889] ? __pfx__printk+0x10/0x10 [ 1483.185951][T14889] should_fail_ex+0x414/0x560 [ 1483.185982][T14889] _copy_from_user+0x2d/0xb0 [ 1483.186006][T14889] __copy_msghdr+0x3c5/0x5b0 [ 1483.186033][T14889] ___sys_sendmsg+0x1a5/0x2a0 [ 1483.186058][T14889] ? __pfx____sys_sendmsg+0x10/0x10 [ 1483.186120][T14889] ? __fget_files+0x2a/0x420 [ 1483.186150][T14889] ? __fget_files+0x3a0/0x420 [ 1483.186200][T14889] __x64_sys_sendmsg+0x19b/0x260 [ 1483.186228][T14889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1483.186262][T14889] ? __pfx_ksys_write+0x10/0x10 [ 1483.186287][T14889] ? rcu_is_watching+0x15/0xb0 [ 1483.186320][T14889] ? do_syscall_64+0xbe/0x3b0 [ 1483.186355][T14889] do_syscall_64+0xfa/0x3b0 [ 1483.186384][T14889] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.186412][T14889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.186432][T14889] ? clear_bhb_loop+0x60/0xb0 [ 1483.186459][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.186477][T14889] RIP: 0033:0x7ff09ef8e9a9 [ 1483.186496][T14889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.186513][T14889] RSP: 002b:00007ff09cdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.186535][T14889] RAX: ffffffffffffffda RBX: 00007ff09f1b5fa0 RCX: 00007ff09ef8e9a9 [ 1483.186551][T14889] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1483.186565][T14889] RBP: 00007ff09cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.186578][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.186591][T14889] R13: 0000000000000000 R14: 00007ff09f1b5fa0 R15: 00007ffdb9019068 [ 1483.186622][T14889] [ 1483.506538][ T30] audit: type=1804 audit(1753809530.557:476): pid=14896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.16692" name="rnullb0" dev="tmpfs" ino=7295 res=1 errno=0 [ 1483.655245][T14903] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1483.690622][T14905] /dev/rnullb0: Can't lookup blockdev [ 1483.724325][T14905] /dev/rnullb0: Can't lookup blockdev [ 1484.086511][ T5916] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1484.144589][T14926] /dev/rnullb0: Can't lookup blockdev [ 1484.152205][T14926] netlink: 'syz.5.16706': attribute type 1 has an invalid length. [ 1484.182071][T14928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1484.248245][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1484.263793][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.274874][ T5916] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1484.291692][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.317687][ T5916] usb 9-1: config 0 descriptor?? [ 1484.372289][T14932] /dev/rnullb0: Can't lookup blockdev [ 1484.773444][ T5916] konepure 0003:1E7D:2DBE.0053: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.8-1/input0 [ 1484.964471][ T5916] usb 9-1: USB disconnect, device number 20 [ 1485.056589][T14946] /dev/rnullb0: Can't lookup blockdev [ 1485.233070][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16717'. [ 1485.252566][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16717'. [ 1485.745720][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16726'. [ 1485.757646][T14977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16726'. [ 1485.777050][T14979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1486.530819][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16739'. [ 1486.540611][T15008] /dev/rnullb0: Can't lookup blockdev [ 1486.554025][T15010] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:21 [ 1486.556219][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16739'. [ 1486.674550][T15013] overlayfs: failed to clone upperpath [ 1486.934892][T15029] Bluetooth: MGMT ver 1.23 [ 1486.945507][T15032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16749'. [ 1487.218277][T15044] /dev/rnullb0: Can't lookup blockdev [ 1487.256325][T13152] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1487.482970][T13152] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1487.492438][T13152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.502884][T13152] usb 9-1: Product: syz [ 1487.507547][T13152] usb 9-1: Manufacturer: syz [ 1487.512368][T13152] usb 9-1: SerialNumber: syz [ 1487.520658][T13152] usb 9-1: config 0 descriptor?? [ 1487.664151][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16762'. [ 1487.674282][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16762'. [ 1488.152324][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.175363][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.196728][T13152] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1488.220129][T13152] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1488.251614][T13152] usb 9-1: USB disconnect, device number 21 [ 1488.818765][T15084] sctp: [Deprecated]: syz.8.16773 (pid 15084) Use of int in max_burst socket option deprecated. [ 1488.818765][T15084] Use struct sctp_assoc_value instead [ 1489.166355][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16778'. [ 1489.363819][ T30] audit: type=1804 audit(1753809536.417:477): pid=15105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.16781" name="rnullb0" dev="tmpfs" ino=3727 res=1 errno=0 [ 1489.924357][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.965658][T15119] /dev/rnullb0: Can't open blockdev [ 1489.972890][T15119] /dev/rnullb0: Can't open blockdev [ 1489.982442][T15119] /dev/rnullb0: Can't open blockdev [ 1489.991037][T15119] /dev/rnullb0: Can't open blockdev [ 1489.999199][T15119] /dev/rnullb0: Can't open blockdev [ 1490.005250][T15119] /dev/rnullb0: Can't open blockdev [ 1490.016609][T15119] /dev/rnullb0: Can't open blockdev [ 1490.323707][T15128] qnx4: no qnx4 filesystem (no root dir). [ 1490.425421][T15132] Bluetooth: MGMT ver 1.23 [ 1490.651561][T15140] __nla_validate_parse: 2 callbacks suppressed [ 1490.651586][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16795'. [ 1490.667301][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16795'. [ 1490.929733][T15152] sit0: entered allmulticast mode [ 1490.945613][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16802'. [ 1490.957940][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16802'. [ 1491.571313][T15174] /dev/rnullb0: Can't lookup blockdev [ 1491.775279][T15184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1492.208765][T15189] syzkaller0 speed is unknown, defaulting to 1000 [ 1492.252711][T15200] netlink: 5 bytes leftover after parsing attributes in process `syz.8.16813'. [ 1492.269553][T15200] 0{X: renamed from gretap0 (while UP) [ 1492.279066][T15200] 0{X: entered allmulticast mode [ 1492.285173][T15200] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1492.443101][T15210] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16820'. [ 1492.458573][T15210] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1492.720788][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16824'. [ 1492.732014][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16824'. [ 1492.993683][T15225] /dev/rnullb0: Can't lookup blockdev [ 1493.148920][T15231] sock: sock_timestamping_bind_phc: sock not bind to device [ 1493.796564][T26189] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1493.845312][T15265] /dev/rnullb0: Can't lookup blockdev [ 1493.970201][T26189] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1494.007501][T26189] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 23703, setting to 64 [ 1494.052922][T26189] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 1494.072991][T26189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 1494.098563][T26189] usb 9-1: SerialNumber: syz [ 1494.111315][T15250] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1494.332952][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.371215][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.394661][T26189] yealink 9-1:36.0: invalid payload size 64, expected 16 [ 1494.407851][T26189] input: Yealink usb-p1k as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:36.0/input/input76 [ 1494.441156][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1494.450073][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1494.462769][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1494.471434][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1494.478464][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1494.485493][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1494.492406][ C1] yealink 9-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 1494.500283][T26189] usb 9-1: USB disconnect, device number 22 [ 1494.513352][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16845'. [ 1494.850619][T15286] /dev/rnullb0: Can't lookup blockdev [ 1495.551827][T15316] IPVS: ip_vs_add_dest(): server weight less than zero [ 1496.082500][T15335] netlink: 'syz.0.16867': attribute type 2 has an invalid length. [ 1496.108653][T15335] netlink: 'syz.0.16867': attribute type 8 has an invalid length. [ 1496.110790][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16869'. [ 1496.131592][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16869'. [ 1496.157347][T15335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16867'. [ 1497.656431][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16886'. [ 1497.697011][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16886'. [ 1497.824085][T26437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.834177][T13152] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1497.968397][T15384] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16888'. [ 1498.006428][T13152] usb 9-1: Using ep0 maxpacket: 16 [ 1498.014965][T13152] usb 9-1: config 0 has an invalid interface number: 58 but max is 0 [ 1498.024603][T13152] usb 9-1: config 0 has no interface number 0 [ 1498.037616][T13152] usb 9-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1498.059343][T13152] usb 9-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1498.072732][T13152] usb 9-1: config 0 interface 58 has no altsetting 0 [ 1498.085840][T13152] usb 9-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 1498.096451][T13152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.104661][T13152] usb 9-1: Product: syz [ 1498.109716][T13152] usb 9-1: Manufacturer: syz [ 1498.115823][T13152] usb 9-1: SerialNumber: syz [ 1498.128792][T13152] usb 9-1: config 0 descriptor?? [ 1498.143792][T15381] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1498.156379][T15381] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1498.172529][T13152] ums-isd200 9-1:0.58: USB Mass Storage device detected [ 1498.199891][T13073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1498.215409][T13073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1498.233586][T13073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1498.242628][T13073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1498.260317][T13073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1498.540197][T13152] ums-isd200 9-1:0.58: probe with driver ums-isd200 failed with error -22 [ 1498.638306][T15388] syzkaller0 speed is unknown, defaulting to 1000 [ 1498.670159][T10033] usb 9-1: USB disconnect, device number 23 [ 1498.931933][T15388] chnl_net:caif_netlink_parms(): no params data found [ 1499.086835][T15388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.094483][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.102465][T15388] bridge_slave_0: entered allmulticast mode [ 1499.111326][T15388] bridge_slave_0: entered promiscuous mode [ 1499.121398][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.129577][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.139468][T15388] bridge_slave_1: entered allmulticast mode [ 1499.149471][T15388] bridge_slave_1: entered promiscuous mode [ 1499.209039][T15388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.246765][T15388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.310879][T15388] team0: Port device team_slave_0 added [ 1499.320203][T15388] team0: Port device team_slave_1 added [ 1499.363234][T15388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.370650][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.398271][T15388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.416576][T15388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.423585][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.450426][T15388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.531438][T15388] hsr_slave_0: entered promiscuous mode [ 1499.538482][T15388] hsr_slave_1: entered promiscuous mode [ 1499.545132][T15388] debugfs: 'hsr0' already exists in 'hsr' [ 1499.551557][T15388] Cannot create hsr debugfs directory [ 1499.786926][T15388] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.885414][T15388] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.945890][T15388] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.011659][T15388] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.254933][T15388] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1500.311277][T15388] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1500.318756][ T5166] Bluetooth: hci4: command tx timeout [ 1500.344563][T15388] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1500.356454][T15411] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1500.363038][T15411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1500.367152][T15388] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1500.397323][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16897'. [ 1500.408977][T15411] vhci_hcd vhci_hcd.0: Device attached [ 1500.416716][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16897'. [ 1500.571620][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.593763][T15388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.601233][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.617905][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.630540][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.638691][T15388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.654741][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.663149][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.667126][T10033] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1500.670522][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.690573][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.702155][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.711517][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.719154][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.722710][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.725380][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.731975][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.748913][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.755220][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.765897][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.777439][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.785244][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.797214][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.803392][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.818894][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.825390][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.833634][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.841146][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.848596][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.866847][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.873763][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.881439][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.889486][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.896938][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.902842][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.913173][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.931256][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.942573][T15415] vhci_hcd: connection reset by peer [ 1500.965565][T25627] vhci_hcd: stop threads [ 1500.971020][T15432] /dev/rnullb0: Can't lookup blockdev [ 1500.987756][T25627] vhci_hcd: release socket [ 1501.000931][T15432] /dev/rnullb0: Can't lookup blockdev [ 1501.015346][T15432] /dev/rnullb0: Can't lookup blockdev [ 1501.024431][T25627] vhci_hcd: disconnect device [ 1501.094043][T15440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1501.315113][T15388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.464808][ T30] audit: type=1804 audit(1753809548.517:478): pid=15457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.16909" name="rnullb0" dev="tmpfs" ino=7295 res=1 errno=0 [ 1501.892861][T15388] veth0_vlan: entered promiscuous mode [ 1501.937808][T15388] veth1_vlan: entered promiscuous mode [ 1501.954291][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16917'. [ 1502.011524][T15388] veth0_macvtap: entered promiscuous mode [ 1502.024521][T15388] veth1_macvtap: entered promiscuous mode [ 1502.065242][T15388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1502.095057][T15388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.131579][T26272] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.177937][T26272] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.201828][T26272] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.271807][T26272] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.396571][ T5166] Bluetooth: hci4: command tx timeout [ 1502.520816][T11391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.562895][T11391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.645884][T26205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.681833][T26205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.828742][T15513] 9pnet_fd: Insufficient options for proto=fd [ 1503.848380][T15513] /dev/rnullb0: Can't lookup blockdev [ 1504.083470][T15519] pimreg: entered allmulticast mode [ 1504.109961][T15519] pimreg: left allmulticast mode [ 1504.150829][T13073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1504.167173][T13073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1504.178054][T13073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1504.190635][T13073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1504.201074][T13073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1504.476165][T13073] Bluetooth: hci4: command tx timeout [ 1505.071264][T15520] syzkaller0 speed is unknown, defaulting to 1000 [ 1505.772966][T15520] chnl_net:caif_netlink_parms(): no params data found [ 1505.808144][T26272] bond0: left allmulticast mode [ 1505.813067][T26272] bond_slave_0: left allmulticast mode [ 1505.824591][T26272] bond_slave_1: left allmulticast mode [ 1505.833855][T26272] bridge0: port 3(bond0) entered disabled state [ 1505.836121][T10033] vhci_hcd: vhci_device speed not set [ 1505.852051][T26272] bridge_slave_1: left allmulticast mode [ 1505.862555][T26272] bridge_slave_1: left promiscuous mode [ 1505.869758][T26272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.890014][T26272] bridge_slave_0: left allmulticast mode [ 1505.901782][T26272] bridge_slave_0: left promiscuous mode [ 1505.910523][T26272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.563878][ T5166] Bluetooth: hci4: command tx timeout [ 1506.636498][ T5166] Bluetooth: hci3: command tx timeout [ 1506.653090][T26272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.664657][T26272] bond_slave_0: left promiscuous mode [ 1506.672140][T26272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.681965][T26272] bond_slave_1: left promiscuous mode [ 1506.691399][T26272] bond0 (unregistering): Released all slaves [ 1506.795333][T26272] tipc: Disabling bearer [ 1506.805784][T26272] tipc: Disabling bearer [ 1506.814086][T26272] tipc: Left network mode [ 1506.920891][T15520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.931205][T15520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.938590][T15520] bridge_slave_0: entered allmulticast mode [ 1506.946050][T15520] bridge_slave_0: entered promiscuous mode [ 1506.959043][T15520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.973130][T15520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.981644][T15520] bridge_slave_1: entered allmulticast mode [ 1506.990200][T15520] bridge_slave_1: entered promiscuous mode [ 1507.114844][T15520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.140578][T15520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.289642][T15520] team0: Port device team_slave_0 added [ 1507.310681][T15520] team0: Port device team_slave_1 added [ 1507.438231][T15520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.445701][T15520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.494475][T15520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.574744][T15520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.597050][T15520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.638766][T15520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.722599][T26272] hsr_slave_0: left promiscuous mode [ 1507.729809][T26272] hsr_slave_1: left promiscuous mode [ 1507.740853][T26272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.755002][T26272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.372000][T26272] team0 (unregistering): Port device team_slave_1 removed [ 1508.449261][T26272] team0 (unregistering): Port device team_slave_0 removed [ 1508.521204][T11391] smc: removing ib device syz0 [ 1508.718195][ T5166] Bluetooth: hci3: command tx timeout [ 1509.312639][T15520] hsr_slave_0: entered promiscuous mode [ 1509.321632][T15520] hsr_slave_1: entered promiscuous mode [ 1509.350640][T15520] debugfs: 'hsr0' already exists in 'hsr' [ 1509.359305][T15520] Cannot create hsr debugfs directory [ 1510.809783][ T5166] Bluetooth: hci3: command tx timeout [ 1511.094903][T15520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1511.125453][T15520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1511.165424][T15520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1511.194619][T15520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1511.464415][T15520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.554964][T15520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.592747][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.600024][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.652981][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.660276][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.834553][T26272] IPVS: stop unused estimator thread 0... [ 1512.204662][T15520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.642716][T15520] veth0_vlan: entered promiscuous mode [ 1512.659882][T15520] veth1_vlan: entered promiscuous mode [ 1512.719019][T15520] veth0_macvtap: entered promiscuous mode [ 1512.740363][T15520] veth1_macvtap: entered promiscuous mode [ 1512.769912][T15520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.799660][T15520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.826653][T11391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.835703][T11391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.887283][ T5166] Bluetooth: hci3: command tx timeout [ 1512.891985][T11391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.921375][T11391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.004359][T11391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.027775][T11391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.075715][T11391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.086777][T11391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.467037][T10033] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1513.639184][T10033] usb 6-1: Using ep0 maxpacket: 32 [ 1513.645273][T10033] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 1513.662772][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.677993][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.692663][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.704815][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.717677][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.729828][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.741848][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.754052][T10033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.768055][T10033] usb 6-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ce.6f [ 1513.777562][T10033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.785592][T10033] usb 6-1: Product: syz [ 1513.790341][T10033] usb 6-1: Manufacturer: syz [ 1513.795481][T10033] usb 6-1: SerialNumber: syz [ 1513.804255][T10033] usb 6-1: config 0 descriptor?? [ 1513.812878][T10033] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1514.023582][T10033] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1514.031685][T10033] quatech2 6-1:0.0: probe with driver quatech2 failed with error -71 [ 1514.043459][T10033] usb 6-1: USB disconnect, device number 23 [ 1520.816993][T13073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1520.836241][T13073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1520.845379][T13073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1520.853997][T13073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1520.865337][T13073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1521.033277][T15666] syzkaller0 speed is unknown, defaulting to 1000 [ 1521.236316][T13152] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1521.362883][T26198] usb 1-1: USB disconnect, device number 87 [ 1521.486014][T13152] usb 6-1: Using ep0 maxpacket: 16 [ 1521.496658][T13152] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1521.516911][T13152] usb 6-1: config 8 has an invalid interface number: 167 but max is 0 [ 1521.535396][T13152] usb 6-1: config 8 has no interface number 0 [ 1521.545161][T13152] usb 6-1: config 8 interface 167 has no altsetting 0 [ 1521.565274][T13152] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=b0.e0 [ 1521.585329][T13152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.606003][T13152] usb 6-1: Product: syz [ 1521.616097][T13152] usb 6-1: Manufacturer: syz [ 1521.624660][T13152] usb 6-1: SerialNumber: syz [ 1521.652878][T15666] chnl_net:caif_netlink_parms(): no params data found [ 1521.970167][T13152] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1521.991474][T15666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.999450][T13152] gspca_zc3xx: reg_w_i err -71 [ 1522.004426][T13152] gspca_zc3xx 6-1:8.167: probe with driver gspca_zc3xx failed with error -71 [ 1522.025445][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.045651][T15666] bridge_slave_0: entered allmulticast mode [ 1522.054796][T13152] usb 6-1: USB disconnect, device number 24 [ 1522.078692][T15666] bridge_slave_0: entered promiscuous mode [ 1522.110594][T15666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.132908][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.159005][T15666] bridge_slave_1: entered allmulticast mode [ 1522.183436][T15666] bridge_slave_1: entered promiscuous mode [ 1522.377262][T15666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.451168][T15698] usb usb8: usbfs: process 15698 (syz.7.16948) did not claim interface 0 before use [ 1522.560855][T15666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.730450][T15666] team0: Port device team_slave_0 added [ 1522.756970][T15666] team0: Port device team_slave_1 added [ 1522.921258][T15666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.948978][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.976417][ T5166] Bluetooth: hci0: command tx timeout [ 1523.082458][T15666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.142367][T15666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.172609][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.296806][T15666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.579792][T15666] hsr_slave_0: entered promiscuous mode [ 1523.598446][T15666] hsr_slave_1: entered promiscuous mode [ 1523.604949][T15666] debugfs: 'hsr0' already exists in 'hsr' [ 1523.647666][T15666] Cannot create hsr debugfs directory [ 1523.925569][T15726] qnx4: no qnx4 filesystem (no root dir). [ 1524.462485][T15666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.578475][T15746] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16967'. [ 1524.587782][T15746] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16967'. [ 1524.804079][T15666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.999737][T15666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.032650][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16970'. [ 1525.046501][ T5166] Bluetooth: hci0: command tx timeout [ 1525.225090][T15666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.513143][T15770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.665479][T15666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1525.685837][T15666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1525.728452][T15666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1525.762466][T15666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1526.053149][T15666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.097225][T15666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.121212][T26272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.121332][T26272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.139696][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.139798][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.525367][T15805] binder: BC_ATTEMPT_ACQUIRE not supported [ 1526.554593][T15805] binder: 15804:15805 ioctl c0306201 2000000001c0 returned -22 [ 1526.607280][T15805] binder: 15804:15805 ioctl c038943b 200000000080 returned -22 [ 1526.702380][T15810] FAULT_INJECTION: forcing a failure. [ 1526.702380][T15810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1526.741649][T15810] CPU: 0 UID: 0 PID: 15810 Comm: syz.5.16992 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 1526.741680][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1526.741693][T15810] Call Trace: [ 1526.741702][T15810] [ 1526.741711][T15810] dump_stack_lvl+0x189/0x250 [ 1526.741746][T15810] ? __pfx____ratelimit+0x10/0x10 [ 1526.741777][T15810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1526.741806][T15810] ? __pfx__printk+0x10/0x10 [ 1526.741850][T15810] should_fail_ex+0x414/0x560 [ 1526.741884][T15810] _copy_to_user+0x31/0xb0 [ 1526.741912][T15810] simple_read_from_buffer+0xe1/0x170 [ 1526.741948][T15810] proc_fail_nth_read+0x1b3/0x220 [ 1526.741975][T15810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1526.742001][T15810] ? rw_verify_area+0x2a6/0x4d0 [ 1526.742025][T15810] ? __lock_acquire+0xab9/0xd20 [ 1526.742048][T15810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1526.742073][T15810] vfs_read+0x1fd/0x980 [ 1526.742098][T15810] ? fdget_pos+0x247/0x320 [ 1526.742122][T15810] ? __pfx___mutex_lock+0x10/0x10 [ 1526.742152][T15810] ? __pfx_vfs_read+0x10/0x10 [ 1526.742180][T15810] ? __fget_files+0x2a/0x420 [ 1526.742213][T15810] ? __fget_files+0x3a0/0x420 [ 1526.742274][T15810] ? __fget_files+0x2a/0x420 [ 1526.742313][T15810] ksys_read+0x145/0x250 [ 1526.742344][T15810] ? __pfx_ksys_read+0x10/0x10 [ 1526.742368][T15810] ? rcu_is_watching+0x15/0xb0 [ 1526.742400][T15810] ? do_syscall_64+0xbe/0x3b0 [ 1526.742436][T15810] do_syscall_64+0xfa/0x3b0 [ 1526.742466][T15810] ? lockdep_hardirqs_on+0x9c/0x150 [ 1526.742494][T15810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.742516][T15810] ? clear_bhb_loop+0x60/0xb0 [ 1526.742542][T15810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.742563][T15810] RIP: 0033:0x7fc8f918d3bc [ 1526.742581][T15810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1526.742600][T15810] RSP: 002b:00007fc8f9f11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1526.742622][T15810] RAX: ffffffffffffffda RBX: 00007fc8f93b5fa0 RCX: 00007fc8f918d3bc [ 1526.742637][T15810] RDX: 000000000000000f RSI: 00007fc8f9f110a0 RDI: 0000000000000004 [ 1526.742650][T15810] RBP: 00007fc8f9f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1526.742663][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1526.742675][T15810] R13: 0000000000000000 R14: 00007fc8f93b5fa0 R15: 00007ffc5aadfa28 [ 1526.742708][T15810] [ 1527.117639][ T5166] Bluetooth: hci0: command tx timeout [ 1527.137071][T15666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.380350][T15666] veth0_vlan: entered promiscuous mode [ 1527.455402][T15666] veth1_vlan: entered promiscuous mode [ 1527.525351][T15666] veth0_macvtap: entered promiscuous mode [ 1527.710448][T15666] veth1_macvtap: entered promiscuous mode [ 1527.735514][T15666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.771454][T15666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.778978][T23477] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1527.820714][T25046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.840028][T25046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.869898][T25046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.886744][T15825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1527.904837][T25046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.939130][T23477] usb 6-1: not running at top speed; connect to a high speed hub [ 1527.951594][T23477] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1527.963952][T23477] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1527.976859][T23477] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1527.988535][T23477] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1528.019959][T23477] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1528.030256][T23477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.069215][T23477] usb 6-1: Product: 뽘ﻏꯕ獥砃㜶삢㉧葡癵珖辪܂庛硉䌒똾陜ꃚڜ븽ﷃ䪤섊ﰒ뾓旦缅傛쉑᝕ẛ㓉㯝髇፦싞꿔像糤⥪殅䂐雌ឹ䓞窯狈僦噙灼屸὆㯾慭㾗Ⰽׄ᩹༻綩鯡 [ 1528.136865][T11391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.144920][T11391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.154351][T23477] usb 6-1: Manufacturer: 몥ᄟ䌦㰊 [ 1528.176827][T23477] usb 6-1: SerialNumber: 쌄鑣싙⻊⻚ꒌꂱnjᗺ銹⢑ጀB柖z얀퉔칌ဝ띷ᘳג컇Ǵᶭ庹꺕骰귟寍脘러㈺㠀栦睕켲ಙ儌똽鍌⮥벅࿘ᴥ뿼¦ᓟ槛毋㖘喆貿᪻ꑂ䔌箥᷼쾷싗㥩湚嶤ጡ垷㾖괩駸轑弖ꥩﮅ쁛䢶룬섥ᬜ㪿㝼严鐻뉣舫ꛍ鋆䁳僧ㅼꟴヵ떀촯ꂺ [ 1528.208781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.270702][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.288995][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.297100][T15819] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1528.297235][T15819] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1528.584658][T23477] usbhid 6-1:1.0: can't add hid device: -71 [ 1528.596803][T23477] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1528.622152][T15831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16934'. [ 1528.644789][T23477] usb 6-1: USB disconnect, device number 25 [ 1529.196608][ T5166] Bluetooth: hci0: command tx timeout [ 1531.445494][T15906] tap0: tun_chr_ioctl cmd 2148553947 [ 1532.030475][T15936] fuse: root generation should be zero [ 1532.387899][T15953] syzkaller0 speed is unknown, defaulting to 1000 [ 1533.193656][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17064'. [ 1533.723655][T16011] pim6reg1: entered promiscuous mode [ 1533.736241][T16011] pim6reg1: entered allmulticast mode [ 1534.018360][T16027] batadv_slave_1: entered promiscuous mode [ 1534.037881][T16026] batadv_slave_1: left promiscuous mode [ 1534.080242][ T30] audit: type=1326 audit(1753809837.141:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.5.17084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8f918e9a9 code=0x0 [ 1534.261699][ T30] audit: type=1326 audit(1753809837.321:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.0.17088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4234f8e9a9 code=0x0 [ 1535.070270][T16070] tmpfs: Invalid gid '0x00000000ffffffff' [ 1535.148766][T16072] 9pnet_virtio: no channels available for device ./file0 [ 1543.535261][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17266'. [ 1543.711572][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17270'. [ 1544.403927][T16465] netlink: 172 bytes leftover after parsing attributes in process `syz.8.17286'. [ 1545.083398][T26180] hid-generic 0005:16C0:5505.0054: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 1545.508542][T16512] "syz.5.17305" (16512) uses obsolete ecb(arc4) skcipher [ 1546.301939][T16557] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17321'. [ 1546.521280][T16563] tipc: Can't bind to reserved service type 1 [ 1546.605625][T16565] syzkaller0 speed is unknown, defaulting to 1000 [ 1548.610938][T16645] overlay: ./file0 is not a directory [ 1548.984760][T16657] 9pnet_fd: Insufficient options for proto=fd [ 1549.174539][T16673] overlayfs: failed to clone upperpath [ 1550.393421][T16732] trusted_key: encrypted_key: insufficient parameters specified [ 1551.369663][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.138058][T16780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 1552.279363][T16792] overlayfs: failed to clone upperpath [ 1553.567494][T16847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1554.501913][T16869] program syz.0.17464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1555.333276][T16887] support for the xor transformation has been removed. [ 1555.649903][T16896] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1557.022269][T16914] PM: Enabling pm_trace changes system date and time during resume. [ 1557.022269][T16914] PM: Correct system time has to be restored manually after resume. [ 1557.161873][T16918] netlink: 164 bytes leftover after parsing attributes in process `syz.8.17484'. [ 1558.066755][T16943] team0: No ports can be present during mode change [ 1564.799677][T16994] sctp: [Deprecated]: syz.8.17515 (pid 16994) Use of int in max_burst socket option deprecated. [ 1564.799677][T16994] Use struct sctp_assoc_value instead [ 1569.106828][T13073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1569.126641][T13073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1569.135716][T13073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1569.145154][T13073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1569.164537][T13073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1569.237627][T17002] syzkaller0 speed is unknown, defaulting to 1000 [ 1569.491158][T17002] chnl_net:caif_netlink_parms(): no params data found [ 1569.672800][T17002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.690760][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.701785][T17002] bridge_slave_0: entered allmulticast mode [ 1569.714056][T17002] bridge_slave_0: entered promiscuous mode [ 1569.733698][T17002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.745567][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.771446][T17002] bridge_slave_1: entered allmulticast mode [ 1569.783041][T17002] bridge_slave_1: entered promiscuous mode [ 1569.857160][T17002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.883925][T17002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.961645][T17002] team0: Port device team_slave_0 added [ 1569.971790][T17002] team0: Port device team_slave_1 added [ 1570.039689][T17002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.047320][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.074638][T17002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.102526][T17002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.110227][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.138603][T17002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.221814][T17002] hsr_slave_0: entered promiscuous mode [ 1570.239772][T17002] hsr_slave_1: entered promiscuous mode [ 1570.253206][T17002] debugfs: 'hsr0' already exists in 'hsr' [ 1570.259231][T17002] Cannot create hsr debugfs directory [ 1570.574023][T17002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1570.587618][T17002] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1570.602708][T17002] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1570.614970][T17002] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1570.892180][T17002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.944196][T17002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.973920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.981283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.029445][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.036716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.197907][ T5166] Bluetooth: hci2: command tx timeout [ 1571.382685][T17002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1571.777574][T17002] veth0_vlan: entered promiscuous mode [ 1571.804776][T17002] veth1_vlan: entered promiscuous mode [ 1571.880269][T17002] veth0_macvtap: entered promiscuous mode [ 1571.891910][T17002] veth1_macvtap: entered promiscuous mode [ 1571.933097][T17002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1571.950379][T17002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1571.968655][T25046] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.990250][T25046] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.020560][T25046] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.034402][T25046] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.190656][T25046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.210302][T25046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.250485][T25046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.259005][T25046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.276445][T13073] Bluetooth: hci2: command tx timeout [ 1574.678231][ T5166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1574.692761][ T5166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1574.714409][ T5166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1574.731878][ T5166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1574.750936][ T5166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1574.865490][T17046] syzkaller0 speed is unknown, defaulting to 1000 [ 1575.188126][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.358840][T13073] Bluetooth: hci2: command tx timeout [ 1575.412519][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.585013][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.825512][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.364827][T17046] chnl_net:caif_netlink_parms(): no params data found [ 1576.608244][ T12] bridge_slave_1: left allmulticast mode [ 1576.624253][ T12] bridge_slave_1: left promiscuous mode [ 1576.636594][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.647939][ T12] bridge_slave_0: left allmulticast mode [ 1576.653646][ T12] bridge_slave_0: left promiscuous mode [ 1576.660035][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.886694][T13073] Bluetooth: hci0: command tx timeout [ 1577.447720][T13073] Bluetooth: hci2: command tx timeout [ 1577.767529][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.793376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.819525][ T12] bond0 (unregistering): Released all slaves [ 1577.922667][T17046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.949211][T17046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.973133][T17046] bridge_slave_0: entered allmulticast mode [ 1577.997035][T17046] bridge_slave_0: entered promiscuous mode [ 1578.110015][T17046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.133233][T17046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.159164][T17046] bridge_slave_1: entered allmulticast mode [ 1578.178140][T17046] bridge_slave_1: entered promiscuous mode [ 1578.418724][T17046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.448546][T17046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.560476][T17046] team0: Port device team_slave_0 added [ 1578.593189][ T12] hsr_slave_0: left promiscuous mode [ 1578.610729][ T12] hsr_slave_1: left promiscuous mode [ 1578.631752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1578.666724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.695267][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1578.714533][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.792530][ T12] veth1_macvtap: left promiscuous mode [ 1578.818737][ T12] veth0_macvtap: left promiscuous mode [ 1578.824559][ T12] veth1_vlan: left promiscuous mode [ 1578.861236][ T12] veth0_vlan: left promiscuous mode [ 1578.956078][T13073] Bluetooth: hci0: command tx timeout [ 1580.849857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1581.017809][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1581.044496][T13073] Bluetooth: hci0: command tx timeout [ 1582.873843][T17046] team0: Port device team_slave_1 added [ 1583.118508][T13073] Bluetooth: hci0: command tx timeout [ 1583.153818][T17046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.167964][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.237384][T17046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.294096][T17046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.326028][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.396040][T17046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.634007][T17046] hsr_slave_0: entered promiscuous mode [ 1583.667484][T17046] hsr_slave_1: entered promiscuous mode [ 1583.674098][T17046] debugfs: 'hsr0' already exists in 'hsr' [ 1583.703210][T17046] Cannot create hsr debugfs directory [ 1585.668898][T17046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1585.705352][T17046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1585.760270][T17046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1585.790476][T17046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1586.148076][T17046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.221636][T17046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.255160][T26272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.262407][T26272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.327885][T25046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.335093][T25046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.024166][T17046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.161803][T17046] veth0_vlan: entered promiscuous mode [ 1587.222300][T17046] veth1_vlan: entered promiscuous mode [ 1587.331605][T17046] veth0_macvtap: entered promiscuous mode [ 1587.383820][T17046] veth1_macvtap: entered promiscuous mode [ 1587.433133][T17046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.471443][T17046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.550501][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.577609][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.611226][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.651699][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.889449][T26205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.916721][T26205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.097528][T26272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.132708][T26272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.204957][ T5166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1589.220725][ T5166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1589.229772][ T5166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1589.239447][ T5166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1589.250970][ T5166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1589.381405][T17152] syzkaller0 speed is unknown, defaulting to 1000 [ 1590.188713][T17152] chnl_net:caif_netlink_parms(): no params data found [ 1590.613860][T17152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.639808][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.659798][T17152] bridge_slave_0: entered allmulticast mode [ 1590.678009][T17152] bridge_slave_0: entered promiscuous mode [ 1590.706562][T17152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.713853][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.736788][T17152] bridge_slave_1: entered allmulticast mode [ 1590.755261][T17152] bridge_slave_1: entered promiscuous mode [ 1590.881078][T17152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.939509][T17152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.225278][T17152] team0: Port device team_slave_0 added [ 1591.300746][T17152] team0: Port device team_slave_1 added [ 1591.356171][T13073] Bluetooth: hci5: command tx timeout [ 1591.500757][T17152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.525079][T17152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.604445][T17152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.657357][T17152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.664357][T17152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.743567][T17152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.953701][T17152] hsr_slave_0: entered promiscuous mode [ 1591.983978][T17152] hsr_slave_1: entered promiscuous mode [ 1592.009467][T17152] debugfs: 'hsr0' already exists in 'hsr' [ 1592.015259][T17152] Cannot create hsr debugfs directory [ 1593.436463][T13073] Bluetooth: hci5: command tx timeout [ 1594.533861][T17152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1594.580177][T17152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1594.616814][T17152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1594.677649][T17152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1595.040170][T17152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1595.112280][T17152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.159898][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.167154][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.243537][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.250970][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.388882][T17152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1595.517420][T13073] Bluetooth: hci5: command tx timeout [ 1595.868830][T17152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.765432][T17152] veth0_vlan: entered promiscuous mode [ 1596.808916][T17152] veth1_vlan: entered promiscuous mode [ 1596.904636][T17152] veth0_macvtap: entered promiscuous mode [ 1596.946545][T17152] veth1_macvtap: entered promiscuous mode [ 1597.005626][T17152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.072501][T17152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.129385][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.167839][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.214295][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.246331][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.558757][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.596142][T13073] Bluetooth: hci5: command tx timeout [ 1597.606448][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.778497][T26272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.827010][T26272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.815247][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1625.130223][ T5166] Bluetooth: hci4: command 0x0406 tx timeout [ 1630.236066][T32339] Bluetooth: hci3: command 0x0406 tx timeout [ 1674.254400][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1691.694435][T32339] Bluetooth: hci2: command 0x0406 tx timeout [ 1700.477574][ T31] INFO: task syz.5.17454:16842 blocked for more than 143 seconds. [ 1700.507123][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 1700.514330][ T31] Blocked by coredump. [ 1700.536194][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1700.557772][ T31] task:syz.5.17454 state:D stack:23528 pid:16842 tgid:16842 ppid:15520 task_flags:0x40044c flags:0x00004004 [ 1700.584479][ T31] Call Trace: [ 1700.594891][ T31] [ 1700.601300][ T31] __schedule+0x1737/0x4d30 [ 1700.612560][ T31] ? __lock_acquire+0xab9/0xd20 [ 1700.623604][ T31] ? schedule+0x165/0x360 [ 1700.633722][ T31] ? __lock_acquire+0xab9/0xd20 [ 1700.644576][ T31] ? __pfx___schedule+0x10/0x10 [ 1700.655366][ T31] ? schedule+0x91/0x360 [ 1700.665471][ T31] schedule+0x165/0x360 [ 1700.674278][ T31] schedule_preempt_disabled+0x13/0x30 [ 1700.686222][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 1700.691854][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 1700.727443][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1700.743885][ T31] ? exit_mm+0xcc/0x2c0 [ 1700.748377][ T31] ? __pfx_mm_release+0x10/0x10 [ 1700.753318][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1700.765992][ T31] down_read+0x98/0x2e0 [ 1700.775927][ T31] exit_mm+0xcc/0x2c0 [ 1700.780220][ T31] ? __pfx_exit_mm+0x10/0x10 [ 1700.795300][ T31] ? rcu_is_watching+0x15/0xb0 [ 1700.805459][ T31] do_exit+0x648/0x2300 [ 1700.815624][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1700.836444][ T31] ? __pfx_do_exit+0x10/0x10 [ 1700.841385][ T31] ? cgroup_freezing+0x20/0x350 [ 1700.851855][ T31] do_group_exit+0x21c/0x2d0 [ 1700.872474][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1700.882611][ T31] get_signal+0x1286/0x1340 [ 1700.892763][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1700.905901][ T31] ? rcu_is_watching+0x15/0xb0 [ 1700.910856][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1700.939260][ T31] ? __bad_area_nosemaphore+0x3fb/0x780 [ 1700.945003][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1700.965940][ T31] irqentry_exit_to_user_mode+0x81/0x120 [ 1700.975901][ T31] exc_page_fault+0x9f/0xf0 [ 1700.985900][ T31] asm_exc_page_fault+0x26/0x30 [ 1700.990827][ T31] RIP: 0033:0x7fc8f9054f03 [ 1701.005550][ T31] RSP: 002b:00007ffc5aadfb50 EFLAGS: 00010246 [ 1701.025810][ T31] RAX: 0000200000000180 RBX: 0000000000000008 RCX: 0000000000000000 [ 1701.034040][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00005555588b83c8 [ 1701.065948][ T31] RBP: 00007ffc5aadfc58 R08: 0000000000000000 R09: 0000000000000000 [ 1701.075314][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fc8f93b5fac [ 1701.106408][ T31] R13: 00007ffc5aadfc80 R14: fffffffffffffffe R15: 00007ffc5aadfca0 [ 1701.114569][ T31] [ 1701.128146][ T31] [ 1701.128146][ T31] Showing all locks held in the system: [ 1701.145919][ T31] 1 lock held by khungtaskd/31: [ 1701.156108][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1701.175991][ T31] 2 locks held by getty/5609: [ 1701.202551][ T31] #0: ffff88814da870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1701.242024][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1701.272760][ T31] 3 locks held by kworker/u9:2/32339: [ 1701.282819][ T31] #0: ffff8880645c9948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1701.304760][ T31] #1: ffffc900105e7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1701.348254][ T31] #2: ffff8880666c0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1701.376144][ T31] 1 lock held by syz.5.17454/16842: [ 1701.387017][ T31] #0: ffff8880634781e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 1701.405901][ T31] 5 locks held by syz.5.17454/16844: [ 1701.423950][ T31] 1 lock held by syz.8.17529/17030: [ 1701.434078][ T31] #0: ffff8880244a37a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 1701.454338][ T31] 1 lock held by syz.8.17529/17031: [ 1701.464533][ T31] [ 1701.467584][ T31] ============================================= [ 1701.467584][ T31] [ 1701.488007][ T31] NMI backtrace for cpu 0 [ 1701.488032][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 1701.488058][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1701.488071][ T31] Call Trace: [ 1701.488080][ T31] [ 1701.488089][ T31] dump_stack_lvl+0x189/0x250 [ 1701.488127][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1701.488156][ T31] ? __pfx__printk+0x10/0x10 [ 1701.488198][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1701.488228][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1701.488258][ T31] ? __pfx__printk+0x10/0x10 [ 1701.488291][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1701.488319][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1701.488348][ T31] watchdog+0xf93/0xfe0 [ 1701.488377][ T31] ? watchdog+0x1de/0xfe0 [ 1701.488405][ T31] kthread+0x70e/0x8a0 [ 1701.488440][ T31] ? __pfx_watchdog+0x10/0x10 [ 1701.488461][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.488494][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1701.488521][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1701.488549][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.488580][ T31] ret_from_fork+0x3f9/0x770 [ 1701.488610][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1701.488642][ T31] ? __switch_to_asm+0x39/0x70 [ 1701.488659][ T31] ? __switch_to_asm+0x33/0x70 [ 1701.488677][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.488706][ T31] ret_from_fork_asm+0x1a/0x30 [ 1701.488742][ T31] [ 1701.488750][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1701.644141][ C1] NMI backtrace for cpu 1 [ 1701.644162][ C1] CPU: 1 UID: 0 PID: 17031 Comm: syz.8.17529 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 1701.644185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1701.644197][ C1] RIP: 0010:validate_mm+0xfd/0x4b0 [ 1701.644226][ C1] Code: 24 60 48 c7 c6 ff ff ff ff e8 9f 84 63 09 48 85 c0 0f 84 e4 02 00 00 48 89 c3 48 8d 78 40 48 89 f8 48 c1 e8 03 42 80 3c 30 00 <74> 05 e8 3c 5a 0f 00 45 89 ee 48 8b 43 40 48 89 44 24 18 4c 8b 64 [ 1701.644241][ C1] RSP: 0018:ffffc900106af460 EFLAGS: 00000246 [ 1701.644258][ C1] RAX: 1ffff11009812408 RBX: ffff88804c092000 RCX: 0000000000080000 [ 1701.644272][ C1] RDX: ffffc9000bf39000 RSI: 000000000007ffff RDI: ffff88804c092040 [ 1701.644284][ C1] RBP: ffffc900106af590 R08: ffff888026cc8000 R09: 0000000000000004 [ 1701.644297][ C1] R10: 0000000000000003 R11: 0000000000000002 R12: 00001ffff627e000 [ 1701.644308][ C1] R13: 000000000000127b R14: dffffc0000000000 R15: 0000000000000000 [ 1701.644320][ C1] FS: 00007ff09cdf66c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 1701.644335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1701.644347][ C1] CR2: 00007feffc182ab8 CR3: 000000006bca8000 CR4: 00000000003526f0 [ 1701.644363][ C1] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000008 [ 1701.644374][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1701.644386][ C1] Call Trace: [ 1701.644395][ C1] [ 1701.644408][ C1] ? __pfx_validate_mm+0x10/0x10 [ 1701.644439][ C1] ? up_write+0x1c4/0x420 [ 1701.644462][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1701.644490][ C1] vma_link+0x366/0x450 [ 1701.644517][ C1] ? __pfx_vma_link+0x10/0x10 [ 1701.644546][ C1] ? anon_vma_clone+0x49b/0x4f0 [ 1701.644565][ C1] ? anon_vma_name+0x87/0xf0 [ 1701.644588][ C1] copy_vma+0x70c/0x940 [ 1701.644617][ C1] ? __pfx_copy_vma+0x10/0x10 [ 1701.644641][ C1] ? preempt_schedule_irq+0xde/0x150 [ 1701.644669][ C1] ? __pfx_move_page_tables+0x10/0x10 [ 1701.644694][ C1] ? irqentry_exit+0x74/0x90 [ 1701.644732][ C1] move_vma+0x81f/0x1840 [ 1701.644761][ C1] ? arch_get_unmapped_area_topdown+0x251/0xbc0 [ 1701.644791][ C1] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1701.644816][ C1] ? __pfx_move_vma+0x10/0x10 [ 1701.644850][ C1] ? mm_get_unmapped_area+0xa7/0xd0 [ 1701.644875][ C1] ? cap_mmap_addr+0xb0/0x100 [ 1701.644896][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1701.644913][ C1] ? security_mmap_addr+0x71/0x270 [ 1701.644945][ C1] mremap_to+0x6d6/0x7a0 [ 1701.644974][ C1] ? __pfx_mremap_to+0x10/0x10 [ 1701.645002][ C1] ? check_prep_vma+0x740/0xae0 [ 1701.645032][ C1] __se_sys_mremap+0xa0b/0xef0 [ 1701.645068][ C1] ? __pfx___se_sys_mremap+0x10/0x10 [ 1701.645106][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1701.645131][ C1] ? __x64_sys_mremap+0x20/0xc0 [ 1701.645156][ C1] do_syscall_64+0xfa/0x3b0 [ 1701.645182][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1701.645206][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.645223][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1701.645243][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.645260][ C1] RIP: 0033:0x7ff09ef8e9a9 [ 1701.645276][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.645291][ C1] RSP: 002b:00007ff09cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1701.645308][ C1] RAX: ffffffffffffffda RBX: 00007ff09f1b5fa0 RCX: 00007ff09ef8e9a9 [ 1701.645321][ C1] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000006000 [ 1701.645333][ C1] RBP: 00007ff09f010d69 R08: 0000200000ffd000 R09: 0000000000000000 [ 1701.645345][ C1] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1701.645355][ C1] R13: 0000000000000000 R14: 00007ff09f1b5fa0 R15: 00007ffdb9019068 [ 1701.645377][ C1] [ 1701.646538][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1701.646560][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 1701.646589][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1701.646606][ T31] Call Trace: [ 1701.646617][ T31] [ 1701.646629][ T31] dump_stack_lvl+0x99/0x250 [ 1701.646667][ T31] ? __asan_memcpy+0x40/0x70 [ 1701.646705][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1701.646739][ T31] ? __pfx__printk+0x10/0x10 [ 1701.646787][ T31] vpanic+0x281/0x750 [ 1701.646818][ T31] ? __pfx_vpanic+0x10/0x10 [ 1701.646846][ T31] ? preempt_schedule+0xae/0xc0 [ 1701.646881][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1701.646921][ T31] panic+0xb9/0xc0 [ 1701.646948][ T31] ? __pfx_panic+0x10/0x10 [ 1701.646977][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1701.647013][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1701.647046][ T31] watchdog+0xfd2/0xfe0 [ 1701.647078][ T31] ? watchdog+0x1de/0xfe0 [ 1701.647111][ T31] kthread+0x70e/0x8a0 [ 1701.647151][ T31] ? __pfx_watchdog+0x10/0x10 [ 1701.647186][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.647222][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1701.647253][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1701.647284][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.647320][ T31] ret_from_fork+0x3f9/0x770 [ 1701.647354][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1701.647393][ T31] ? __switch_to_asm+0x39/0x70 [ 1701.647413][ T31] ? __switch_to_asm+0x33/0x70 [ 1701.647433][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.647471][ T31] ret_from_fork_asm+0x1a/0x30 [ 1701.647511][ T31] [ 1702.186594][ T31] Kernel Offset: disabled [ 1702.190927][ T31] Rebooting in 86400 seconds..